- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for secure verification.
- Bug fixes include preserving annotations during appset hydration, OIDC userinfo endpoint checks, proper resourceVersion updates on termination retries, and correct handling of read/write secrets.
- Dependencies updated to Kubernetes v1.34.2 and GitOps engine v0.7.1; documentation improved with healthcheck upgrade notes and markdown-formatted sync wave guide.
