- Updated Flux CLI and controllers (Kustomize v5.3, Kubernetes v1.28.4) with Gitea bootstrap support, force/reset commands for HelmRelease, and expanded alerting (NATS, Bitbucket Server).
- Helm controller overhaul adds automatic recovery of pending releases, per‑object drift detection, new status fields, and promotion of HelmRelease to v2beta2 with several deprecated fields and new drift‑detection options.
- Security‑focused additions include OIDC identity matching for keyless Cosign verification in OCIRepository/HelmChart, an insecure flag for HelmRepository and ImageRepository, plus updated documentation.