chore(deps): update dependency argoproj/argo-cd to v3.4.3 #42
Reference in New Issue
Block a user
Delete Branch "renovate/argoproj-argo-cd-3.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v3.2.6→v3.4.3Release Notes
argoproj/argo-cd (argoproj/argo-cd)
v3.4.3Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
f435b0ffix(cli): return immediately from 'app wait' when app is already in desired state (#12211) (#27503) (#27713) (jheyduk)b39fe4ffix(lint): unnecessary nesting (cherry-pick #27815 for 3.4) (#27817) (argo-cd-cherry-pick-bot[bot], Michael Crenshaw)668f2c5fix(ui): don't prefetch errors (#27877) (cherry-pick #27925 for 3.4) (#28024) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)b796979fix(ui): return full source for non-hydrator apps in Parameters tab (cherry-pick #26946 for 3.4) (#27964) (Gabriel Barreto, himeshp)5d3f8a0fix: honor repo depth setting in gitSourceHasChanges and fetch functions (cherry-pick #27838 for 3.4) (#28043) (argo-cd-cherry-pick-bot[bot], alexandresavicki, Cursor)35ed877fix: nil-check (cherry-pick #28039 for 3.4) (#28040) (argo-cd-cherry-pick-bot[bot], Blake Pettersson, Soumya Ghosh Dastidar)b0f1553fix: prevent InvalidSpecError race in application controller startup (cherry-pick #27672 for 3.4) (#27845) (argo-cd-cherry-pick-bot[bot], Michele Baldessari)4fa0950fix: truncate labels for deletion hook resources (cherry-pick #27542 for 3.4) (#27714) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)Dependency updates
0edd404chore(deps): bump redoc/dompurify to v3.4.0 in /ui for fixing CVE-2026-41240(cherry-pick 3.4) (#27913) (Alka Kumari)Other work
ce55c85fix(gitops-engine): fix nil pointer dereference error in removeWebookMutation() (cherry-pick #27749 for 3.4) (#28031) (argo-cd-cherry-pick-bot[bot], Pierre Guinoiseau)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.2...v3.4.3
v3.4.2Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
b15e9e3fix: Revert "fix: avoid calling UpdateRevisionForPaths unnecessary (#25151)" (cherry-pick #27241 for 3.4) (#27251) (argo-cd-cherry-pick-bot[bot], Alexander Matyushentsev)570ccbcfix: prevent panic on nil APIResource in permission validator (cherry-pick #26610 for 3.4) (#27752) (argo-cd-cherry-pick-bot[bot], Andy Lo-A-Foe)Dependency updates
6eb6215chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (cherry-pick #27401 for 3.4) (#27734) (argo-cd-cherry-pick-bot[bot], dependabot[bot])Other work
35ea43cMerge commit from fork (Blake Pettersson)bcb4298Merge commit from fork (Peter Jiang)4e71577chore: bump otel/sdk to 1.43.0 (release-3.4) (#27806) (Nitish Kumar)6e227baci: pin images of setup-qemu-action, setup-buildx-action and goreleaser CLI version (cherry-pick #27060 for 3.4) (#27731) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)87e9148fix(gitops-engine): apply HideSecretData to server-side diff results for Secrets (cherry-pick #27598 for 3.4) (#27754) (argo-cd-cherry-pick-bot[bot], Peter Jiang, downfa11)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.1...v3.4.2
v3.4.1Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
05504d6feat(appset): add Health field to ApplicationSet status (#25753) (Peter Jiang)f83906dfeat(appset): optimize appset controller performance when grabbing cluster secrets (#25624) (#25577) (rumstead)ed6d2c5feat(controller): Annotation to pause reconciliation for a specific cluster (#26442) (Drew Bailey, Drew Bailey)3157fb1feat(helm): support wildcard glob patterns forvalueFiles(cherry-pick #26768 for 3.4) (#26919) (argo-cd-cherry-pick-bot[bot], Nitish Kumar)5072899feat(hydrator): making configurable authorName/Email used for hydration commit (#22847) (#25746) (Aditya Raj)8ed52b2feat(notification): add appProject access to notification templates (#26437) (#26470) (Aditya Raj)e1aeb79feat(ui): AppSet Slide Out Summary (#26490) (Peter Jiang, reggie-k)5ab598efeat(ui): add annotation filtering support to applications list (#25590) (Ji Kwan)1391e2ffeat(ui): add appset tree-view details page (#26262) (Peter Jiang, reggie-k, Keith Chong)7208578feat(ui): appset list page and filters (#25837) (Peter Jiang)ff45972feat(ui): enable hydrator support in app create panel (#26485) (jwinters01, Alexandre Gaudreault)1214946feat(ui): support hydrator properties in summary tab (#26152) (jwinters01, Michael Crenshaw)b414432feat: Add application filter for operation status to UI (#25636) (Dylan Schlager)408e99efeat: Allow custom User-Agent headers for Helm repository requests (#25473) (Yugan)19b41b9feat: ApplicationSet watch API (#26409) (Peter Jiang, nitishfy)b442167feat: Document and expose K8S API client environment variables(#8527) (#25145) (gami, Alexandre Gaudreault)7a3d6f1feat: Implement nmstate health checks (#26506) (#26507) (Sander Tervoert)5859065feat: add ApplicationSet listResourceEvents API (#25537) (Peter Jiang, Alexy Mantha)2793097feat: add OTEL instrumentation for authentication and handlers (#25296) (Mike Cutsail, Alexandre Gaudreault)b7e2027feat: add Prune and Delete as application level sync option (#23370) (Arthur Outhenin-Chalandre)73b4d98feat: add--no-install-recommendsinargocd-base#25841 (#25852) (Jakub Rudnik, Nitish Kumar)13bc5aefeat: add argocd account session-token command (#15277) (#24638) (Alex Eftimie, Alexandre Gaudreault, Peter Jiang)d8635cafeat: add clear-all button to applications list filters (#26007) (Jaewoo Choi)c2e594cfeat: disable gRPC service config DNS TXT lookups by default (#26077) (Valentin Stoican, Valentin Stoican)3cb4955feat: expose notifications controller processors count via cmd params (#26798) (Kirill Bilchenko)c0a2a57feat: implement application cache synchronization in appset controller (#26578) (Alexander Matyushentsev)ef75a2efeat: limit max certificates and known hosts in stream parsing (#25777) (Ankit Pramanik)f85ad11feat: remove unused reposFilter from Applications list (#24667) (Jaewoo Choi)6f0de8bfeat: update health checks for Numaflow resources (#25698) (Dillen Padhiar)Bug fixes
9fd02aaRevert "fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.4)" (#27402) (Michael Crenshaw)f4e7a6e[release-3.4] fix: improve perf: switch parentUIDToChildren to map of sets, remove cache rebuild (#26863) (#27110) (Jonathan Ogilvie)21e13a6fix(UI): show RollingSync step clearly when labels match no step (cherry-pick #26877 for 3.4) (#26882) (argo-cd-cherry-pick-bot[bot], Atif Ali)ede9229fix(actions): Use correct annotation for CNPG suspend/resume (#26711) (Rouke Broersma)6665f94fix(appcontroller): application controller in core mode fails to sync when server.secretkey is missing (#26793) (#27476) (Anand Francis Joseph)f45ee22fix(appset): change appset resource status count to 5000 by default (#26249) (Peter Jiang)bb894e8fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (#25622) (OpenGuidou)330077cfix(appset): fix post-generator selector ignoring labels in GoTemplate mode (#26717) (Josef Kolář)bdc3447fix(appset): update appset resources after creation (#26511) (Peter Jiang)59f229bfix(ci): Add missing git-lfs installer checksum for ppc64le (#26835) (Oliver Gondža)cbc7ecdfix(ci): Inconsistent use of IMAGE_REGISTRY and IMAGE_NAMESPACE Makefile variables (#25846) (#25860) (dudinea)2253481fix(ci): Remove stale label when Issue/PR is updated (#26452) (S Kevin Joe Harris)e70034afix(ci): add .gitkeep to images dir (cherry-pick #26892 for 3.4) (#26912) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)4a5d3a7fix(ci): add gitops-engine unit tests to CI (#25863) (Peter Jiang)92c5389fix(ci): ensure cherry-pick commits include DCO sign-off (#26124) (Anagha S Devan)aadf2affix(ci): fix deleting files on linux in make build-ui (#26134) (#26135) (dudinea)946a3abfix(ci): fix make image DEV_IMAGE=true on non-amd64 architecture (#25897) (#25898) (dudinea, Nitish Kumar)b7f9f6dfix(ci): run yarn install with --frozen-lockfile (cherry-pick #27099 for 3.4) (#27350) (dudinea)a19a83afix(cli): uses DrySource revision for app diff/manifests with sourceHydrator (#23817) (cherry-pick #24670 for 3.4) (#27483) (argo-cd-cherry-pick-bot[bot], Aditya Raj)956a6a1fix(controller): handle comma-separated hook annotations for PreDelete/PostDelete hooks (#26420) (Linghao Su)f50abb6fix(controller): reduce secret deepcopies and deserialization (#27049) (cherry-pick release-3.4) (#27132) (rumstead)af05c56fix(dashboards): Correct job label for the Controller Telemetry Panel (#26548) (Daniel Barnes)986cdf0fix(dev): skip Tilt rebuild on test file changes (#26624) (Nitish Kumar)63698bdfix(dex): run as user 1001 (#26726) (#26757) (Michael Crenshaw)8a507b7fix(dex): run as user 1001 (#26726) (#26775) (Michael Crenshaw)99e29c7fix(docs): Fix manifest path in Source Hydrator docs (cherry-pick #27123 for 3.4) (#27166) (argo-cd-cherry-pick-bot[bot], Oliver Gondža)3eeebd8fix(docs): PR title guide from refactor to chore and reformat json (#26450) (Jaewoo Choi)d66ad45fix(docs): update other sections of feature maturity to match feature status in overview (#26411) (Kanika Rana)1dc85e5fix(engine): always preserve sync status for hooks (#25692) (Alexandre Gaudreault, Regina Voloshin, github-actions[bot], reggie-k, dependabot[bot], renovate[bot], Afzal Ansari, Blake Pettersson, Julie Vogelman, Michael Crenshaw)a1d68cafix(engine): correctly set prune confirmation message in setRunningPhase (#25915) (Arthur Outhenin-Chalandre)95d19f2fix(engine): improve operation phase messages (#25668) (Alexandre Gaudreault)8259711fix(health): app missing health only when all resources are missing (#23995) (#25962) (Alexandre Gaudreault, Peter Jiang)a22f33dfix(health): configconnectorcontext and configconnector (#26308) (#26309) (Niclas Mietz)6eea558fix(health): use note.drySha when available (#26698) (Michael Crenshaw)afdf99ffix(helm): Improve error message when helm cmd fails (#26159) (Oliver Gondža)67d12ebfix(hook): Fixed hook code issues that caused stuck applications on "Deleting" state (Issues #18355 and #17191) (cherry-pick #26724 for 3.4) (#27257) (argo-cd-cherry-pick-bot[bot], Nikolaos Astyrakakis)2283784fix(hooks): always remove finalizers (#23226) (#25916) (Alexandre Gaudreault, Leonardo Luz Almeida)67712c1fix(hydrator): .gitattributes include deeply nested files (#25870) (#26011) (Michael Crenshaw)3453367fix(hydrator): Fix compilation error (#26024) (Oliver Gondža)ef40ba8fix(hydrator): empty links for failed operation (#25025) (#26014) (Michael Crenshaw)6f21978fix(hydrator): git fetch needs creds (#25727) (#25738) (Michael Crenshaw)a439c6cfix(hydrator): hydrated sha missing on no-ops (#25694) (#25695) (Michael Crenshaw)6994a42fix(hydrator): pass destination.namespace to manifest rendering (#25478) (#25699) (Sean Liao)33247b9fix(hydrator): preserve all source type fields in GetDrySource() (cherry-pick #27189 for 3.4) (#27196) (argo-cd-cherry-pick-bot[bot], Alexandre Gaudreault)0a2ae95fix(hydrator): race when pushing notes (#25700) (Michael Crenshaw)e5e00d3fix(hydrator): use refresh paths from drySource when source hydration is enabled (#25516) (Codey Jenkins, pbhatnagar-oss, Alexandre Gaudreault)fee6962fix(makefile): Improve performance of make lint-local and dependent goals (#26025) (Oliver Gondža)4fabbcefix(metrics): more consistent oci metrics (#25549) (Blake Pettersson)de99b70fix(reposerver): make temp dir cleanup best-effort inTestGenerateManifestsHelmWithRefs_CachedNoLsRemote(#26742) (Nitish Kumar)8739f91fix(reposerver): using timeouts in http transport for Github App authentication (#26762) (Anand Francis Joseph)0a3f634fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.4) (#27499) (argo-cd-cherry-pick-bot[bot], Taylor Thomas, Blake Pettersson)a244f7cfix(server): Ensure OIDC config is refreshed at server restart (cherry-pick #26913 for 3.4) (#27115) (argo-cd-cherry-pick-bot[bot], OpenGuidou)28b90a7fix(server): OIDC config via secrets fails (#18269) (#26214) (Valéry Fouques)5ed403cfix(server): fix find container logic for terminal (cherry-pick #26858 for 3.4) (#26933) (argo-cd-cherry-pick-bot[bot], Linghao Su)d9c83dafix(server): invalidate JWT tokens on logout (#26388) (Anand Francis Joseph)df3be1cfix(server): update resourceVersion on Terminate retry (#25650) (Michael Crenshaw)24615c8fix(state): fix(controller): display correct SyncWave for hook resources #26208 (#26240) (Linghao Su)aced2b1fix(ui): Improve message on self-healing disabling panel (#26977) (cherry-pick #26978 for 3.4) (#26980) (argo-cd-cherry-pick-bot[bot], Alberto Chiusole)eecac8efix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (cherry-pick #27097 for 3.4) (#27363) (argo-cd-cherry-pick-bot[bot], Karim Farid, Blake Pettersson)971bf57fix(ui): Parameters tab should correctly show dry source parameters (#26179) (jwinters01, Alexandre Gaudreault)8e636b7fix(ui): add previous option to download logs functionality (#26427) (Linghao Su)96bfc1efix(ui): convert yaml-editor to functional component (#24921) (Mike, Michael Crenshaw, Alexandre Gaudreault)58a6f85fix(ui): handle 401 error in stream (cherry-pick #26917 for 3.4) (#27228) (argo-cd-cherry-pick-bot[bot], Linghao Su)ae34305fix(ui): improve filter autocomplete performance for large app counts (#15087) (#26082) (Rohan K)5deef68fix(ui): include _-prefixed dirs in embedded assets (cherry-pick #26589 for 3.4) (#26909) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)c9a5a7efix(ui): make yaml editor outline button opaque (#25748) (Jaewoo Choi)a903bc4fix(ui): monaco-editor search scroll positioning fix (#26638) (#26639) (Oleksandr Saulyak)84f9446fix(ui): prevent crash when navigating between Applications and Appli… (#26245) (Peter Jiang)716339cfix(ui): prevent log viewer crash on malformed stream packets issue #26023 (#26226) (Luis Baronceli)cc3b88efix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.4) (#27564) (argo-cd-cherry-pick-bot[bot], Honglian You)f5de841fix(ui): relayout Monaco editor on window resize (#25784) (Jaewoo Choi)fd3c884fix(ui): remove createApplication option in write repo credential list (#23550) (Linghao Su)93c736cfix(ui): remove excess dot (#25816) (Josh Soref)2f4c5bbfix(ui): show filter-empty state on repos list (#26160) (Jaewoo Choi)91e9b22fix(ui): show full labels, projects, clusters, and namespaces on hover in sidebar (#7520) (#24723) (Aditya Raj, jwinters01)a76a876fix(ui): standard resource icons are not displayed properly (#26216) (#26228) (Linghao Su)d11c99afix(ui): update AppSet UI for watch API and remove unused filters (#26631) (Peter Jiang)6c043d3fix: Fix excessive ls-remote requests on monorepos with Auto Sync enabled apps (26277) (#26278) (dudinea, Dan Garfield)61c8ce2fix: #25313 remove--clientfrom helm version command (#25740) (Jesse Hitch)054538bfix: AAD Domain Hint Improvement (fixes #18066) (#24639) (jhansi, pjmanda, Nitish Kumar, jhansireddy01)696a18ffix: Add X-Frame-Options and CSP headers to Swagger UI endpoints (cherry-pick #26521 for 3.4) (#27153) (argo-cd-cherry-pick-bot[bot], Rohan Sood, rohansood10, Blake Pettersson, Copilot)86e42fbfix: AppProject finalizer should consider apps in all allowed namespaces (#24347) (#26416) (Dhruvang Makadia)f7b24bafix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick #27265 for 3.4) (#27526) (argo-cd-cherry-pick-bot[bot], Xiangjing Li)b66dea4fix: Hook resources not created at PostSync when configured with PreDelete PostDelete hooks (cherry-pick #26996 for 3.4) (#26998) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)f6d00b7fix: Only show please update resource specification message