- All Argo CD container images are now signed with cosign and include SLSA Level 3 provenance.
- A security fix from 2.9.4 introduces a breaking API change (see advisory GHSA-92mw-q256-5vwg).
- UI bug fixed: proper Content-Type header is now set for certain requests.