- Fixed a bug where the application controller could fail to refresh applications, leading to out‑of‑sync resources.
- Added cosign signatures and SLSA Level 3 provenance for all container images and CLI binaries.
- Updated CI to run yarn install with a frozen lockfile and bumped the fast‑xml‑parser dependency.
