- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance
- Documentation added for verifying signatures and provenance during upgrade
- Dependency bump: slsa‑framework/slsa‑github‑generator upgraded to v2.1.0
