- Container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance
- Security fix introduces a breaking API change; see the advisory before upgrading
- Multiple bug fixes (UI content‑type handling, API header enforcement, action owner refs, gRPC keep‑alive, appset cache, duplicate definitions) and a documentation format correction