when spec… (#25066) (Josh Soref)472d50cfix: OpenTelemetryCollector health check shows 0/0 for mode: daemonset (#26391) (tank.500m)e168d8afix: Revert "fix(ci): ensure cherry-pick commits include DCO sign-off" (#26124) (#26243) (Kanika Rana)f3d0c12fix: Toggleautomated.enabledto disable auto-sync for rollbacks (#25719) (Daniel Moran)08602c2fix: adds the missing source-name flag in app unset command (#26712) (Papapetrou Patroklos)2232707fix: allow automatedSyncPolicy fields to be changed to false (#26763) (Peter Jiang)1488a13fix: allow docker dhi helm charts to be used (#25835) (Blake Pettersson)bcea79bfix: avoid stale informer cache in RevisionMetadata handler (cherry-pick #27392 for 3.4) (#27395) (argo-cd-cherry-pick-bot[bot], Soumya Ghosh Dastidar)c32286afix: close response body on error paths to prevent connection leak (#25824) (QingHe, chentiewen, Claude Sonnet 4.5)8f9ee6dfix: compressedLayerExtracterStore+isCompressedLayer - allow tar.gzip suffixes (#26355) (erin)4d66a20fix: consider Replace/Force sync option on live resource annotations (#26110) (Alexandre Gaudreault)ed4c63bfix: controller incorrectly detecting diff during app normalization (cherry-pick #27002 for 3.4) (#27014) (argo-cd-cherry-pick-bot[bot], Alexander Matyushentsev)bde6f66fix: correct typos across codebase (#25959) (Ekene Chris)e017145fix: create events with argocd namespace (#26667) (Papapetrou Patroklos)2c5f731fix: enable and fix modernize linter (#26352) (Matthieu MOREL)6a10ffefix: ensure compatibility of kubeversion.version with what helm reeturns (#26469) (Papapetrou Patroklos)6cd65b4fix: error sending generate manifest metadata cmp server (#25891) (Papapetrou Patroklos)0671907fix: fix GetAppdetails to show data from refs to other git repos (#26440) (#26544) (dudinea)f0c694dfix: fix generator bug with templating of parameters in values (#25342) (#26696) (dudinea)b320854fix: fix image functionality breakage caused by --no-install-updates option in Dockerfiles (#25972) (#25999) (dudinea)2b3eae6fix: fixes output of argocd proj windows list PROJ - USEANDOPERATOR was missing (#26273) (Papapetrou Patroklos)d099c24fix: fixes the already exists error when syncing apps with replace (#26791) (Papapetrou Patroklos)8550f60fix: force attempt http2 with custom tls config (#26975) (cherry-pick #26976 for 3.4) (#27073) (argo-cd-cherry-pick-bot[bot], Max Verbeek)bf1f836fix: get app resources tree view (#26166) (Papapetrou Patroklos)5e6449ffix: handle parse errors in ReadLocalConfig properly (#26597) (Takuma Shibuya)f8c0d7efix: health check doesn't detect resource deletion during sync operation (#26286) (Christopher Coco, Alexandre Gaudreault)3a4b0a0fix: helm flaky test (#26805) (Nitish Kumar)275c5defix: improves the Rabbit MQ resouce customization to better handle unknown conditions (#25941) (Papapetrou Patroklos)4519fdffix: include Depth field in Repository.Sanitized() response (#26572) (HARSHIL GARG)c4f3bb8fix: integrate split button (#25993) (#25994) (jwinters01)4e997f0fix: invalid error message on health check failure (#26040) (#26039) (dudinea)cbbb19dfix: make config key optional (#26701) (Michael Crenshaw)57e9e5efix: manifest-generate-paths for multisource git+helm (#25531) (Artem Vdovin, Alexandre Gaudreault)3c01ab1fix: missing gpg-agent in argocd image (#25935) (#25937) (dudinea)f4e667ffix: missing import (cherry-pick #27491 for 3.4) (#27504) (argo-cd-cherry-pick-bot[bot], Michael Crenshaw)d2cb56dfix: modernize slice initialization syntax in util/argo/argo.go (#26001) (Ekene Chris)8877365fix: multi-level cross-namespace hierarchy traversal for cluster-scoped intermediates (#26408, #24379) (#26410) (Jonathan Ogilvie, Alexandre Gaudreault)429fc1ffix: nil and empty ignoredifferences (#25980) (Blake Pettersson)2d762e4fix: optimize cli server-side diff with parallel dynamic batching (#25550) (afarbos)ced9402fix: panic during OIDC logout with empty token (#25874) (Papapetrou Patroklos)401b1a8fix: parent-child httpproxy health checking (#25714) (Greg Barasch)dfa079bfix: pass repo.insecure flag tohelm dependency build(cherry-pick #27078 for 3.4) (#27082) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)a061d1cfix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.4) (#27229) (argo-cd-cherry-pick-bot[bot], Atif Ali, Keith Chong)822a0e4fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick #27589 for 3.4) (#27594) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)43ea991fix: register pprof endpoints in repo-server using the params config map (#26237) (Papapetrou Patroklos)739bc58fix: remove deprecated --client flag from helm version (Malik Draz)06310bcfix: remove resourceVersion from ssd (cherry-pick #27406 for 3.4) (#27461) (argo-cd-cherry-pick-bot[bot], Peter Jiang)be08693fix: remove stale reposFilter references (#26310) (Jaewoo Choi)2f7d36bfix: resolve flaky TestSync_SyncWaveHookError test (#26080) (Aditya Raj)b85887ffix: return error when cache is unavailable (#26053) (Nitish Kumar)19a74dffix: return missing information in cluster get API (#25566) (Papapetrou Patroklos)d7a8170fix: revert autosync event message format change (cherry-pick #27387 for 3.4) (#27390) (argo-cd-cherry-pick-bot[bot], Soumya Ghosh Dastidar)79b0981fix: show pruning button when only Prune=confirm is present (#23326) (Arthur Outhenin-Chalandre, Alexandre Gaudreault)043544cfix: skip namespace check on cluster scoped rbac resources for auth reconcile (#26403) (Christopher Coco)6df1a5bfix: skip token refresh threshold parsing in unrelated components (#26803) (Soumya Ghosh Dastidar)984a29cfix: skip unnecessary git state clean (#26714) (Alexander Matyushentsev)226178cfix: stack overflow when processing circular ownerrefs in resource graph (#26783) (cherry-pick #26790 for 3.4) (#26878) (argo-cd-cherry-pick-bot[bot], Jonathan Ogilvie, Copilot)b648248fix: trigger app sync on app-set spec change (cherry-pick #26811 for 3.4) (#27131) (argo-cd-cherry-pick-bot[bot], Papapetrou Patroklos)18efd0cfix: trim whitespaces when retrieving source refresh paths (#26400) (Nitish Kumar)fee1c56fix: update Jsonnet field tag to avoidjsonnet: {}in manifests (#25625) (Shubham Singh, Omar Nasser, shubham singh mahar)3250327fix: use InstanceName for cache cleanup on Application deletion (#26741) (Takuma Shibuya)305ecb6fix: use certificate fingerprints to deduplicate TLS certs (#25779) (Nitish Kumar)7180debfix: use csapgrade to patch managedFields for client-side apply migration (#26289) (Peter Jiang)6e89ed9fix: use force flag in copyutil symlink to prevent repo-server crashes (#26613) (ManvithaP, manvitha92)0a29bfdfix: use unique names for initial commits (cherry-pick #27171 for 3.4) (#27198) (argo-cd-cherry-pick-bot[bot], Sean Liao)f44ddc6fix: wrap lines toggle causes log lines to overflow container - Fixes [Issue #27586] (cherry-pick #27627 for 3.4) (#27670) (argo-cd-cherry-pick-bot[bot], Knicholas Kennedy)249b91dfix: wrong installation id returned from cache (cherry-pick #26969 for 3.4) (#27028) (argo-cd-cherry-pick-bot[bot], Zach Aller)Documentation
11ec675docs(rbac): add note documenting the role requirement for groups (#7952) (#26672) (Mathieu Garstecki)af64957docs: Add 'Netease Cloud Music' to USERS.md (#25922) (Ryan Wu)726b764docs: Add Bluesky badge to README (#25880) (Yuan Tang)db8c801docs: Add CodeQL in docs (#26645) (S Kevin Joe Harris)b137439docs: Add GitLab CI integration documentation with Dex configuration (#25413) (Afzal Ansari)90ce178docs: Add Imagine Learning to USERS.md (#26111) (Christian Oleson)9e19a8fdocs: Add ci prefixes for PR titles (#26471) (S Kevin Joe Harris)fb56875docs: Add release checklist step to reference the release-specific instructions file (#25854) (Revital Barletz, Peter Jiang, Regina Voloshin)abde222docs: Change heading for the complete example for argocd progressive rollout (#25878) (Barisa Obradovic, Alex Recuenco, Dan Garfield)e682552docs: Complements to the Gateway API ingress guide #25734 (#25739) (Quentin Ågren)3e29c4cdocs: Fix link (Seonghyeon Cho)3dd71eadocs: Fix link correctly (Seonghyeon Cho)d883412docs: Fix some admonitions in docs (#26213) (Moulick Aggarwal, Moulick Aggarwal)b911650docs: Fix typo in Plugin generator description (#26051) (José Maia)e3f616ddocs: Fix wrong default value for applicationsetcontroller.enable.scm.providers (#26162) (Fan Zhang)b8d4216docs: Fixed broken links (#26083) (S Kevin Joe Harris, Regina Voloshin)5e974b0docs: Proposal: Source Integrity Policies (#25148) (Oliver Gondža, jannfis)4edc1a9docs: Revise TLS settings to includeargocd-applicationset-controllerandargocd-notifications-controller(#25872) (Alex Recuenco)a6cc7addocs: Revise web terminal setup instructions for Argo CD (#25992) (Dan Garfield, Nitish Kumar)feab8bddocs: Set installation to match the quick-start guide in the installation section (#26259) (Alex Recuenco)bea1139docs: Typo synching -> syncing (#26275) (Gaston Festari)5cce5fedocs: Update Linux host IP detection in Toolchain guide - to avoid hardcodedeth0(#25800) (Shubham Singh, shubham singh mahar)30e30a1docs: Update shallow clone section for clarity (#26697) (Dan Garfield)312a841docs: Use udp to find preferred outbound ip address (#25812) (Josh Soref)e7aa9b0docs: Volunteer FourFifthsCode for v3.4 release champion (#25881) (Codey Jenkins)7879dc0docs: add SAP Signavio to USERS.md (#26164) (Mo Sahihi Benis)d9b38a8docs: add faq entry for marshaling error (#25851) (Nitish Kumar)a66fe2adocs: add information on handling ambiguous revisions (#26052) (Nitish Kumar, Afzal Ansari)3b24d33docs: add infos around username for access token with bitbucket (#25588) (Nolan Emirot)510af5cdocs: add missing prefixes for PR titles (#26464) (Nitish Kumar)faf0b75docs: added 3.2 to 3.3 upgrade overview section (#25671) (Regina Voloshin)b8e6a79docs: added custom health checks section to 3.3-3.4 upgrade guide (#26812) (Regina Voloshin)088ef94docs: change manifests master reference to stable reference (#26035) (Regina Voloshin, argoproj-renovate[bot])3e26594docs: cherry-pick process (#26109) (Michael Crenshaw)34e8935docs: clarify that updating customLabels in ArgoCD requires a restart to the Controller to take effect (#25693) (Julie Vogelman, Michael Crenshaw)912e216docs: clarify the parent for syncOptions (#25989) (Josh Soref)458837edocs: clarify v prefix in cluster version related docs for CMP Plugins and CLI (#26852) (Regina Voloshin)2653860docs: document dependency upgrade policy (#26826) (Michael Crenshaw)8fb9168docs: fix cluster generator version docs (#26847) (Regina Voloshin)5d790e5docs: fix description of argocd_oci_request_duration_seconds metric (#25918) (Piyush Khobragade)43dd717docs: fix garbled text in cluster bootstrapping helm example (#25940) (Alexander)b40a443docs: fix grammar, typos, and improve clarity in documentation (#26498) (Rishabh P, Nitish Kumar)d8f9ed9docs: fix help-wanted label link (#25839) (Jakub Rudnik)205241fdocs: fix namePrefix/nameSuffix description to reflect override behavior (shibatch, Claude (claude-sonnet-4-5))0fe5b7edocs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick #27608 for 3.4) (#27613) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)774f48edocs: fix typos in documentation (#25844) (Illia Oleksiuk)69c2620docs: fixing typo in Config Management Plugins docs (#26150) (Aidan O'Gorman)b92b7a6docs: grafana-org-operator healthcehck to upgrade manual (#25672) (Regina Voloshin)4832c5edocs: improve managedNamespaceMetadata section with details on tracki… (#25536) (Afzal Ansari, Blake Pettersson)3d97fc9docs: instruct to enable ClientSideApplyMigration in 3.3.2 (#26547) (Regina Voloshin)2f9bea6docs: link to source hydrator (#25813) (Josh Soref)fc6379bdocs: recommend cluster generator in cluster boostrapping page (#26084) (Kostis (Octopus Deploy))d655bf6docs: rewrite [here] links (#26282) (Matt Warren, Papapetrou Patroklos)6535078docs: small fixes for mkdocs warnings (#26112) (Michael Crenshaw, Nitish Kumar)03556dbdocs: update MAINTAINERS.md (#26496) (Jaewoo Choi)f7dbfbddocs: updated upgrade guide 3.3-3.4 and cluster generator doc with the changed cluster version format (#26837) (Regina Voloshin)6a3a540docs: vscode settings recommendation is outdated (#25925) (Alex Recuenco)Dependency updates
66835b6chore(deps): Upgrade Kustomize to 5.8.1 (#26367) (Regina Voloshin)11567f3chore(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 8.0.0 (cherry-pick 27602 to 3.4) (#27606) (dudinea)2de45e7chore(deps): bump actions/cache from 5.0.0 to 5.0.1 (#25678) (dependabot[bot])9147550chore(deps): bump actions/cache from 5.0.1 to 5.0.2 (#26042) (dependabot[bot])8c30738chore(deps): bump actions/cache from 5.0.2 to 5.0.3 (#26183) (dependabot[bot])4e827c8chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#26123) (dependabot[bot])4bfd624chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#25726) (dependabot[bot])796b722chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 (#26635) (dependabot[bot])f1c5201chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 (#26801) (dependabot[bot])667b7d6chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 (#25950) (dependabot[bot])d77f8d8chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#26620) (dependabot[bot])f76046fchore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#25997) (dependabot[bot])6baa4bcchore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#26675) (dependabot[bot])3db8a41chore(deps): bump actions/stale from 10.1.1 to 10.2.0 (#26474) (dependabot[bot])8d24a9achore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#25679) (dependabot[bot])38345d6chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#26633) (dependabot[bot])2615be4chore(deps): bump axios from 1.12.2 to 1.13.5 in /ui-test (#26353) (dependabot[bot])4e71de3chore(deps): bump basic-ftp from 5.0.5 to 5.2.0 in /ui-test (#26617) (dependabot[bot])01629ccchore(deps): bump code.gitea.io/sdk/gitea from 0.22.1 to 0.23.2 (#26231) (dependabot[bot])67d425fchore(deps): bump codecov/test-results-action from 1.1.1 to 1.2.1 (#25703) (dependabot[bot])40412aachore(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 (#26414) (dependabot[bot])c13ba1echore(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 (#26433) (dependabot[bot])560d428chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#26706) (dependabot[bot])d064cecchore(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#26172) (dependabot[bot])3321498chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#26689) (dependabot[bot])dd97993chore(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#25771) (dependabot[bot])d8d7009chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#26705) (dependabot[bot])063d3b6chore(deps): bump docker/setup-qemu-action from 3.6.0 to 4.0.0 (#26688) (dependabot[bot])c212bb7chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.20.0 to 1.21.0 (#25975) (dependabot[bot])040cc37chore(deps): bump github.com/Azure/kubelogin from 0.2.13 to 0.2.14 (#25883) (dependabot[bot])a8676aechore(deps): bump github.com/Azure/kubelogin from 0.2.14 to 0.2.15 (#26560) (dependabot[bot])6041e85chore(deps): bump github.com/Azure/kubelogin from 0.2.15 to 0.2.16 (#26781) (dependabot[bot])9182e66chore(deps): bump github.com/alicebob/miniredis/v2 from 2.35.0 to 2.36.0 (#26103) (dependabot[bot])e10a395chore(deps): bump github.com/alicebob/miniredis/v2 from 2.36.0 to 2.36.1 (#26146) (dependabot[bot])adf88c5chore(deps): bump github.com/alicebob/miniredis/v2 from 2.36.1 