- All Argo CD container images are now signed with cosign and SLSA‑Level 3 provenance for secure verification
- Multiple bug fixes including appset fallback, diff field handling, helm registry password handling, repo‑server cmd‑param mounting, annotation backfill logic, progressive sync, Entra ID claim handling, and OIDC refresh token renewal
- Upgrade documentation updated and version bumped to 3.4.6
