- All Argo CD container images are now cosign‑signed and include SLSA Level 3 provenance for images and CLI binaries.
- RBAC is now verified on every message rather than only during the handshake.
- Upgrade documentation updated to remind users to review the migration guide when moving from a previous minor version.
