- All Argo CD container images are now signed with cosign and include SLSA Level 3 provenance for enhanced supply‑chain security.
- Multiple bug fixes: kustomize checksum uses curl, hydrator retry handling, corrected CronWorkflow schedule format, fixed escaped URL routing for repo credentials, and improved untar symlink checks.
- Dependency updates: go‑git bumped to 5.19.2 and golang group updated to v1.26.9.
