- All Argo CD container images are now signed with cosign and include SLSA Level 3 provenance for verification.
- Fixed secret‑masking bugs in controller, server, and SSD components and added pprof endpoint registration in the repo server.
- Updated DOMPurify and brace‑expansion dependencies to remediate CVE‑2026 security issues.
