- Fixed idle connection buildup in the appset Bitbucket SCM/PR generator by cloning http.DefaultTransport.
- Patched a security vulnerability where repository.GetDetailedProject exposed repo secrets.
- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance.
