- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for verification (security).
- Multiple bug fixes: Lua array actions, Azure DevOps token headers, FIPS‑compliant SSH key exchange, kustomize edit component checks, and helm GetTags cache handling.
- Docs updated with 3.0 migration guidance and remediation for ApplyOutOfSyncOnly apps; Go runtime upgraded to 1.24.6.
