- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for secure verification.
- Fixed five bugs: missing workqueue metrics, correct StatefulSet shard inference, stopped initializing deployment informer when dynamic sharding is disabled, set kustomize build directory, and added missing controller RBAC entries.
- Added ClusterRole/ClusterRoleBinding for the ApplicationSet controller.