to 2.37.0 (#26621) (dependabot[bot])05620cechore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.29.9 to 1.32.7 (#26254) (dependabot[bot])1f12498chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.10 to 1.32.11 (#26679) (dependabot[bot])47eb7eechore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.8 (#26492) (dependabot[bot])9851b84chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.8 to 1.32.9 (#26514) (dependabot[bot])2ae64bachore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.9 to 1.32.10 (#26581) (dependabot[bot])cd65bc0chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.62 to 1.19.7 (#26251) (dependabot[bot])abb60a9chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.10 to 1.19.11 (#26680) (dependabot[bot])f4852f7chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.7 to 1.19.8 (#26495) (dependabot[bot])f2fdc65chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.8 to 1.19.9 (#26515) (dependabot[bot])63ddc3cchore(deps): bump github.com/aws/aws-sdk-go-v2/service/codecommit from 1.33.10 to 1.33.11 (#26842) (dependabot[bot])09fac7bchore(deps): bump github.com/aws/smithy-go from 1.24.0 to 1.24.1 (#26564) (dependabot[bot])f50f88fchore(deps): bump github.com/aws/smithy-go from 1.24.1 to 1.24.2 (#26657) (dependabot[bot])b4a52fcchore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.9.2 (#25932) (dependabot[bot])3811a30chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.2 to 4.10.0 (#26144) (dependabot[bot])d1089f8chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 (#26782) (dependabot[bot])acc4bb7chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#26616) (dependabot[bot])96f1266chore(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 (#25677) (dependabot[bot])f1ce190chore(deps): bump github.com/expr-lang/expr from 1.17.7 to 1.17.8 (#26459) (dependabot[bot])60fed8bchore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (cherry-pick #27101 for 3.4) (#27207) (argo-cd-cherry-pick-bot[bot], dependabot[bot])fd1307dchore(deps): bump github.com/go-openapi/runtime from 0.29.2 to 0.29.3 (#26736) (dependabot[bot])fe93731chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 (#26171) (dependabot[bot])9b10fe9chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.88 to 0.9.89 (#26333) (dependabot[bot])b337855chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.89 to 0.9.91 (#26360) (dependabot[bot])8aea561chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.91 to 0.9.93 (#26563) (dependabot[bot])564d17dchore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.93 to 0.9.94 (#26656) (dependabot[bot])a9da448chore(deps): bump github.com/olekukonko/tablewriter from 1.1.2 to 1.1.3 (#26043) (dependabot[bot])bd9c12cchore(deps): bump github.com/olekukonko/tablewriter from 1.1.3 to 1.1.4 (#26820) (dependabot[bot])9285435chore(deps): bump github.com/redis/go-redis/v9 from 9.17.2 to 9.17.3 (#26145) (dependabot[bot])0c2fa1echore(deps): bump github.com/redis/go-redis/v9 from 9.17.3 to 9.18.0 (#26475) (dependabot[bot])b18d576chore(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#26021) (dependabot[bot])ca82ee1chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.10.0 to 1.11.0 (#25867) (dependabot[bot])3ac7a0bchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.11.0 to 1.12.0 (#25934) (dependabot[bot])2322cdcchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.12.0 to 1.13.0 (#25946) (dependabot[bot])0da603dchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.13.0 to 1.14.0 (#25973) (dependabot[bot])c626b20chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.14.0 to 1.16.0 (#26081) (dependabot[bot])c757497chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.16.0 to 1.18.0 (#26143) (dependabot[bot])9c108cbchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.18.0 to 1.19.0 (#26155) (dependabot[bot])9d459c8chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.19.0 to 1.21.0 (#26165) (dependabot[bot])e548ec7chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.21.0 to 1.23.0 (#26170) (dependabot[bot])0a70881chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.23.0 to 1.25.0 (#26202) (dependabot[bot])f255cefchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.25.0 to 1.26.0 (#26250) (dependabot[bot])9cc0c77chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.26.0 to 1.27.0 (#26267) (dependabot[bot])257ebc5chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.27.0 to 1.28.0 (#26292) (dependabot[bot])7ccc6f9chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.28.0 to 1.28.1 (#26334) (dependabot[bot])ad186cfchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.28.1 to 1.29.0 (#26358) (dependabot[bot])e8539bechore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.29.0 to 1.30.0 (#26384) (dependabot[bot])a544bc0chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.30.0 to 1.31.0 (#26413) (dependabot[bot])dcf0a15chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.31.0 to 1.34.0 (#26461) (dependabot[bot])67c5fe2chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.34.0 to 1.35.0 (#26476) (dependabot[bot])adbf9cdchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.35.0 to 1.36.0 (#26493) (dependabot[bot])7db8ab2chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.36.0 to 1.39.0 (#26533) (dependabot[bot])a4f9f57chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.39.0 to 1.41.0 (#26561) (dependabot[bot])4ffad60chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.41.0 to 1.42.0 (#26605) (dependabot[bot])9843065chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.42.0 to 1.43.0 (#26622) (dependabot[bot])858f159chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.43.0 to 1.44.0 (#26634) (dependabot[bot])91253dcchore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.44.0 to 1.46.0 (#26655) (dependabot[bot])89cd590chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.1 to 1.8.2 (#25676) (dependabot[bot])106acdachore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.2 to 1.9.0 (#25701) (dependabot[bot])b5a91a1chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.9.0 to 1.9.1 (#25725) (dependabot[bot])abf2233chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.9.1 to 1.10.0 (#25770) (dependabot[bot])7825b4bchore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#26649) (dependabot[bot])6be8ac1chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#26362) (dependabot[bot])a195501chore(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 (#25947) (dependabot[bot])89fe752chore(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 (#26361) (dependabot[bot])5fff3b3chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#26623) (dependabot[bot])4524dc9chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#26799) (dependabot[bot])92e4b2cchore(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 (#26733) (dependabot[bot])b3c5f4bchore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 (#26734) (dependabot[bot])93a7717chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 (#25933) (dependabot[bot])235bf2achore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 (#26357) (dependabot[bot])d8b33bdchore(deps): bump golang.org/x/time from 0.14.0 to 0.15.0 (#26737) (dependabot[bot])bac8c4bchore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 (#25789) (dependabot[bot])09b3856chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 (#26432) (dependabot[bot])8dfbdecchore(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 (#26458) (dependabot[bot])37f29e5chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 (#26735) (dependabot[bot])ea71adbchore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 (cherry-pick #26886 for 3.4) (#26952) (argo-cd-cherry-pick-bot[bot], dependabot[bot], Blake Pettersson)a21fcf3chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#26565) (dependabot[bot])f46c387chore(deps): bump immutable from 4.0.0 to 4.3.8 in /ui (#26690) (dependabot[bot])5b8ce54chore(deps): bump k8s.io/kubernetes from 1.34.0 to 1.34.2 in /gitops-engine (#25675) (dependabot[bot], reggie-k)1a1b142chore(deps): bump library/busybox from2383baatob86c79din /test/e2e/multiarch-container (#26101) (dependabot[bot])82ee09achore(deps): bump library/busybox fromb86c79dtoe226d63in /test/e2e/multiarch-container (#26122) (dependabot[bot])b357063chore(deps): bump library/busybox fromd80cd69to2383baain /test/e2e/multiarch-container (#25884) (dependabot[bot])8ef0fd7chore(deps): bump library/busybox frome226d63tob3255e7in /test/e2e/multiarch-container (#26229) (dependabot[bot])0ee21afchore(deps): bump library/golang from 1.26.0 to 1.26.1 in /test/container (#26708) (dependabot[bot])e4a28fachore(deps): bump library/golang from31c1e53to6cc2338in /test/remote (#25847) (dependabot[bot])23b387fchore(deps): bump library/golang from36b4f45to31c1e53in /test/remote (#25829) (dependabot[bot])8866fcfchore(deps): bump library/golang from6cc2338to8bbd140in /test/remote (#25974) (dependabot[bot])474d900chore(deps): bump library/golang froma22b2e6to36b4f45in /test/remote (#25680) (dependabot[bot])79a11cbchore(deps): bump library/golang frome2ddb15toc7e98ccin /test/container (#26780) (dependabot[bot])21acbb8chore(deps): bump library/redis from 8.2.1 to 8.2.2 in /test/container (#24859) (dependabot[bot])6ab9426chore(deps): bump library/redis from 8.6.0 to 8.6.1 in /test/container (#26579) (dependabot[bot])2c6d97achore(deps): bump library/redis from5cb00b0to1c054d5in /test/container (#26654) (dependabot[bot])8c1a815chore(deps): bump library/redis fromdc123d5to5cb00b0in /test/container (#26606) (dependabot[bot])8b2ad9bchore(deps): bump library/ubuntu from 25.10 to 26.04 in /test/container (#26431) (dependabot[bot])6a90202chore(deps): bump library/ubuntu from4095ef6tofed6ddbin /test/container (#26494) (dependabot[bot])559dc16chore(deps): bump lodash from 4.17.21 to 4.17.23 in /ui (#26100) (dependabot[bot])b70d144chore(deps): bump minimatch from 3.1.2 to 3.1.3 in /ui (#26604) (dependabot[bot])5c2a417chore(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#26102) (dependabot[bot])d11d025chore(deps): bump qs from 6.11.0 to 6.14.1 in /ui (#25828) (dependabot[bot])5cfcd0fchore(deps): bump qs from 6.14.1 to 6.14.2 in /ui (#26444) (dependabot[bot])43a9524chore(deps): bump renovatebot/github-action from 44.0.5 to 44.2.0 (#25702) (dependabot[bot])28beb3echore(deps): bump renovatebot/github-action from 44.2.0 to 44.2.1 (#25781) (dependabot[bot])fa6f5c6chore(deps): bump renovatebot/github-action from 44.2.1 to 44.2.2 (#25818) (dependabot[bot])93205a7chore(deps): bump renovatebot/github-action from 44.2.2 to 44.2.3 (#25868) (dependabot[bot])d08a879chore(deps): bump renovatebot/github-action from 44.2.3 to 44.2.4 (#25949) (dependabot[bot])8b1415achore(deps): bump renovatebot/github-action from 44.2.4 to 44.2.5 (#26059) (dependabot[bot])e42727bchore(deps): bump renovatebot/github-action from 44.2.5 to 44.2.6 (#26156) (dependabot[bot])a7c771fchore(deps): bump renovatebot/github-action from 44.2.6 to 46.0.1 (#26203) (dependabot[bot])39fcff7chore(deps): bump renovatebot/github-action from 46.0.1 to 46.0.2 (#26336) (dependabot[bot])53a5cd3chore(deps): bump renovatebot/github-action from 46.0.2 to 46.1.0 (#26434) (dependabot[bot])139ecf6chore(deps): bump renovatebot/github-action from 46.1.0 to 46.1.1 (#26460) (dependabot[bot])296100fchore(deps): bump renovatebot/github-action from 46.1.1 to 46.1.2 (#26562) (dependabot[bot])5e3feb4chore(deps): bump renovatebot/github-action from 46.1.2 to 46.1.3 (#26658) (dependabot[bot])60ee213chore(deps): bump renovatebot/github-action from 46.1.3 to 46.1.4 (#26730) (dependabot[bot])b5a08fachore(deps): bump renovatebot/github-action from 46.1.4 to 46.1.5 (#26839) (dependabot[bot])cc302bachore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.3.1-0.20251003215857-446d8398e19c to 6.3.2 (#26332) (dependabot[bot])36e8c52chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 (#26761) (dependabot[bot])0af9b67chore(deps): bump the otel group across 1 directory with 6 updates (#26668) (dependabot[bot])20bf53fchore(deps): bump the otel group with 4 updates (#25553) (dependabot[bot])1762a59chore(deps): bump the otel group with 6 updates (#26731) (dependabot[bot], reggie-k)49d0b48chore(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.2 (#26359) (dependabot[bot])0f069eechore(deps): bump tj-actions/changed-files from 47.0.2 to 47.0.4 (#26491) (dependabot[bot])14e69bfchore(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5 (#26676) (dependabot[bot])3b34d2achore(deps): bump tmp from 0.2.3 to 0.2.4 in /ui-test (#24058) (dependabot[bot], Blake Pettersson)c34d44achore(deps): bump ubuntu in gh actions to 24.04 and ubuntu in test/remote/Dockerfile to 25.10 (#25763) (Regina Voloshin)7925bf7chore(deps): migrated aws sdk v1 to v2 for EKS with argocd-k8s-auth (#26200) (Regina Voloshin, Papapetrou Patroklos)3ddf722chore(deps): update dependency @codecov/webpack-plugin to v0.0.1-beta.12 (#25385) (renovate[bot])81d109fchore(deps): update dependency @types/deepmerge to v2.2.3 (#25609) (renovate[bot])7f34ee8chore(deps): update dependency @types/minimatch to v3.0.5 (#26139) (renovate[bot])807ff53chore(deps): update dependency @types/prop-types to v15.7.15 (#26140) (renovate[bot])1b85a68chore(deps): update dependency lodash-es to v4.17.23 [security] (#26099) (renovate[bot])c19d046chore(deps): update docker.io/library/golang:1.25.5 docker digest to0f406d3(#25951) (argoproj-renovate[bot])4409ec0chore(deps): update docker.io/library/golang:1.25.5 docker digest to31c1e53(#25831) (argoproj-renovate[bot])ef21768chore(deps): update docker.io/library/golang:1.25.5 docker digest to581c059(#25966) (argoproj-renovate[bot])5598f87chore(deps): update docker.io/library/golang:1.25.5 docker digest to6cc2338(#25838) (argoproj-renovate[bot])5113f82chore(deps): update docker.io/library/golang:1.25.5 docker digest to97be073(#25820) (argoproj-renovate[bot])f8cab49chore(deps): update docker.io/library/golang:1.25.6 docker digest to06d1251(#26256) (argoproj-renovate[bot])46e9022chore(deps): update docker.io/library/golang:1.25.6 docker digest to0c87ea6(#26235) (argoproj-renovate[bot])1d66593chore(deps): update docker.io/library/golang:1.25.6 docker digest to4c973c7(#26232) (argoproj-renovate[bot])acb30b4chore(deps): update docker.io/library/golang:1.25.6 docker digest toce63a16(#26056) (argoproj-renovate[bot])f6b0c81chore(deps): update docker.io/library/golang:1.26.0 docker digest tob39810f(#26603) (argoproj-renovate[bot])58993ecchore(deps): update docker.io/library/golang:1.26.0 docker digest tofb612b7(#26779) (renovate[bot])82be819chore(deps): update docker.io/library/redis:8.2.3 docker digest toc4316c4(#26130) (renovate[bot])d35a251chore(deps): update docker.io/library/registry:3.0 docker digest to6c5666b(#26217) (renovate[bot])988e4f4chore(deps): update docker.io/library/ubuntu:25.10 docker digest to4a9232c(#26131) (renovate[bot])cc0752dchore(deps): update group golang to v1.25.5 (#25723) (argoproj-renovate[bot])23c021fchore(deps): update group golang to v1.25.6 (#26034) (argoproj-renovate[bot])51327cbchore(deps): update module github.com/golangci/golangci-lint/v2 to v2.10.1 (#26382) (argoproj-renovate[bot], Blake Pettersson)1f6d54cchore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (#26713) (argoproj-renovate[bot], reggie-k)ffeacaechore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (#26728) (argoproj-renovate[bot])845d1c9chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (#26771) (argoproj-renovate[bot])38363f3chore(deps): update module github.com/vektra/mockery/v3 to v3.6.2 (#25995) (argoproj-renovate[bot], Regina Voloshin)42f09f7chore(deps): update module github.com/vektra/mockery/v3 to v3.6.3 (#26029) (argoproj-renovate[bot])630c6e8chore(deps): update module github.com/vektra/mockery/v3 to v3.6.4 (#26445) (argoproj-renovate[bot])0d22f39chore(deps): update module github.com/vektra/mockery/v3 to v3.7.0 (#26716) (argoproj-renovate[bot], Regina Voloshin)eedf6ccchore(deps): update module k8s.io/kubernetes to v1.34.2 [security] (#25682) (renovate[bot], reggie-k)c879b6dchore(deps): update notifications-engine to fix GitHub PR comments nil panic (#26065) (John Soutar)da042b7chore(deps): update notifications-engine to v0.5.1-0.20251223091026-8c0c96d8d530 (#25785) (Pasha Kostohrys, pasha)5ec3110chore(deps): update to helm 3.19.4 due to cve : https://github.com/helm/helm/releases/tag/v3.19.4 (#25769) (Bryan Stenson)Other work
