- All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for verification.
- Added support for the `helm.sh/resource-policy: keep` Helm annotation.
- Upgraded HAProxy to 2.6.12 and Redis to 7.0.11 to patch CVE‑2023‑0464 and fixed several UI and logging bugs.
