- All Argo CD container images are now signed with Cosign and include SLSA Level 3 provenance for enhanced supply‑chain security.
- Multiple critical bugs are fixed, including Helm version pinning, a server crash race condition, CVE‑2025‑26791, kustomization file lookup errors, app refresh compareWith handling, and annotated git‑tag caching.
- Dependency updates: upgraded golang jwt library to v4.5.2.
