- Added contextual login for Helm charts from ECR, ACR, and GAR; introduced OCIRepository.layerSelector and Azure Blob SAS token authentication.
- Implemented artifact filtering by semver/regex, ignore‑paths for build/push, and panic recovery to mitigate denial‑of‑service in multi‑tenant clusters.
- Updated controllers to Kubernetes v1.25, Kustomize v4.5.7, Helm v3.9.4 and expanded documentation.