- API now returns "Unauthorized" instead of "Not found" for non‑existent Applications, preventing enumeration but breaking callers that relied on the previous response.
- The change affects argocd app create CLI versions ≤ 2.5.0‑rc1 and may require work‑arounds (see issue #13000).
- All Argo CD container images and CLI binaries are now signed with cosign; verification instructions are added to the docs.