- All Argo CD container images and CLI binaries are now signed with Cosign and include SLSA Level 3 provenance for secure verification.
- UI bug fixed: RollingSync step now displays correctly when label conditions match no step.
- Security patch applied: mitigated grpc-go CVE‑2026‑33186 and upgraded lodash dependency.
