- Added cosign signatures and SLSA Level 3 provenance for all container images and CLI binaries, with verification documentation.
- Patched CVE‑2024‑21538 by upgrading the cross‑spawn dependency to v7.0.5 and fixed API mergeLogStreams channel handling.
- Reminder to consult the upgrade guide when moving from a different minor version.
