- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for verification
- Multiple bug fixes: fully populate app destination before project checks, address CVE‑2025‑26791 via redoc upgrade, correctly handle annotated git tags in repo cache, and fix UI/RBAC project role handling
- Dependency updates (golang jwt, redoc) and reminder to review upgrade documentation for minor version upgrades