bbb13dfChange to make codegen-local (Kevin Joe Harris)e4a97bdClarify database initialization/migration section (jcjveraa)d60b41dFixed broken links in USERS.md (Kevin Joe Harris)ccdcf6fMerge branch 'master' into Fix-broken-links-in-users (S Kevin Joe Harris)5e4a4ceMerge commit from fork (Alexander Matyushentsev)987768cMerge pull request #26133 from Kevinjoeharris/Fix-broken-links-in-users (Papapetrou Patroklos)650fa6aMerge pull request #26295 from jcjveraa/patch-2 (Papapetrou Patroklos)ae08a3eMerge pull request #26519 from hokatabi/fix/kustomize-nameprefix-suffix-docs (Papapetrou Patroklos)46ff85aMerge pull request #26546 from Kevinjoeharris/codegen-local (Papapetrou Patroklos)973c3f2Merge pull request #26569 from sh-cho/fix-docs-link (Papapetrou Patroklos)1d50c48Merge pull request #26590 from sh-cho/fix-docs-link-correctly (Papapetrou Patroklos)9e9a49dMerge pull request #26643 from malikdraz/fix/helm-version-deprecated-flag (Papapetrou Patroklos)bd284b1[docs] Add database initialization instructions example-header (jcjveraa)849815echore(applicationset): Fix modernize linter (#26299) (Matthieu MOREL)34ccf86chore(applicationset): Fix modernize linter (#26320) (Matthieu MOREL)2743392chore(applicationset): Fix modernize linter (#26326) (Matthieu MOREL)989fa6fchore(appset): basic progressive sync e2e tests (#26092) (Kanika Rana, krana limaDocker)216611fchore(ci): migrate from deprecated codecov action (#25704) (Michael Crenshaw)286c6b8chore(cmd): Fix modernize linter (#26298) (Matthieu MOREL)76162a9chore(cmd): Fix modernize linter (#26321) (Matthieu MOREL)b48ed49chore(cmd): unify CLI names via common constants and simplify main dispatch (#24486) (jaehanbyun)6b2b066chore(cmpserver): Fix modernize linter (#26317) (Matthieu MOREL, Blake Pettersson)ac83f1dchore(commitserver): Fix modernize linter (#26327) (Matthieu MOREL)88223b0chore(common): Fix modernize linter (#26312) (Matthieu MOREL, Blake Pettersson)e2f7e7dchore(controller): Fix modernize linter (#26303) (Matthieu MOREL)0c9039echore(controller): Fix modernize linter (#26313) (Matthieu MOREL, Blake Pettersson)326831achore(docs): add 3.4 release approver and checklist (#26528) (Codey Jenkins)6e0c949chore(hack): Fix modernize linter (#26304) (Matthieu MOREL)2e63883chore(hydrator): improve error message (#25737) (Michael Crenshaw)7ccb6cechore(migration): migrate toaws-sdk-go-v2(#26439) (Nitish Kumar)2bea8c0chore(pkg): Fix modernize linter (#26314) (Matthieu MOREL, Blake Pettersson)ac0c63echore(refactor): bumpnotifications-engineto include Teams adaptive card fix (#26449) (Jaewoo Choi)342aea4chore(reposerver): Fix modernize linter (#26315) (Matthieu MOREL, Blake Pettersson)0cff632chore(server): Fix modernize linter (#26324) (Matthieu MOREL)a108a84chore(server): Fix modernize linter (#26328) (Matthieu MOREL)2e1d81dchore(test): Fix modernize linter (#26301) (Matthieu MOREL)28ca821chore(tilt): use manifest image name instead of kustomize override (#26190) (Codey Jenkins)b912405chore(ui): addqeIdto paginate dropdown menus (#25929) (Jaewoo Choi)a369ae2chore(util): Fix modernize linter (#26300) (Matthieu MOREL)1a62c87chore(util): Fix modernize linter (#26316) (Matthieu MOREL, Blake Pettersson)1d65d8bchore(util): Fix modernize linter (#26323) (Matthieu MOREL)34eeedechore(util): Fix modernize linter (#26329) (Matthieu MOREL)1b4398bchore(util): Fix modernize linter (#26342) (Matthieu MOREL)847b8b2chore(util): Fix modernize linter (#26344) (Matthieu MOREL)e208035chore: Add C.H. Robinson to USERS.md (#26825) (Anudeep Reddy)76a1413chore: Make links accessible + friendly (#26815) (Josh Soref)91a1311chore: Remove unnecessary "CD" suffix in MAINTAINERS.md (#25778) (Yuan Tang)4c77f0cchore: add maintainers name in theMAINTAINERS.mdfile (#25685) (Nitish Kumar)1049d40chore: add tests to validate ConfigMap/Secret key removal in server-side diff (#25216) (pedro-cs-ribeiro, Pedro Ribeiro, Leonardo Luz Almeida)6740282chore: adds Pat and Reggie as release champion and approver for 3.5 (#26748) (Papapetrou Patroklos)251c366chore: bump argo-ui version (#26629) (jwinters01)e8eebd7chore: bump gitops-engine with force+replace test (#24508) (Alexandre Gaudreault)7f877a6chore: bumps dex version to 2.45.0 (#26609) (Papapetrou Patroklos)b2df604chore: bumps go redis client 9.17.2 (#25643) (Papapetrou Patroklos, dependabot[bot])b1a93b4chore: bumps golang version everywhere to the latest 1.25.5 (#25716) (Papapetrou Patroklos)a2e0b6fchore: bumps golang version to 1.26 in all places (#26393) (Papapetrou Patroklos, Nitish Kumar)08390e2chore: bumps notification engine to the latest (#25887) (Papapetrou Patroklos)b543e18chore: bumps ubuntu base docker image to 25.10 (#25758) (Papapetrou Patroklos)6a597c9chore: fixmake testrunning all the gitops-engine tests when requested to test specific ArgoCD module (#26089) (#26090) (dudinea)0cdd44bchore: fix gitops-engine mod name so it can be referenced by external repos (#26407) (Leonardo Luz Almeida)8515358chore: improve app install ID error (#26178) (Michael Crenshaw)7acd930chore: install git-lfs 3.7.1 version using an install script (#26465) (Papapetrou Patroklos, Nitish Kumar)d875c61chore: make getRepositorySecret more readable (#26827) (Michael Crenshaw)9213601chore: migrate k8s.gcr.io to registry.k8s.io in install manifests (#25802) (Aya Hosni, Nitish Kumar)9cfcd2dchore: placate Sonar by ignoring tetsdata files (#26371) (Regina Voloshin)5959693chore: stop using the deprecated fields of the cluster structure (#25745) (Papapetrou Patroklos)4c59c3cchore: unify clientOpts usage in command parameters (#24251) (jaehanbyun, Nitish Kumar, Blake Pettersson)b5e0921chore: update generated files from codegen (shibatch)c86e32bchore: update go-oidc to v3.17.0 (#26822) (Mike Cutsail)5345a2achore: update golangci-lint to v2.8.0 (#26354) (Matthieu MOREL)a3b4c83chore: update redis-ha chart to 4.35.10 (#26453) (Tuxthepirate, Blake Pettersson)5e7bb39chore: use base ref for cherry-pick prs (#26551) (Blake Pettersson)18fe8c4chore: use server-side apply for CRDs in Tiltfile to fix annotation size limit (#26419) (Linghao Su)d63aa84ci: Make codecov steps conditional on codecov secret existence and enable running them on forks (#25765) (Regina Voloshin)b0488f5ci: Revive CodeCov steps (#26350) (Regina Voloshin)cf53ed7ci: Skip CodeQL for documentation-only changes (#26602) (S Kevin Joe Harris, rumstead)7477ecbci: exclude gitops engine bumps from renovate (#26787) (Regina Voloshin)1418e87ci: exclude testdata from sonar.exclusions (#26398) (Regina Voloshin)fdbe19aci: label stale issues and PRs without auto-closing (#26318) (S Kevin Joe Harris)a46baf4ci: make Upload code coverage information to codecov.io step always run (#26379) (Regina Voloshin)c85d655ci: run pr-title-check on pull-request (#26662) (Regina Voloshin)884b639ci: test against k8s 1.34.2 (#25856) (Regina Voloshin)e8895b8ci: test against k8s 1.35.0 (#26062) (Regina Voloshin)fb6a46cci: upgrade codeql for go 1.26 support and give renovate post upgrade commands (#26446) (rumstead)6facafccrate changelog with git instead of github (reggie-k)afdb3fedocs(operator-manual): fix typos and improve clarity (#26542) (Rishabh Pandey)ff83056fix(repo-server): optimize repoLock on checkout for manifest-generate-paths (#26468) (Artem Vdovin)b61b08dfix(repo-server): optimize short ref resolution in revision comparison (#26456) (Rodrigo Fior Kuntzer)3ce6f14refactor: remove helper pointer functions in pull_request tests (#26598) (Takuma Shibuya)6795b80refactor: replace ptr.To with new(expr) (#26534) (Takuma Shibuya)499ba48test only goreleaser and a dd an author template (reggie-k)7ed8a8btest only goreleaser and a dd an author template (reggie-k)2d19fa0test(e2e): CMP test fails locally on Mac (#25901) (Alexandre Gaudreault)95c17b6test(e2e): ExpectConsistency was not consistent (#26778) (Alexandre Gaudreault)b9c4c2btest(e2e): add e2e tests for reverse deletionOrder when progressive sync enabled (cherry-pick #26673 for 3.4) (#27263) (argo-cd-cherry-pick-bot[bot], Kanika Rana)dab6f3btest(e2e): add isolation by ensuring unique name (#25724) (Alexandre Gaudreault)b0e4e84test(e2e): configurable tmp dir locally (#25780) (Alexandre Gaudreault, dependabot[bot], Pasha Kostohrys, pasha, Regina Voloshin, Shubham Singh, shubham singh mahar, github-actions[bot], CI, Josh Soref, argoproj-renovate[bot], Jakub Rudnik, Illia Oleksiuk, Aya Hosni, Nitish Kumar)ee1bf89test(e2e): fix TestDeletionConfirmation flakiness (#25902) (Alexandre Gaudreault)e988c55test(e2e): fix invalid AppSet test on master (#25939) (Alexandre Gaudreault)0114636test(e2e): oras binary not found locally if not installed in path (#25751) (Alexandre Gaudreault)f8899eetest(e2e): unstable CMP e2e test when running locally (#25752) (Alexandre Gaudreault)4aa2ba4test(e2e): update local certs so they are valid on MacOS (#25864) (Alexandre Gaudreault)9a777c6test(engine): cleanup hook tests (#25673) (Alexandre Gaudreault)48f01b5test(engine): refactor engine tests to ignore dry-run results (#25674) (Alexandre Gaudreault)9728b6cci: replace goreleaser github api calls with git commands (cherry-pick #27706 for 3.4) (#27710) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.9...v3.4.1
v3.4.0Compare Source
v3.3.11Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
cd3b64d: fix(lint): unnecessary nesting (cherry-pick #27815 for 3.3) (#27818) (@argo-cd-cherry-pick-bot[bot])82dd8ce: fix(ui): don't prefetch errors (#27877) (cherry-pick #27925 for 3.3) (#28023) (@argo-cd-cherry-pick-bot[bot])da10473: fix: nil-check (cherry-pick #28039 for 3.3) (#28041) (@argo-cd-cherry-pick-bot[bot])d556067: fix: prevent InvalidSpecError race in application controller startup (cherry-pick #27672 for 3.3) (#27844) (@argo-cd-cherry-pick-bot[bot])21d5538: fix: remove resourceVersion from ssd (#27406) (cherry-pick release-3.3) (#28016) (@blakepettersson)120eb31: fix: truncate labels for deletion hook resources (cherry-pick #27542 for 3.3) (#27715) (@choejwoo)Dependency updates
1cb5892: chore(deps): bump redoc/dompurify to v3.4.0 in /ui for fixing CVE-2026-41240(cherry-pick 3.3) (#27912) (@alkakumari016)Other work
9e25303: fix(gitops-engine): fix nil pointer dereference error in removeWebookMutation() (cherry-pick #27749 for 3.3) (#28032) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.10...v3.3.11
v3.3.10Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
eb947bf: fix: prevent panic on nil APIResource in permission validator (cherry-pick #26610 for 3.3) (#27753) (@argo-cd-cherry-pick-bot[bot])7b8c7be: fix: wrap lines toggle causes log lines to overflow container - Fixes [Issue #27586] (cherry-pick #27627 for 3.3) (#27671) (@argo-cd-cherry-pick-bot[bot])Other work
7879e63: Merge commit from fork (@pjiang-dev)00f83c4: Merge commit from fork (@blakepettersson)d7f8ba1: chore: align Go versions across Dockerfiles and downgrade Go version in go.mod (#27808) (@reggie-k)5c7eb8f: chore: bump otel/sdk to 1.43.0 (release-3.3) (#27807) (@nitishfy)7830a12: chore: update Go to 1.25.9 on release-3.3 to resolve CVEs (#27639) (#27656) (@ihmdika)ac11bec: fix(gitops-engine): apply HideSecretData to server-side diff results … (#27762) (@pjiang-dev)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.9...v3.3.10
v3.3.9Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
8178655: fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.3) (#27501) (@argo-cd-cherry-pick-bot[bot])c89b3a9: fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.3) (#27565) (@argo-cd-cherry-pick-bot[bot])96107fe: fix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick #27265 for 3.3) (#27525) (@argo-cd-cherry-pick-bot[bot])741a6f5: fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick #27589 for 3.3) (#27593) (@argo-cd-cherry-pick-bot[bot])Documentation
5a3a892: docs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick #27608 for 3.3) (#27612) (@argo-cd-cherry-pick-bot[bot])Dependency updates
0a2ba7c: chore(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 8.0.0 (cherry pick #27602 to release-3.3) (#27610) (@dudinea)184b8a9: chore(deps): bump go version to resolve CVEs (#27509) (@crenshaw-dev)Other work
fd7ecb3: Merge commit from fork (@alexmt)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.8...v3.3.9
v3.3.8Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
fb727cf: Revert "fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.3)" (#27400) (@crenshaw-dev)26c8152: fix(appcontroller): application controller in core mode fails to sync when server.secretkey is missing (#26793) (#27462) (@anandf)82b6d45: fix(appset): change appset resource status count to 5000 by default (cherry-pick #26249 for 3.3) (#26263) (@argo-cd-cherry-pick-bot[bot])9bff1c5: fix(cli): uses DrySource revision for app diff/manifests with sourceHydrator (#23817) (cherry-pick #24670 for 3.3) (#27481) (@argo-cd-cherry-pick-bot[bot])6f3ef7d: fix: avoid stale informer cache in RevisionMetadata handler (cherry-pick #27392 for 3.3) (#27396) (@argo-cd-cherry-pick-bot[bot])b64eb4f: fix: revert autosync event message format change (cherry-pick #27387 for 3.3) (#27389) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.7...v3.3.8
v3.3.7Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
ea51bd8: [release-3.3] fix: improve perf: switch parentUIDToChildren to map of sets, remove cache rebuild (#26863) (#27108) (@jcogilvie)4d2f261: fix(ci): run yarn install with --frozen-lockfile (cherry-pick #27099 for 3.3) (#27351) (@dudinea)671efff: fix(controller): reduce secret deepcopies and deserialization (#27049) (cherry-pick release-3.3) (#27129) (@rumstead)a77c150: fix(docs): Fix manifest path in Source Hydrator docs (cherry-pick #27123 for 3.3) (#27167) (@argo-cd-cherry-pick-bot[bot])f0b924f: fix(server): Ensure OIDC config is refreshed at server restart (cherry-pick #26913 for 3.3) (#27114) (@argo-cd-cherry-pick-bot[bot])7eedc7a: fix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (cherry-pick #27097 for 3.3) (#27365) (@argo-cd-cherry-pick-bot[bot])b0e0415: fix(ui): handle 401 error in stream (cherry-pick #26917 for 3.3) (#27227) (@argo-cd-cherry-pick-bot[bot])3b12b2e: fix: Add X-Frame-Options and CSP headers to Swagger UI endpoints (cherry-pick #26521 for 3.3) (#27154) (@argo-cd-cherry-pick-bot[bot])4939e1f: fix: force attempt http2 with custom tls config (cherry-pick #26976 for 3.3) (#27358) (@SamyDjemai)e372a7f: fix: pass repo.insecure flag tohelm dependency build(cherry-pick #27078 for 3.3) (#27083) (@argo-cd-cherry-pick-bot[bot])99e88e0: fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.3) (#27230) (@argo-cd-cherry-pick-bot[bot])2512512: fix: trigger app sync on app-set spec change (cherry-pick #26811 for 3.3) (#27130) (@argo-cd-cherry-pick-bot[bot])e451591: fix: use force flag in copyutil symlink to prevent repo-server crashes (cherry-pick #26613 for 3.3) (#27057) (@argo-cd-cherry-pick-bot[bot])b948ff0: fix: use unique names for initial commits (cherry-pick #27171 for 3.3) (#27197) (@argo-cd-cherry-pick-bot[bot])Dependency updates
