- All Argo CD container images are now signed with cosign and include SLSA Level 3 provenance for secure verification.
- Multiple bug fixes across components (kustomize checksum, hydrator retries, reposerver leaks, UI Helm OCI toggle, OCI caching, CronWorkflow time format, untar symlink handling, thread‑safe logging, and OCI cache synchronization).
- Dependency updates: go‑git bumped to 5.19.2, grpc to 1.84.0, and other golang group packages.
