- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for verification (security).
- Bug fixes for progressive sync backports, server‑side diff reuse when masking secrets, SSD CLI secret mask spoofing prevention, and hiding secrets in last‑applied‑configuration annotations.
- Dependency update: fast‑xml‑parser bumped to 4.5.6 and version bumped to 3.4.7.