899c5e8: chore(deps): bump fast-xml-parser from 4.5.3 to 4.5.6 in /ui - 3.3 (#27360) (@keithchong)7fd134a: chore(deps): bump go-jose from 4.1.3 to 4.1.4 (cherry-pick #27101 for… (#27208) (@blakepettersson)2daefc0: chore(deps): update notifications-engine dependency in release-3.3 to v0.5.1-0.20260316232552-d27ba0152c1c (#27093) (@pasha-codefresh)Other work
45cbc84: test(e2e): add e2e tests for reverse deletionOrder when progressive sync enabled (cherry-pick #26673 for 3.3) (#27340) (@ranakan19)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.6...v3.3.7
v3.3.6Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
4a823fe: fix: controller incorrectly detecting diff during app normalization (cherry-pick #27002 for 3.3) (#27013) (@argo-cd-cherry-pick-bot[bot])c5d7748: fix: wrong installation id returned from cache (cherry-pick #26969 for 3.3) (#27027) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.5...v3.3.6
v3.3.5Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
e53c10c: fix(UI): show RollingSync step clearly when labels match no step (cherry-pick #26877 for 3.3) (#26884) (@argo-cd-cherry-pick-bot[bot])03dda41: fix(ci): add .gitkeep to images dir (cherry-pick #26892 for 3.3) (#26911) (@argo-cd-cherry-pick-bot[bot])ff207a4: fix(server): fix find container logic for terminal (cherry-pick #26858 for 3.3) (#26934) (@argo-cd-cherry-pick-bot[bot])06d960d: fix(ui): Improve message on self-healing disabling panel (#26977) (cherry-pick #26978 for 3.3) (#26981) (@argo-cd-cherry-pick-bot[bot])0dc0a66: fix(ui): include _-prefixed dirs in embedded assets (cherry-pick #26589 for 3.3) (#26910) (@argo-cd-cherry-pick-bot[bot])494b44c: fix: Hook resources not created at PostSync when configured with PreDelete PostDelete hooks (cherry-pick #26996 for 3.3) (#26999) (@argo-cd-cherry-pick-bot[bot])422cabb: fix: stack overflow when processing circular ownerrefs in resource graph (#26783) (cherry-pick #26790 for 3.3) (#26879) (@argo-cd-cherry-pick-bot[bot])Dependency updates
476800e: chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.79.3 for release-3.3 (#26886) (#26953) (@dudinea)Other work
ea8a881: ci: test against k8s 1.35.0 (cherry-pick #26062 for 3.3) (#26860) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.4...v3.3.5
v3.3.4Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
182e4c6: fix(ci): Add missing git-lfs installer checksum for ppc64le (cherry-pick #26835 for 3.3) (#26836) (@argo-cd-cherry-pick-bot[bot])2fcc40a: fix: skip token refresh threshold parsing in unrelated components (cherry-pick 3.3) (#26806) (@gdsoumya)Documentation
01b86e7: docs: clarify cluster version change impact for ClusterGenerator, CMP Plugins and migration (#26851) (@reggie-k)Other work
e164f8c: chore: bump otel-sdk (release-3.3) (#26808) (@blakepettersson)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.3...v3.3.4
v3.3.3Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
6224d67: fix(actions): Use correct annotation for CNPG suspend/resume (cherry-pick #26711 for 3.3) (#26727) (@argo-cd-cherry-pick-bot[bot])968c633: fix(controller): handle comma-separated hook annotations for PreDelete/PostDelete hooks (cherry-pick #26420 for 3.3) (#26586) (@argo-cd-cherry-pick-bot[bot])4411801: fix(health): use note.drySha when available (cherry-pick #26698 for 3.3) (#26750) (@argo-cd-cherry-pick-bot[bot])3d3760f: fix(ui): standard resource icons are not displayed properly.#26216 (cherry-pick #26228 for 3.3) (#26380) (@argo-cd-cherry-pick-bot[bot])c6df35d: fix: consistency of kubeversion with helm version 3 3 (#26744) (@ppapapetrou76)5e19021: fix: multi-level cross-namespace hierarchy traversal for cluster-scop… (#26640) (@agaudreault)Other work
c61c593: chore: use base ref for cherry-pick prs (cherry-pick #26551 for 3.3) (#26553) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.2...v3.3.3
v3.3.2Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
67c2319: fix: use csapgrade to patch managedFields for client-side apply migration (cherry-pick #26289 for 3.3) (#26516) (@argo-cd-cherry-pick-bot[bot])Documentation
1bf62ae: docs: instruct to enable ClientSideApplyMigration in 3.3.2 (cherry-pick #26547 for 3.3) (#26549) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.1...v3.3.2
v3.3.1Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
8449d9a: fix(server): OIDC config via secrets fails (#18269) (cherry-pick #26214 for 3.3) (#26423) (@argo-cd-cherry-pick-bot[bot])d0b2a6c: fix: Fix excessive ls-remote requests on monorepos with Auto Sync enabled apps (26277) (cherry-pick #26278 for 3.3) (#26372) (@argo-cd-cherry-pick-bot[bot])e464f6a: fix: AppProject finalizer should consider apps in all allowed namespaces (#24347) (cherry-pick #26416 for 3.3) (#26480) (@argo-cd-cherry-pick-bot[bot])445916f: fix: compressedLayerExtracterStore+isCompressedLayer - allow tar.gzip suffixes (cherry-pick #26355 for 3.3) (#26376) (@argo-cd-cherry-pick-bot[bot])Dependency updates
6126798: chore(deps): Upgrade Kustomize to 5.8.1 (cherry-pick #26367 for 3.3) (#26369) (@argo-cd-cherry-pick-bot[bot])Other work
92df21c: chore(appset): cherry-pick basic progressive sync e2e tests (#26092) (#26191) (@ranakan19)4b0a2c0: chore: bumps ubuntu base docker image to 25.10 (cherry-pick #25758 for 3.3) (#26436) (@argo-cd-cherry-pick-bot[bot])273683b: chore: placate Sonar by ignoring testdata files (cherry-pick #26371 for 3.3) (#26377) (@argo-cd-cherry-pick-bot[bot])8df5e96: test(e2e): CMP test fails locally on Mac (cherry-pick #25901 for 3.3) (#26340) (@argo-cd-cherry-pick-bot[bot])2449314: test(e2e): add isolation by ensuring unique name (cherry-pick #25724 for 3.3) (#26287) (@ranakan19)c4f0cd3: test(e2e): configurable tmp dir locally (#25780) (#26339) (@ranakan19)55d0d09: test(e2e): fix TestDeletionConfirmation flakiness (cherry-pick #25902 for 3.3) (#26284) (@argo-cd-cherry-pick-bot[bot])6f270cc: test(e2e): oras binary not found locally if not installed in path (cherry-pick #25751 for 3.3) (#26337) (@argo-cd-cherry-pick-bot[bot])54f2916: test(e2e): unstable CMP e2e test when running locally (cherry-pick #25752 for 3.3) (#26288) (@argo-cd-cherry-pick-bot[bot])0038fce: test(e2e): update local certs so they are valid on MacOS (cherry-pick #25864 for 3.3) (#26338) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.0...v3.3.1
v3.3.0Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
ce2fb70: Revert "feat: Ability to create custom labels for namespaces created … (#455) (@pasha-codefresh)e50dd00: feat(actions): Add cloudnativepg reload, restart, promote, suspend and resume actions (#24192) (@rouke-broersma)3ee16c0: feat(actions): PullRequest merge action (#24823) (@crenshaw-dev)0c77f3c: feat(actions): add icons to apps actions (#25343) (#25344) (@rickbrouwer)a64933f: feat(actions): add pause action for KEDA ScaledObject and ScaledJob (#25301) (#25302) (@rickbrouwer)97d50a1: feat(appset): add pprof endpoints (#25044) (@rumstead)482440b: feat(appset): use clone instead of replace on sprig templates to reduce function copies (#25576) (@rumstead)64421a7: feat(ci): add run failure link to cherry pick comment (#24838) (@crenshaw-dev)4678361: feat(cli): Add additional examples toproj listcommand (#25169) (@onasser1)ac12ab9: feat(cli): Updated CLI to show Plugins during tab completion (#24758) (@christianh814)53c3542: feat(cli): add powershell completion (#25595) (@onasser1)f866959: feat(cli): added support for filtering by group in app get-resource CLI command (#25495) (@sabre1041)ac1a2f8: feat(health): add grafana-org-operator Health (#25662) (@sathieu)0c6fa28: feat(hydrator): add inline parameter support to Source Hydrator (#24228) (#24277) (@sangyeong01)dea7ead: feat(hydrator): avoid unnecessary repo-server calls (#25150) (@pbhatnagar-oss)6cd30d3: feat(hydrator): don't push commits if manifests don't change (#25056) (@pbhatnagar-oss)fe02a8f: feat(redis): Secrets credentials via volume mount (#24597) (@Mangaal)bbc3e99: feat(repo): add support for github app authentication without installationid (#25339) (#25374) (@pbhatnagar-oss)1ae13b2: feat(ui): conditionally render app view extensions (#25132) (@jwinters01)afaf16b: feat(ui): hide sync option 'replace' if sync with replace is disabled in the server (issue no. #22625) (#22647) (@jan-mrm)528482c: feat(ui): implement abstraction layer for appset ui support (#24916) (@pjiang-dev)b74c7aa: feat(ui): improve sync warnings (#25524) (@jwinters01)90b3e85: feat(ui): support custom icons (#20864) (@crenshaw-dev)a56a803: feat: Ability to create custom labels for namespaces created with syncOptions CreateNamespace (#443) (@pasha-codefresh)9ab0b2e: feat: Add ability to hide certain annotations on secret resources (#577) (@svghadi)9ee5cca: feat: Add health check for Ceph CRD (#24111) (@afarbos)51c9add: feat: Add health checks for ServiceBinding and ServiceInstance (#25007) (@dzahariev)8c890d4: feat: Add impersonation support for App finalizer deletion (#24524) (@ccjette-logmein)ed537d5: feat: Add path flag to ArgoCD CLI app list (#24834) (@onasser1)1c4ef33: feat: Add server-side apply manager config (#418) (@leoluz)7493226: feat: Add support for HPA v2 (autoscaling/v2) (#411) (@EppO)1a6973a: feat: Add the ability to not autogenerate external URLs from ingress object (#13705) (#25383) (@rkevin-arch)ed7c77a: feat: Apply out of sync option only (#533) (@pasha-codefresh)d65e9d9: feat: Enable SkipDryRunOnMissingResource sync option on Application level (#712) (@pasha-codefresh)aba3819: feat: Implement Server-Side Diffs (#522) (@leoluz)6b2984e: feat: More optimal IterateHierarchyV2 and iterateChildrenV2 [#600] (#601) (@andrii-korotkov-verkada)4eb3ca3: feat: Namespace/CRD creation should happen before PreSync phase (#159) ( <>)3bf3d8a: feat: PreDelete hooks support (Issue #13975) (#22288) (@pedro-cs-ribeiro)5fd9f44: feat: Prune resources in reverse of sync wave order (#538) (@svghadi)e360551: feat: Support for retries when building up cluster cache (#374) (@jannfis)e56739c: feat: add CreateResource to kubectl (#12174 and #4116) (#516) (@reggie-k)0b4199b: feat: add FindResources method that allows to find any resource in cache (#204) ( <>)f9456de: feat: add GvkParser in cluster cache (#404) (@leoluz)1b08fd1: feat: add ability to use shallow clone for repositories (#24931) (@alexmt)d8b1a12: feat: add basic support for server-side apply (#363) (@sathieu)bfac3f5: feat: add creation timestamp (#87) (@taisho6339)9664cf8: feat: add profile feature for agent, and fix logr's panic (#444) (@alswl)f6f1a42: feat: add status.resourcesCount field to appset and change limit default (#24698) (@alexmt)c7bab2e: feat: add support split yaml that return actual yamls (#346) (@pasha-codefresh)ed70eac: feat: add sync delete option (#507) (@gdsoumya)aae8ded: feat: added cascade option to DeleteResource - argo-cd #5368 (#220) (@ishitasequeira)0000f05: feat: adds various OCI metrics (#25493) (@ppapapetrou76)e77acec: feat: allow limiting clusterResourceWhitelist by resource name (#12208) (#24674) (@crenshaw-dev)09e5225: feat: application resource deletion protection (#630) (@alexmt)69dfa70: feat: auto migrate kubectl-client-side-apply fields for SSA (#727) (@pjiang-dev)187312f: feat: auto respect rbac for discovery/sync (#532) (@gdsoumya)bc9ce57: feat: better error message for sync operations (#336) (@pasha-codefresh)9163758: feat: cluster cache should expose synchronization error (#32) ( <>)ae94ad9: feat: configurable watch resync timeout. ability to disable cluster resync (#353) (@jessesuen)3c54508: feat: create namespace (#94) (@mayzhang2000)ddce93c: feat: cross namespace hierarchy traversal from cluster-scoped parents to namespaced children (fixes #24379) (#24847) (@jcogilvie)92a3433: feat: detect PVC StatefulSet ownership (#112) ( <>)4ea93db: feat: enable forks to release and publish to custom quay registries (#25365) (@reggie-k)ddc92c9: feat: expose APIGroups in GetClusterInfo (#283) ( <>)762cb1b: feat: expose all kubernetes resources in cluster info (#337) ( <>)8aefb18: feat: expose cluster sync retry timeout (#373) (@yeya24)e58bdf2: feat: implement KEDA scaledJob health-checks (#25106) (@rickbrouwer)cd2e16d: feat: implement gitops-agent (#37) ( <>)605958d: feat: improve memory consumption limiting (#100) (@ash2k)344b1bc: feat: improve sync operation messages (#84) ( <>)cfdefa4: feat: introduce SyncWaveHook callbacks invoked after applying each sync wave (#177) (@jessesuen)5c6aa59: feat: oidc background token refresh (#23727) (@devopsjedi)82f0935: feat: prune last (#203) (@mayzhang2000)c0c2dd1: feat: retry with client side dry run if server one was failed (#548) (@pasha-codefresh)c617562: feat: return images from resources when sync occurs (#642) (@Aaron-9900)7669da6: feat: split refresh button with dropdown for hard refresh (#25445) (@choejwoo)89ddd0d: feat: support 'Replace=true' sync option (#246) ( <>)11d47a6: feat: support configuring cluster cache re-sync timeout (#107) ( <>)723667d: feat: support exiting early from IterateHierarchy method (#388) (@alexmt)e8cfb83: feat: support limiting number of concurrent k8s list queries (#55) ( <>)a4c77d5: feat: support managing cluster resources in a namespaced mode (#297) ( <>)1ce2acc: feat: support replace strategy for CRD (#252) ( <>)89cb483: feat: support resource prune propagation policy (#235) ( <>)ff6e9f8: feat: support resource pruning in gitops-agent (#45) ( <>)fbecbb8: feat: sync-options annotation with Force=true (#414) (#560) (@kkk777-7)026d10e: feat: syncing to a different revision requires override privilege (#22858) (@schraax)552ad1c: feat: update unpause fast/gradual actions for Numaplane rollouts (#24545) (@dpadhiar)90979fe: feat: use Kubernetes v1.18.6 libraries (#102) (@ash2k)1301eaa: feat: use different env variable to control server side K8s API call timeout (#25271) (@ppapapetrou76)Bug fixes
