- 🔧 Argo Workflows (CNCF Graduated) — fixed semaphore initialization so a concurrency limit of
0(e.g. an approval gate) is no longer mistaken for a failed config lookup. PR #16805 - 🔒 OpenTelemetry Kotlin (CNCF) — removed untrusted request-header values from B3 trace propagator error messages to prevent log/metric injection and error-cardinality blowup. PR #975





