- Fixed enqueuing logic for source Flux objects and corrected Go template separator issue with Helm 4.1.3
- Added DefaultToRetryOnFailure feature gate to avoid stuck canceled HelmReleases when CancelHealthCheckOnNewRevision is enabled
- Patched TLS handshake DoS vulnerability (CVE‑2026‑27138) by rebuilding controllers with Go 1.26.1)