f3ae26b: fix(actions): enable pause action so deployment can be paused (#25394) (#25395) (@rickbrouwer)15568cb: fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (cherry-pick #25622 for 3.3) (#25909) (@argo-cd-cherry-pick-bot[bot])e582975: fix(appset): ensure finalizer is added when deletionOrder is set as reverse (#25125) (@ranakan19)40e9a06: fix(appset): handle pre/post delete hook finalizers conflicts (#25539) (@agaudreault)c377101: fix(appset): progressive sync loop when application has sync errors (#24507) (@agaudreault)d78929e: fix(cluster): reduce lock contention on cluster initialization (#660) (@crenshaw-dev)adb68bc: fix(clusterCache): don't miss finding live obj if obj is cluster-scoped and namespacedResources is in transition (#597) (@ncdc)e181fbb: fix(cmp): fix plugins not having access to argocd cli for git ASKPASS (#24665) (@zachaller)ef5b778: fix(health): incorrect reason in PullRequest script (#24826) (@crenshaw-dev)2849f53: fix(health): typo in PromotionStrategy health.lua (@crenshaw-dev)7c0f032: fix(health): update crossplane healthchecks (#25386) (@jonasz-lasut)28ec26a: fix(health): use promotion resource Ready condition regardless of reason (#24971) (@crenshaw-dev)dab4cc0: fix(hooks): always remove finalizers on create if hook exists (#770) (@agaudreault)b52a075: fix(hydrator): .gitattributes include deeply nested files (#25870) (cherry-pick #26011 for 3.3) (#26013) (@argo-cd-cherry-pick-bot[bot])a2659e9: fix(hydrator): appset should preserve annotation when hydration is requested (#25644) (@agaudreault)48a9dcc: fix(hydrator): empty links for failed operation (#25025) (cherry-pick #26014 for 3.3) (#26018) (@argo-cd-cherry-pick-bot[bot])fe0466d: fix(hydrator): git fetch needs creds (#25727) (cherry-pick #25738 for 3.3) (#25742) (@argo-cd-cherry-pick-bot[bot])393cb97: fix(hydrator): hydrated sha missing on no-ops (#25694) (cherry-pick #25695 for 3.3) (#25697) (@argo-cd-cherry-pick-bot[bot])0fa47b1: fix(hydrator): pass destination.namespace to manifest rendering (#25478) (cherry-pick #25699 for 3.3) (#26019) (@argo-cd-cherry-pick-bot[bot])708c636: fix(hydrator): race when pushing notes (cherry-pick #25700 for 3.3) (#25709) (@argo-cd-cherry-pick-bot[bot])05b4169: fix(metrics): more consistent oci metrics (cherry-pick #25549 for 3.3) (#25728) (@argo-cd-cherry-pick-bot[bot])ed983d8: fix(oci): loosen up layer restrictions (#24640) (@blakepettersson)5efb184: fix(oidc): check userinfo endpoint in AuthMiddleware (#23586) (@the-technat)7921242: fix(server): Dry run always in client mode just for yaml manifest validation even with server side apply (#564) (@anandf)7430650: fix(server): ensure resource health status is inferred on application retrieval (#24832) (#24851) (@vr009)20604f1: fix(server): update resourceVersion on Terminate retry (cherry-pick #25650 for 3.3) (#25717) (@argo-cd-cherry-pick-bot[bot])4a5648e: fix(server): use server side dry run in case if it is server side apply (#546) (@pasha-codefresh)b3a2ec1: fix(sync): ApplyOutOfSyncOnly=true sync option is not honoured for cluster scoped resources (#765) (@anandf)8007df5: fix(sync): create namespace before dry-run (#731) (@agaudreault)c2f611f: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (#24802) (@aali309)27a503a: fix(ui): add null-safe handling for assignedWindows in status panel (#25128) (@choejwoo)65cbbca: fix(ui): convert EditablePanel, EditbleSection and Query to function component (#22776) (@linghaoSu)7e1db4a: fix(ui): convert PodView components to functional components (#23781) (@chansuke)de901da: fix(ui): convert ProjectDetails components to functional components (#23797) (@chansuke)59c9c60: fix(ui): convert TagsInput component to functional component (#23795) (@jiwlee97)b4e022c: fix(ui): convert class component to functional component in project-sync-windows-edit (#23837) (@jiwlee97)6d40847: fix(ui): fix minor UI issue in app operation state (#24845) (@choejwoo)ed1fb04: fix(ui): inaccurate timestamp in tooltip for root node (#25014) (@choejwoo)e7b51da: fix(ui): migrate certs-list.tsx from class to functional (#23646) (#23820) (@bianbbc87)68d10fe: fix(ui): migrate gpgkeys-list.tsx from class to functional (#23646) (#23821) (@bianbbc87)44324c0: fix(ui): migrate repos-list.tsx from class to functional (#23646) (#23818) (@bianbbc87)ad96cb8: fix(ui): overlapping UI elements and add resource units to tooltips (#24717) (@choejwoo)0b40e3b: fix(ui): refactor tooltip, align action btns in app tile view (#25098) (@choejwoo)8dcaa2f: fix(ui): show delete/details action dropdown for orphaned resource (#24766) (@choejwoo)24fbf28: fix: shell compatibility issues in Procfile (#24792) (@adityaraj178)0679215: fix: #24781 update crossplane healthchecks to V2 version (#24782) (@jonasz-lasut)2c97a96: fix: 'ResourceOperations.CreateResource' should use 'kubectl' package to properly execute create operation (#298) ( <>)847cfc9: fix: Ability to disable Server Side Apply on individual resource level (#634) (@pasha-codefresh)2565df3: fix: Add ScaleDownLimit as health state for HPA (#343) (@harikrongali)23f41cb: fix: Add ScalingDisabled healthy state to HPA (#323) (@maruina)5d680d6: fix: Add additional healthy states for HPA (#234) (@mikebryant)61c0cc7: fix: Add missing IngressClass in kind order when syncing tasks (#380) (@terrytangyuan)c0b63af: fix: Address issue during diff when secret data is nil (#345) (@leoluz)ed6fe76: fix: Allow the ISVC to be healthy when the Stopped Condition is False (#25312) (@hdefazio)da66819: fix: Change wrong log level in cluster.go openAPISchema, gvkParser (#430) (@dllegru)6657adf: fix: Check for err == nil before Fatal (#61) (@darshanime)3a3f6a3: fix: Child apps should not affect parent app's health by default (#153) (@keithchong)d59276a: fix: Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (#24587) (@aali309)760fcb6: fix: Current time is not set in startedAt in NewSyncContext (#180) (@yutachaos)814d79d: fix: Data race between gitops-engine's pkg/cache/cluster.go and itself, on Argo CD startup (#4627) (#168) (@jgwest)872c470: fix: Detect unknown fields in invalid specs as OutOfSync (#154) (@jgwest)380f7be: fix: Dry run stuck on pre sync hook (#236) (@mayzhang2000)2bc3fef: fix: Fix argument order in resource filter (#436) (@jannfis)762f9b7: fix: Fix checking dryRun when using Server Side Apply (#699) (@pjiang-dev)dbef22c: fix: Fixed inconsistent alignment of titles and headings in status panel (#23160) (@sivasath16)30abebd: fix: GCP config connector healthchecks do not make use of existing observedGeneration #24458 (#24459) (@Hapshanko)53cbe5f: fix: HPA health check is making incorrect assumption on annotations (#190) (@mayzhang2000)2daaf1e: fix: Health status for HTTPRoute with multiple generations (#24958) (#24959) (@lindeskar)54bbebf: fix: Hook Deletion Policies HookSucceeded should be run after whole H… (#144) (@mayzhang2000)93cf3c5: fix: Lock to write MockKubectlCmd.LastValidate to fix the race condition (#52) (@suzuki-shunsuke)1f14791: fix: Make CephCluster CRD health script deterministic (#25391) (#25392) (@rkevin-arch)dcb86f7: fix: Namespace auto-creation (#105) (@mayzhang2000)3ef5ab1: fix: New kube applier for server side diff dry run with refactoring (#662) (@andrii-korotkov-verkada)ed31317: fix: Only consider resources which supports appropriate verb for any given operation (#423) (@jannfis)0d0cec6: fix: Only showapiVersion/kindwhentargetStateis defined (#25068) (@jsoref)32c32a6: fix: Only show please update resource specification message when spec… (cherry-pick #25066 for 3.3) (#25894) (@argo-cd-cherry-pick-bot[bot])b7c7d02: fix: Opentelemetry Collector in sidecar mode doesn't count instances (#25407) (@JorTurFer)fbcaf35: fix: Progress Sync Unknown in UI (#24202) (@aali309)69d5d94: fix: Revert test tools image redis to non-alpine based image (#25381) (#25382) (@rkevin-arch)8849c3f: fix: Server side diff now works correctly with fields removal (#640) (@andrii-korotkov-verkada)89c110b: fix: Server-Side diff removed fields missing in diff (#722) (@pjiang-dev)4fd1847: fix: Server-side diff shows incorrect diffs for list related changes (#688) (@pjiang-dev)73bcea9: fix: Set QPS and burst rate for resource ops client (#395) (@jannfis)8d99997: fix: Set TLSServerName in NewKubeConfig (#156) (@ailurarctos)7171d62: fix: Support transition from a git managed namespace to auto-create n… (#141) (@mayzhang2000)33f542d: fix: SyncOption Replace=True is broken (#321) ( <>)74de77a: fix: Toggleautomated.enabledto disable auto-sync for rollbacks (cherry-pick #25719 for 3.3) (#25943) (@argo-cd-cherry-pick-bot[bot])598dbcb: fix: Update copyutil command 'cp -n' to resolve warning (#24708) (@marcofranssen)069a5e6: fix: WithInitialState should require start time to support generateName hooks properly (#183) (@jessesuen)b0c5e00: fix: add default protocol to subset of ports if it is empty (#347) (@ahalay)ee1db09: fix: add missing scheme install imports (#89) ( <>)917f5a0: fix: add suspended condition (#484) (@ashutosh16)c1e2359: fix: address kubectl auth reconcile during server-side diff (#562) (@leoluz)a6472c8: fix: allow docker dhi helm charts to be used (cherry-pick #25835 for 3.3) (#25964) (@argo-cd-cherry-pick-bot[bot])d5d7e8f: fix: allow flags to be set whenauto-syncis disabled (#24328) (#24380) (@downfa11)bc811c5: fix: allow for backwards compatibility of durations defined in days (#24769) (@lplazas)46073c1: fix: applyOutOfSyncOnly should work with sync waves as well (#251) (@kshamajain99)2a9c144: fix: applyoutofsync with dry-run (#253) (@kshamajain99)b4dd8b8: fix: avoid acquiring lock on mutex and semaphore at the same time to prevent deadlock (#521) (@alexmt)7a09f69: fix: avoid calling UpdateRevisionForPaths unnecessary (#25151) (@alexmt)d25b8fd: fix: avoid memory and events spike after forcesfully refreshing api cache (#145) ( <>)54992bf: fix: avoid resources lock contention utilizing channel (#629) (@mpelekh)98ccd3d: fix: calculate SSA diffs with smd.merge.Updater (#467) (@leoluz)fe4ab01: fix: capture stderr in executil RunWithExecRunOpts (#25139) (@dudinea)56e31f3: fix: change failed conversion log level to debug (#69) ( <>)81dcc2f: fix: check for no local config when runningargocd context dev-system(#25245) (@anbraten)828dc75: fix: check resource namespaces are managed (#143) (@jopit)cd6a9aa: fix: cherry pick #25516 to release-3.3 (#26114) (@FourFifthsCode)3f3e54f: fix: cherry-picking with quotes in the title (#25017) (@Joibel)8fbb44c: fix: close response body on error paths to prevent connection leak (cherry-pick #25824 for 3.3) (#26005) (@argo-cd-cherry-pick-bot[bot])f4e479e: fix: consider Replace/Force sync option on live resource annotations (#26110) (#26189) (@agaudreault)610ea27: fix: correct mismatch in typescript repository model (#25273) (#25274) (@allanyung)ed3acd0: fix: correct typo (#24671) (@adityaraj178)c04f859: fix: correctly infer ownership references from PVC to StatefulSet (#138) ( <>)90e48bc: fix: crashing page on application create for write secret (#25582) (@emirot)9129e86: fix: create read and write secret for same url (#25581) (@emirot)2545f6c: fix: data race fixes and cleanups (#122) (@ash2k)b576959: fix: data race on ctxCompleted (#86) (@ash2k)3f38eee: fix: deadlock in listener (#271) (@ash2k)a0c23b4: fix: deadlock on start missing watches (#604) (@agaudreault)f38075d: fix: deduplicate OpenAPI definitions for GVKParser (#587) (@crenshaw-dev)a22b346: fix: deduplicate OpenAPI definitions for GVKParser (#587) (#590) (@crenshaw-dev)53b0bea: fix: default to tree view if extension shouldn't be shown (#25578) (@jwinters01)6fe0c00: fix: diff should perform server side like apply during resource diffing (#82) ( <>)eb210cf: fix: diffing should not fail if known kubernetes resource has invalid fields (#88) ( <>)ad9a694: fix: do not replace namespaces (#524) (@blakepettersson)c23d4d7: fix: don't remove defaulted fields and rely only on three way diff merge during diffing (#68) ( <>)ca7dcbc: fix: don't show error about missing appset (#24995) (@alexmt)c517b47: fix: ensureCRDReady check did not work for v1 CRDs (#378) (@terrytangyuan)2cf3a72: fix: exclude creationTimestamp from diffing (#128) ( <>)478f8cb: fix: file extension comparisons are case sensitive (#243) (@mayzhang2000)05ccc01: fix: fix cherry-pick bot again because I broke sign off (#25040) (@Joibel)70ab73c: fix: fix nil pointer dereference in cluster caching (#34) ( <>)1ade3a1: fix: fix temporary files written to '/dev/shm' not cleaned up (#568) (#569) (@jgwest)df8727c: fix: git tag override (#25530) (@tossmilestone)d948e6b: fix: github actions versions and warnings (#639) (@jmeridth)5f90e7b: fix: go mod tidy is not working due to k8s.io/externaljwt dependency (#710) (@pasha-codefresh)0aecd43: fix: handle nil ParseableType from GVKParser (#574) (@leoluz)36e7746: fix: health check for HPA doesn't catch all good states (#369) ( <>)21b78bd: fix: health status for daemonset with onDelete updateStrategy (#137) (@mayzhang2000)c9bb009: fix: health status is set to healthy for statefulset with updateStrat… (#136) (@mayzhang2000)1e9f4aa: fix: honor debuglog cmd option in application controller (#25591) (@ppapapetrou76)7396c1a: fix: hydration errors not set on applications (#24755) (@agaudreault)59a09cd: fix: improve manifest parsing (#97) (@ash2k)3d64c21: fix: invalid error message on health check failure (#26040) (cherry-pick #26039 for 3.3) (#26063) (@argo-cd-cherry-pick-bot[bot])8617aa1: fix: leverage RetryWatcher to watch cluster events and introduce periodical K8S API state resynchronization (#133) ( <>)452f6c6: fix: limit number of resources in appset status (#24690) (@alexmt)bf0661e: fix: make webhook payload handlers recover from panics (#24862) (@jake-ciolek)9393e58: fix: makefile mkdocs directive (#25480) (@emirot)e284fd7: fix: managed namespaces should not mutate the live state (#479) (@leoluz)b3254f8: fix: missing resource version in tests (#256) (@ash2k)28e8472: fix: nil and empty ignoredifferences (cherry-pick #25980 for 3.3) (#26000) (@argo-cd-cherry-pick-bot[bot])f420bb9: fix: panic for data type conversion to *unstructured.Unstructured. (#109) (@mayzhang2000)0bc2f8c: fix: panic: interface conversion: interface {} is string (#189) (@mayzhang2000)0be58f2: fix: printing gvkparser error message (#585) (@pgier)b7dbff8: fix: reduces information returned by settings api when accessed anonymously (#25346) (@ppapapetrou76)3c778a5: fix: register new CRD to apigroups (#247) (@kshamajain99)728f2e7: fix: regression on creationTimestamp with server-side diff (#25210) (@pjiang-dev)b58645a: fix: remove deprecated ioutil (#528) (@fengshunli)3951079: fix: remove last-applied-configuration before diff in ssa (#460) (@leoluz)9a03edb: fix: remove lock acquisition in ClusterCache.GetAPIResources() (#543) (@jessesuen)f11f15b: fix: remove optional parameter from NewClusterCache function (#36) ( <>)8b2e0e1: fix: remove unnecessary --self-heal-backoff-cooldown-seconds flag from app controller (#25579) (@alexmt)f649502: fix: removeNamespaceAnnotation should not panic if annotation has unexpected value (#361) (@leoluz)1f371a0: fix: replace k8s.io/endpointslice to v0.29.2 (#583) (@alexmt)a9fd001: fix: replace k8s.io/endpointslice version (#582) (@alexmt)d1f8cdd: fix: resolve argocdService initialization issue in notifications CLI (#24664) (@puretension)b0fffe4: fix: resolve deadlock (#539) (@gdsoumya)4a75a75: fix: restore ability to connect a repo in the GUI (#25259) (@allanyung)21ae489: fix: return empty instead of error if cache unavailable (#25072) (@pjiang-dev)60f2ff5: fix: return empty list instead of nil to prevent panic. Fixes #25189 (#25192) (@ivanpedersen)5444415: fix: revert #24197 (#25294) (@blakepettersson)73452f8: fix: run go mod tidy in ci workflow (#652) (@jmeridth)fb9d974: fix: server-side diff shows duplicate containerPorts (#24785) (@pjiang-dev)093aef0: fix: server-side diff shows refresh/hydrate annotations (#737) (@pjiang-dev)a1dc4c5: fix: sort endpoint IP addresses before diffing (#160) (@wtam2018)c036d3f: fix: sort fields to correctly calculate diff in server-side apply (#456) (@leoluz)e8d9803: fix: stop relying on imported types for ingress health check (#335) (@jessesuen)58cd2c3: fix: stop using deleted method 'SetPopulateResourceInfoHandler'; regenerate cluster cache mock; (#47) ( <>)96038ba: fix: structured merge diff fix for null metadata field (#24844) (@pjiang-dev)6cde798: fix: structured-merge diff apply default values in live resource (#435) (@leoluz)65db274: fix: stuck hook issue when a Job resource has a ttlSecondsAfterFinished field set (#646) (@dejanzele)c5bf3a2: fix: sync hooks should be deleted after sync phase/wave completion (#92) ( <>)a9f11fa: fix: sync option applyOutOfSync (#245) (@kshamajain99)354817a: fix: sync should apply Namespaces and CRDs before resources that depend on them (#225) ( <>)f68f0ec: fix: the concurrency issue with git detached processing in Repo Server (#25101) (#25127) (@dudinea)983f47e: fix: typo error in comments (#24650) (@warjiang)c3079fc: fix: update ExternalSecret discovery.lua to also include the refreshPolicy (#24707) (@KyriosGN0)425d65e: fix: update golangci-lint ci (#529) (@fengshunli)38f73a7: fix: update normalization for ignoreDifferences on server-side diff (#747) (@pjiang-dev)99bd42d: fix: update packages structure (#42) ( <>)9198b79: fix: update searchbar props on url parameter change (#24930) (@jwinters01)e932dc2: fix: use custom cluster secret informer (#25534) (@blakepettersson)a880fee: fix: use informer in webhook handler to reduce memory usage (#24622) (@alexmt)cfb6f5e: fix: use registry forhelm registry ..commands (#23142) (@blakepettersson)42e1b44: fix: use streaming YAML decoder from Kubernetes (#85) (@ash2k)0eede80: fix: volumeClaimTemplates are out of sync incorrectly (#127) ( <>)7495c63: fix: workflows without status.phase should be considered Progressing (#296) (@jessesuen)81073bd: fix:(ui) don't render ApplicationSelector unless the panel is showing (#25201) (@jwinters01)Documentation
