- Helm controller no longer re-applies chart CRDs on upgrades with server-side apply and recovers HelmReleases stuck in Ready=Unknown after failed status patches.
- Source controller normalizes Azure Blob ETags to prevent redundant downloads and evicts stale Helm repository index entries to avoid "Cache is full" errors.
- Kustomize controller extends SOPS decryption error redaction to postBuild substituteFrom values and introduces the optional DisableCommitStatusEvent feature gate.