- Added cosign signatures and SLSA Level 3 provenance for all Argo CD container images and CLI binaries.
- Fixed panic on nil APIResource in permission validator and resolved log overflow caused by wrap‑lines toggle.
- Updated Go to 1.25.9, aligned Go versions across Dockerfiles, and bumped otel/sdk to address CVEs.