6b1654b: docs(OCI): Add private repository examples for private OCI repo (#24737) (@GuillaumeASSIER)f308ebf: docs(hydrator): document commit-server ServiceMonitor (#24800) (@crenshaw-dev)be2b7da: docs(users): Add Dematic to USERS.md (#25246) (@jefftougas)ce62770: docs(users): add Topicus.Education to adopters list (#25215) (@sboschman)b8ca641: docs(webhook): document Azure DevOps username/password (#24693) (@crenshaw-dev)b3dfab5: docs: Add Collins Aerospace to USERS.md (#25247) (@jeremyj563)be31558: docs: Add Expedia to USERS.md (#25251) (@manali1205)43828a7: docs: Add IQVIA to the USERS.md list (#25253) (@jonathan-dale)3c12c01: docs: Add docs for CronJob health checks (#25477) (@dobesv)7c3b710: docs: Add documentation for GitHub Actions integration (#22953) (@applejag)82a2b76: docs: Add documentation fornameproperty on Applicationsourcesresource (#24937) (@zentron)2ab3b0d: docs: Adding Arcadia to USERS.md (#25242) (@jgavinray)bcff1f6: docs: Application source is not an array (#25411) (@stieler-it)de781f4: docs: ApplicationSet any-namespace supports glob/regex (#25403) (@Mangaal)98a2261: docs: Delete dangling word in Source Hydrator docs (#24601) (@josemaia)910661f: docs: Document how to change --disable-auth in dev guide (#25308) (@reggie-k)9c64f4d: docs: Document setting TARGET_ARCH for running make image locally on Mac with Apple chip (#25334) (@reggie-k)ef6a27f: docs: Document the correct sync option to disable client side migration (#25288) (@bryanhorstmann)06bffeb: docs: Document usage of ?. in notifications triggers and fix examples (#25352) (#25418) (@dudinea)ba50c4a: docs: Fixes kubectl exec command in troubleshooting.md (#25387) (@mathewpeterson)7065fbb: docs: Improve switch to annotation tracking docs, clarifying that a new Git commit may be needed to avoid orphan resources (#25309) (@reggie-k)76c4996: docs: Mention default secret used to find Dex client secrets (#24105) (@kwentine)51b93e7: docs: Remove old link in USERS.md (#24646) (@onasser1)d92ad4d: docs: Set Regina as release approver for 3.0 (#25349) (@todaywasawesome)fe3632f: docs: Update Argo CD installation and API server access instructions (#25120) (@revitalbarletz)0a93e57: docs: Update Kustomize documentation for forceCommonLabels and forceCommonAnnotations (#25138) (@revitalbarletz)2d2249d: docs: Update USERS.md (#24806) (@zxselimcan)27715cd: docs: Update index.md to remove gitops-engine dependency reference (#25335) (@reggie-k)26efb17: docs: Update notes on Argo+Flux collaboration (#126) ( <>)84d94c0: docs: Update plugin generator docs to include overview (#25292) (@LogicalShark)1f8e9d9: docs: Update release.md to add step for retrying failed docs build in readthedocs (#25341) (@reggie-k)576c0c2: docs: Update telepresence command in the debugging-remote-environment.md (#24949) (@Julian-Chu)96804e8: docs: Update webhook documentation to clarify application sets (#25368) (@todaywasawesome)72e88be: docs: add Cilium Gateway API example for Argo CD with HTTP and gRPC routes (#25405) (@intojhanurag)54f9b8c: docs: add MongoDB to users.md (#25248) (@sakib)7ba0898: docs: add added healthchecks to upgrade docs (#25487) (@blakepettersson)f5eaae7: docs: add app password step to retrieve using gmail support (#22706) (@afzal442)42929ff: docs: add explanation ofdrySourcein hydrator (#25470) (@nitishfy)ebca052: docs: add git concurrency issue in upgrade instruction (#25167) (@nitishfy)1bce29f: docs: add missing closing bracket (#24659) (@melosa11)9a6cf9d: docs: add myself as reviewer (#179) (@ash2k)7ba62f9: docs: add overrides in multi-source applications (#25089) (@afzal442)625651c: docs: add releasing.md file (#35) ( <>)0447ab6: docs: add screenshot of 'Confirm Pruning' experience (#25612) (@crenshaw-dev)98d0e84: docs: add user content for managed-by-url annotation (#25055) (@aali309)8639b7b: docs: added Helm 3.19.4 upgrade to the upgrade guide (#25776) (@reggie-k)d7954f0: docs: adds a section for OCI private repos in OCI dcos (#25572) (@ppapapetrou76)f67da0b: docs: align operator-manual with actual values (#25594) (@kejne)a2f57be: docs: application view ui extension docs (#25050) (@jwinters01)943936a: docs: clarify default hook deletion policy (#25170) (@Globulard)9c4579b: docs: clarify explanation of reconciliation interval and auto-sync behavior (#25024) (@nitishfy)c3b39b3: docs: clarify project description (#53) ( <>)ca84c31: docs: clarify resource.exclusions 25009 (#25107) (@sdahlbac)706e469: docs: custom actions contributor guide (#25461) (@reggie-k)df17961: docs: document 'top level' packages (#44) ( <>)be0d295: docs: explainrollingSyncexample (#25509) (@nitishfy)8373059: docs: fix doubled data field in notification examples (#25354) (@jckinjo)2f175fc: docs: fix duration known type (#25035) (@fad3t)91c479b: docs: fix exponential backoff timeout parameter documentation (#21021) (#25601) (@sahanajc4)9087ad7: docs: fix inconsistency in application health example (#24585) (@revitalbarletz)ae03d8f: docs: fix jsonnet example indentation (#25620) (@onasser1)ba41758: docs: fix typo in hydrator commit message template documentation (#24822) (@gyu-young-park)7dacb11: docs: fix typos (#24666) (@JPBotelho)d0cb9c4: docs: high availability notes for CMP (#24743) (@fm1ck3y)8e91653: docs: improve secret url for source hydrator (#25502) (@emirot)0456a70: docs: listed added healthchecks in 3.3 (#25665) (@reggie-k)e6152b8: docs: more thorough release instructions (#25173) (@crenshaw-dev)6cfef6b: docs: promote ApplicationSet's Progressive Sync to beta (#25122) (@ranakan19)42477a5: docs: remove duplicated period in plugins.md (#24746) (@nekomachi-touge)0aaffce: docs: remove gitops-engine in dependencies developer guide (#24888) (@robinlieb)c1332ab: docs: remove out-of-date sections (#248) (@sbose78)d5fee5a: docs: sync-waves guide: Use markdown formatting (#25372) (@dubek)8bebf65: docs: update Azure workload identity setup instructions (#25598) (@revitalbarletz)c430882: docs: update Getting Started guide with local setup guidance (#25486) (@revitalbarletz)c0c9768: docs: update RBAC documentation for user/group assignment (#25546) (@revitalbarletz)c917599: docs: update RepoCreds Type description to include oci option (#25353) (@robinlieb)318e331: docs: update declarative setup for EKS clusters using Pod Identity (#25198) (@Woitekku)290aab9: docs: update link to health checks in gitops-engine (#24887) (@robinlieb)1db5ee8: docs: update link to point to resource health documentation (#24652) (@J3m3)4a4db1d: docs: update mkdocs local install steps (#25503) (@emirot)8d40fa3: docs: update user content for deleting applications (#25124) (@aali309)e58d75f: docs: upgrade instructions for 3.3 with SSA (#25649) (@reggie-k)a864d70: docs: use GitHub alerts instead of mkdocs admonitions (#24631) (@crenshaw-dev)Dependency updates
d235018: Revert "chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0" (#25427) (@reggie-k)320754a: Revert "chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9" (#25426) (@reggie-k)1265e83: chore(deps): Update some dependencies - another run (#22228) (#696) (@andrii-korotkov-verkada)acb47d5: chore(deps): Update some package versions (#690) (@andrii-korotkov-verkada)88c35a9: chore(deps): Upgrade structured-merge-diff from v4.4.1 to v4.4.3 (#637) (@andrii-korotkov-verkada)2c6edd8: chore(deps): bump SonarSource/sonarqube-scan-action from 5.3.1 to 7.0.0 (#25585) (@dependabot[bot])5159744: chore(deps): bump actions/cache from 2.1.4 to 2.1.5 (#275) (@dependabot[bot])6911e59: chore(deps): bump actions/cache from 2.1.5 to 2.1.6 (#282) (@dependabot[bot])31088be: chore(deps): bump actions/cache from 4.2.4 to 4.3.0 (#24736) (@dependabot[bot])125606e: chore(deps): bump actions/cache from 4.3.0 to 5.0.0 (#25626) (@dependabot[bot])933f7cb: chore(deps): bump actions/cache from v1 to v2 (#71) (@dependabot[bot])ba03b48: chore(deps): bump actions/cache from v2 to v2.1.4 (#216) (@dependabot[bot])d4476dc: chore(deps): bump actions/checkout from 4.0.0 to 5.0.0 (#24953) (@dependabot[bot])0a585e2: chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#25322) (@dependabot[bot])290db5d: chore(deps): bump actions/checkout from 5.0.1 to 6.0.1 (#25482) (@dependabot[bot])3d2d32b: chore(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 (#25086) (@dependabot[bot])c7f2518: chore(deps): bump actions/setup-go (#720) (@dependabot[bot])c8139b3: chore(deps): bump actions/setup-go from 2.1.3 to 2.1.4 (#319) (@dependabot[bot])4f069a2: chore(deps): bump actions/setup-go from 2.1.4 to 3.2.0 (#412) (@dependabot[bot])e03364f: chore(deps): bump actions/setup-go from 3.2.0 to 3.2.1 (#428) (@dependabot[bot])99b5a62: chore(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (#25360) (@dependabot[bot])817d0e4: chore(deps): bump actions/setup-go from v1 to v2.1.0 (#73) (@dependabot[bot])607629e: chore(deps): bump actions/setup-go from v2.1.0 to v2.1.1 (#104) (@dependabot[bot])7026950: chore(deps): bump actions/setup-go from v2.1.1 to v2.1.2 (#114) (@dependabot[bot])646ff03: chore(deps): bump actions/setup-go from v2.1.2 to v2.1.3 (#152) (@dependabot[bot])d1ece2d: chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#24952) (@dependabot[bot])644d1e6: chore(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (#25507) (@dependabot[bot])8e9d24a: chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#25085) (@dependabot[bot])7faf8c9: chore(deps): bump axios from 1.8.2 to 1.12.2 in /ui-test (#24793) (@dependabot[bot])6df6b7a: chore(deps): bump code.gitea.io/sdk/gitea from 0.22.0 to 0.22.1 (#25057) (@dependabot[bot])f0c9d7e: chore(deps): bump codecov/codecov-action from 1.4.1 to 1.5.0 (#274) (@dependabot[bot])2d49581: chore(deps): bump codecov/codecov-action from 1.5.0 to 3.1.0 (#405) (@dependabot[bot])60c6378: chore(deps): bump codecov/codecov-action froma2f73fbto5c47607(#649) (@dependabot[bot])d12976c: chore(deps): bump codecov/codecov-action from v1 to v1.0.10 (#72) (@dependabot[bot])618250f: chore(deps): bump codecov/codecov-action from v1.0.10 to v1.0.12 (#106) (@dependabot[bot])4d6f298: chore(deps): bump codecov/codecov-action from v1.0.12 to v1.0.13 (#120) (@dependabot[bot])2098827: chore(deps): bump codecov/codecov-action from v1.0.13 to v1.1.0 (#194) (@dependabot[bot])dac8377: chore(deps): bump codecov/codecov-action from v1.1.0 to v1.1.1 (#199) (@dependabot[bot])ee1772e: chore(deps): bump codecov/codecov-action from v1.1.1 to v1.2.0 (#200) (@dependabot[bot])bb076f0: chore(deps): bump codecov/codecov-action from v1.2.0 to v1.2.1 (#202) (@dependabot[bot])9e41499: chore(deps): bump codecov/codecov-action from v1.2.1 to v1.4.1 (#260) (@dependabot[bot])c9fb04a: chore(deps): bump docker/login-action from 3.5.0 to 3.6.0 (#24789) (@dependabot[bot])f645075: chore(deps): bump express from 4.20.0 to 4.22.1 in /ui (#25469) (@dependabot[bot])6638dd6: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.1 to 1.20.0 (#25212) (@dependabot[bot])9ef837c: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.11.0 to 1.12.0 (#24593) (@dependabot[bot])25ee9cc: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.12.0 to 1.13.0 (#24894) (@dependabot[bot])fd2fc0a: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.0 to 1.13.1 (#25254) (@dependabot[bot])b74cf45: chore(deps): bump github.com/Azure/kubelogin from 0.2.10 to 0.2.11 (#24943) (@dependabot[bot])0e10276: chore(deps): bump github.com/Azure/kubelogin from 0.2.11 to 0.2.12 (#24983) (@dependabot[bot])3fa7348: chore(deps): bump github.com/Azure/kubelogin from 0.2.12 to 0.2.13 (#25376) (@dependabot[bot])9419eb9: chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.16.0 to 2.17.0 (#24787) (@dependabot[bot])1d4d5db: chore(deps): bump github.com/casbin/casbin/v2 from 2.123.0 to 2.126.0 (#24630) (@dependabot[bot])52c70b8: chore(deps): bump github.com/casbin/casbin/v2 from 2.126.0 to 2.127.0 (#24675) (@dependabot[bot])8e778f1: chore(deps): bump github.com/casbin/casbin/v2 from 2.127.0 to 2.128.0 (#24918) (@dependabot[bot])b91c191: chore(deps): bump github.com/casbin/casbin/v2 from 2.128.0 to 2.131.0 (#25142) (@dependabot[bot])1389f0c: chore(deps): bump github.com/casbin/casbin/v2 from 2.131.0 to 2.132.0 (#25177) (@dependabot[bot])dcfd191: chore(deps): bump github.com/casbin/casbin/v2 from 2.132.0 to 2.134.0 (#25319) (@dependabot[bot])7ebdf10: chore(deps): bump github.com/casbin/casbin/v2 from 2.134.0 to 2.135.0 (#25583) (@dependabot[bot])19ca5df: chore(deps): bump github.com/cyphar/filepath-securejoin from 0.4.1 to 0.6.0 (#25228) (@yuvalshi0)c549aea: chore(deps): bump github.com/cyphar/filepath-securejoin from 0.6.0 to 0.6.1 (#25356) (@dependabot[bot])51a45c0: chore(deps): bump github.com/evanphx/json-patch (#125) (@dependabot[bot])11a5e25: chore(deps): bump github.com/evanphx/json-patch to v5.9.11 (#682) (@mmorel-35)ab11e95: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 (#24855) (@dependabot[bot])eb76c93: chore(deps): bump github.com/go-logr/logr from 0.2.0 to 0.2.1 (#173) (@dependabot[bot])5bbbdfb: chore(deps): bump github.com/go-logr/logr from 1.2.0 to 1.2.2 (#368) (@dependabot[bot])5a60cc4: chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#24775) (@dependabot[bot])b829cd2: chore(deps): bump github.com/go-openapi/runtime from 0.29.0 to 0.29.2 (#25255) (@dependabot[bot])0f8652d: chore(deps): bump github.com/golang/mock from 1.4.4 to 1.5.0 (#241) (@dependabot[bot])59b6b0e: chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.2 to 2.3.3 (#25176) (@dependabot[bot])860eed5: chore(deps): bump github.com/itchyny/gojq from 0.12.17 to 0.12.18 (#25465) (@dependabot[bot])cc57831: chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.87 to 0.9.88 (#25544) (@dependabot[bot])2adf456: chore(deps): bump github.com/olekukonko/tablewriter from 1.0.9 to 1.1.0 (#24676) (@dependabot[bot])b6bf931: chore(deps): bump github.com/olekukonko/tablewriter from 1.1.0 to 1.1.1 (#25232) (@dependabot[bot])56dcea0: chore(deps): bump github.com/olekukonko/tablewriter from 1.1.1 to 1.1.2 (#25453) (@dependabot[bot])db76222: chore(deps): bump github.com/spf13/cobra from 0.0.5 to 0.0.7 (#78) (@dependabot[bot])f53e1d5: chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#25505) (@dependabot[bot])e5e3a1c: chore(deps): bump github.com/spf13/cobra from 1.2.1 to 1.5.0 (#420) (@dependabot[bot])ee5c440: chore(deps): bump github.com/stretchr/testify from 1.4.0 to 1.6.1 (#77) (@dependabot[bot])09186f3: chore(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#208) (@dependabot[bot])f43147f: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.6 to 0.147.1 (#24705) (@dependabot[bot])e75e37c: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.147.1 to 0.148.0 (#24718) (@dependabot[bot])eff6a63: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.148.0 to 0.148.1 (#24774) (@dependabot[bot])b8f5299: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.148.1 to 0.157.0 (#24950) (@dependabot[bot])1b4fde1: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.157.0 to 0.157.1 (#25108) (@dependabot[bot])c7b47c3: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.157.1 to 0.159.0 (#25175) (@dependabot[bot])61a89dc: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.159.0 to 0.160.0 (#25281) (@dependabot[bot])a62e368: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.160.0 to 1.5.0 (#25481) (@dependabot[bot])4ddd0a2: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.5.0 to 1.7.0 (#25543) (@dependabot[bot])45a54ae: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.7.0 to 1.8.0 (#25554) (@dependabot[bot])8fec5c5: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.0 to 1.8.1 (#25616) (@dependabot[bot])4d33ca9: chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#24908) (@dependabot[bot])791e924: chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#25355) (@dependabot[bot])805c389: chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 (#25555) (@dependabot[bot])30f4acc: chore(deps): bump golang.org/x/net from 0.26.0 to 0.33.0 (#671) (@dependabot[bot])e5ef2e1: chore(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 (#700) (@dependabot[bot])9169c08: chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 (#713) (@dependabot[bot])f0bb119: chore(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 (#24904) (@dependabot[bot])f618adb: chore(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 (#25264) (@dependabot[bot])fa873d4: chore(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 (#25556) (@dependabot[bot])ce183f0: chore(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#24903) (@dependabot[bot])d8a86f4: chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#25234) (@dependabot[bot])b6da054: chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#25559) (@dependabot[bot])6d303b9: chore(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0 (#25231) (@dependabot[bot])95b191d: chore(deps): bump golang.org/x/time from 0.13.0 to 0.14.0 (#24906) (@dependabot[bot])90b69e9: chore(deps): bump golangci-lint (#719) (@crenshaw-dev)da6623b: chore(deps): bump golangci/golangci-lint-action from 2 to 3.2.0 (#409) (@dependabot[bot])13895fe: chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#25236) (@dependabot[bot])df1035d: chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 (#25400) (@dependabot[bot])b5f75f1: chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.2.0 (#25483) (@dependabot[bot])8273c3a: chore(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#24870) (@dependabot[bot])7b73766: chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 (#25320) (@dependabot[bot])d9fe8a4: chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 (#25656) (@dependabot[bot])48c6671: chore(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10 (#24829) (@dependabot[bot])ec71344: chore(deps): bump js-yaml from 4.1.0 to 4.1.1 in /ui (#25315) (@dependabot[bot])83ce6ca: chore(deps): bump k8s libs from 0.29.2 to 0.29.6 (#586) (@crenshaw-dev)51a33e6: chore(deps): bump k8s.io/klog/v2 from 2.30.0 to 2.70.1 (#426) (@dependabot[bot])73f3e7f: chore(deps): bump k8s.io/klog/v2 from 2.4.0 to 2.8.0 (#239) (@dependabot[bot])b560016: chore(deps): bump k8s.io/kubernetes from 1.22.2 to 1.23.1 (#365) (@tommyknows)ef48aa9: chore(deps): bump library/busybox from2f590fctoe3652a0in /test/e2e/multiarch-container (#25116) (@dependabot[bot])b7e09e0: chore(deps): bump library/busybox fromd82f458to2f590fcin /test/e2e/multiarch-container (#24962) (@dependabot[bot])de79e6a: chore(deps): bump library/busybox frome3652a0tod80cd69in /test/e2e/multiarch-container (#25560) (@dependabot[bot])b760788: chore(deps): bump library/golang from 1.25.0 to 1.25.1 in /test/container (#24447) (@dependabot[bot])b9916c3: chore(deps): bump library/golang from 1.25.0 to 1.25.1 in /test/remote (#24446) (@dependabot[bot])33e8175: chore(deps): bump library/golang from 1.25.1 to 1.25.3 in /test/remote (#24954) (@dependabot[bot])eaf8301: chore(deps): bump library/golang from 1.25.3 to 1.25.5 in /test/remote (#25484) (@dependabot[bot])03e6342: chore(deps): bump library/golang from0ece421toa22b2e6in /test/remote (#25586) (@dependabot[bot])e161522: chore(deps): bump library/golang from2e3aca2to6ea52a0in /test/remote (#24975) (@dependabot[bot])b7b4ab9: chore(deps): bump library/golang from7d73c4cto2e3aca2in /test/remote (#24963) (@dependabot[bot])1b973b8: chore(deps): bump library/golang from8305f5ftoab1f5c4in /test/remote (#24817) (@dependabot[bot])33f6889: chore(deps): bump library/golang fromab1f5c4tod709837in /test/remote (#24857) (@dependabot[bot])5611814: chore(deps): bump library/registry from1e96c37tocd92709in /test/container (#24955) (@dependabot[bot])c330254: chore(deps): bump library/registry from3725021to1e96c37in /test/container (#24909) (@dependabot[bot])10f991d: chore(deps): bump min-document from 2.19.0 to 2.19.1 in /ui (#25223) (@dependabot[bot])3ad7da5: chore(deps): bump node-forge from 1.3.0 to 1.3.2 in /ui (#25434) (@dependabot[bot])68ff7df: chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#24803) (@dependabot[bot])4a1bf9e: chore(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#25584) (@dependabot[bot])83548e3: chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (#25420) (@dependabot[bot])48c969b: chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (#25432) (@dependabot[bot])08b93e8: chore(deps): bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 (#25545) (@dependabot[bot])b7d975e: chore(deps): bump renovatebot/github-action from 43.0.12 to 43.0.13 (#24677) (@dependabot[bot])8dd534e: chore(deps): bump renovatebot/github-action from 43.0.13 to 43.0.14 (#24777) (@dependabot[bot])b260143: chore(deps): bump renovatebot/github-action from 43.0.14 to 43.0.16 (#24896) (@dependabot[bot])9969156: chore(deps): bump renovatebot/github-action from 43.0.16 to 43.0.17 (#24951) (@dependabot[bot])cb66083: chore(deps): bump renovatebot/github-action from 43.0.17 to 43.0.18 (#25011) (@dependabot[bot])e80395b: chore(deps): bump renovatebot/github-action from 43.0.18 to 43.0.19 (#25099) (@dependabot[bot])b7691b2: chore(deps): bump renovatebot/github-action from 43.0.19 to 43.0.20 (#25156) (@dependabot[bot])2a4734c: chore(deps): bump renovatebot/github-action from 43.0.20 to 44.0.2 (#25256) (@dependabot[bot])19ee75b: chore(deps): bump renovatebot/github-action from 44.0.2 to 44.0.3 (#25321) (@dependabot[bot])da4e748: chore(deps): bump renovatebot/github-action from 44.0.3 to 44.0.5 (#25468) (@dependabot[bot])ab8fdc7: chore(deps): bump sigs.k8s.io/yaml from 1.2.0 to 1.3.0 (#339) (@dependabot[bot])7aa522b: chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#24984) (@dependabot[bot])ea3925e: chore(deps): bump softprops/action-gh-release from 2.3.3 to 2.3.4 (#24856) (@dependabot[bot])00eb906: chore(deps): bump softprops/action-gh-release from 2.3.4 to 2.4.0 (#24873) (@dependabot[bot])492f712: chore(deps): bump softprops/action-gh-release from 2.4.0 to 2.4.1 (#24944) (@dependabot[bot])6bf276f: chore(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 (#25235) (@dependabot[bot])e81872f: chore(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0 (#25506) (@dependabot[bot])182a084: chore(deps): bump tj-actions/changed-files from 47.0.0 to 47.0.1 (#25627) (@dependabot[bot])7ba800a: chore(deps): update actions/checkout digest to1e31de5(#24612) (@renovate[bot])414a178: chore(deps): update codecov/codecov-action action to v5.5.2 (#25608) (@renovate[bot])5aa6bcb: chore(deps): update dependency golang to v1.25.1 (#24618) (@argoproj-renovate[bot])c11d35a: chore(deps): update dependency gotestyourself/gotestsum to v1.13.0 (#24610) (@argoproj-renovate[bot])5072fb7: chore(deps): update dependency markdown to v3.10 (#25152) (@argoproj-renovate[bot])9faa609: chore(deps): update dependency markdown to v3.9 (#24611) (@argoproj-renovate[bot])a7a07e2: chore(deps): update dependency normalize-url to v4.5.1 [security] (#24607) (@renovate[bot])9fbdc10: chore(deps): update dependency pymdown-extensions to v10.17 (#25262) (@argoproj-renovate[bot])c1a28aa: chore(deps): update dependency pymdown-extensions to v10.17.1 (#25333) (@argoproj-renovate[bot])45a89ef: chore(deps): update docker.io/bitnamilegacy/kubectl:1.32 docker digest to9524faf(#24840) (@renovate[bot])77f313c: chore(deps): update docker.io/library/busybox docker digest tod82f458(#24616) (@renovate[bot])f209e7a: chore(deps): update docker.io/library/golang:1.25.0 docker digest to5502b0e(#24617) (@renovate[bot])b1e05e3: chore(deps): update docker.io/library/golang:1.25.1 docker digest to3c96199(#24812) (@argoproj-renovate[bot])b8e8c1f: chore(deps): update docker.io/library/golang:1.25.1 docker digest to9b057a4(#24810) (@argoproj-renovate[bot])54311b9: chore(deps): update docker.io/library/golang:1.25.1 docker digest toab1f5c4(#24820) (@argoproj-renovate[bot])aadd977: chore(deps): update docker.io/library/golang:1.25.1 docker digest tod709837(#24948) (@renovate[bot])2d71941: chore(deps): update docker.io/library/golang:1.25.3 docker digest to0afe9b5(#25168) (@argoproj-renovate[bot])9db75f6: chore(deps): update docker.io/library/golang:1.25.3 docker digest to0d8c14c(#25016) (@renovate[bot])d8c72c2: chore(deps): update docker.io/library/golang:1.25.3 docker digest to6bac879(#25091) (@argoproj-renovate[bot])b4c7467: chore(deps): update docker.io/library/golang:1.25.3 docker digest to6d4e5e7(#25187) (@argoproj-renovate[bot])7e1946c: chore(deps): update docker.io/library/golang:1.25.3 docker digest to6d4e5e7(#25326) (@renovate[bot])4c57962: chore(deps): update docker.io/library/golang:1.25.3 docker digest to7e3cbcd(#25158) (@argoproj-renovate[bot])c207a4f: chore(deps): update docker.io/library/golang:1.25.3 docker digest to8c945d3(#25038) (@renovate[bot])6d5678a: chore(deps): update docker.io/library/golang:1.25.3 docker digest to8c945d3(#25041) (@argoproj-renovate[bot])8d0e5b9: chore(deps): update docker.io/library/golang:1.25.3 docker digest tob2663ef(#25172) (@argoproj-renovate[bot])5f66fe5: chore(deps): update docker.io/library/golang:1.25.3 docker digest todd08f76(#25073) (@argoproj-renovate[bot])61322b6: chore(deps): update docker.io/library/golang:1.25.5 docker digest to0ece421(#25568) (@renovate[bot])035726e: chore(deps): update docker.io/library/node:22.9.0 docker digest to8398ea1(#24619) (@renovate[bot])53fa4f4: chore(deps): update docker.io/library/node:23.0.0 docker digest to9d09fa5(#24620) (@renovate[bot])f437a75: chore(deps): update docker.io/library/redis:8.2.3 docker digest to7cb87cb(#25571) (@renovate[bot])b553cc5: chore(deps): update docker.io/library/ubuntu:25.04 docker digest to103c747(#24625) (@renovate[bot])8fc795f: chore(deps): update docker.io/library/ubuntu:25.04 docker digest to27771fb(#25031) (@renovate[bot])e79a2bd: chore(deps): update docker.io/library/ubuntu:25.10 docker digest to5922638(#25603) (@renovate[bot])0fa1f67: chore(deps): update docker.io/library/ubuntu:25.10 docker digest to9b61739(#25043) (@renovate[bot])17b98d9: chore(deps): update github.com/argoproj/notifications-engine digest toe2e7fe1(#25604) (@renovate[bot])0fb6c51: chore(deps): update group golang to v1.25.1 (#24605) (@argoproj-renovate[bot])12f332e: chore(deps): update module github.com/golangci/golangci-lint to v2.5.0 (#24673) (@argoproj-renovate[bot])6ca71fe: chore(deps): update module github.com/vektra/mockery/v3 to v3.5.5 (#24606) (@argoproj-renovate[bot])fa609ef: chore(deps): update module github.com/vektra/mockery/v3 to v3.6.0 (#25280) (@argoproj-renovate[bot])50d7b20: chore(deps): update module github.com/vektra/mockery/v3 to v3.6.1 (#25569) (@argoproj-renovate[bot])9943486: chore(deps): update module k8s.io/kubernetes to v1.34.2 [security] (cherry-pick #25682 for 3.3) (#25683) (@argo-cd-cherry-pick-bot[bot])ac071b5: chore(deps): update notifications-engine to fix GitHub PR comments nil panic (cherry-pick #26065 for 3.3) (#26075) (@soutar)369fb75: chore(deps): update notifications-engine to v0.5.1-0.20251223091026-8c0c96d8d530 (cherry-pick #25785 for 3.3) (#25853) (@argo-cd-cherry-pick-bot[bot])5de1e64: chore(deps): update to helm 3.19.4 due to cve : https://github.com/helm/helm/releases/tag/v3.19.4 (cherry-pick #25769 for 3.3) (#25774) (@argo-cd-cherry-pick-bot[bot])0371401: chore(deps): upgrade go version in dockerfile (#638) (@jmeridth)f15cf61: chore(deps): upgrade k8s version and client-go (#530) (@fengshunli)Other work
f39140c: Add "argo + flux" logo ( <>)d79c06d: Add Ask-Us-Anything ( <>)0cb4f8a: Add black box design proposal ( <>)fec5ec3: Add black box hypothesis and acceptance criteria (@2opremio)c90d36e: Add black box hypothesis and acceptance criteria (@2opremio)a9c4d40: Add description of a risk into 'Risks and Mitigations' section ( <>)aedd5f5: Add docs that describes requirements for a repo auto-update and docker registry scanning components ( <>)ffe694f: Add engine API to the black-box design ( <>)717b8bf: Add option to skip the dryrun from the sync context (#708) (@Nheijmink19)bd7681a: Added support for impersonation in the kubectl (#534) (@anandf)2257d23: Apply reviewer notes (@alexmt)9970fab: Cherry-Pick Retry commit in master (#452) (@leoluz)06a52d3: Clarify where we want contributions ( <>)15973bc: Do not use--forcewith--dry-run(#633) (@rafal-jan)c820482: Drop github.com/grpc-ecosystem/grpc-gateway dep (#63) (@ash2k)278472d: Fix Slack invite: https://slack.k8s.io/ ( <>)4bd4f29: Fix data race on err variable (#46) (@ash2k)fb2ec13: Fix markdown links in README.md (#59) (@ordovicia)3e62005: Handlers cleanups (#101) (@ash2k)777c0ff: Initial commit ( <>)c00a93d: Initial commit (@jaypipes)9de8221: Limit width to 100 characters per line ( <>)174fcfe: Merge commit from fork (@crenshaw-dev)1988c70: Merge commit from fork (@crenshaw-dev)701bc50: Merge commit from fork (@thevilledev)7e21b91: Merge commit from fork (@svghadi)fa0d6a8: Merge commit from fork (@crenshaw-dev)8b533e5: Merge pull request #1 from alexmt/design ( <>)ae40d12: Merge pull request #10 from dholbach/add-preliminary-slack (@jaypipes)3d22b0b: Merge pull request #11 from dholbach/add-slack-ama (@jaypipes)142bfe4: Merge pull request #12 from alexmt/blackbox-api ( <>)3c2b7eb: Merge pull request #14 from argoproj/add-poc-links ( <>)7d29c70: Merge pull request #15 from argoproj/add-meeting-times (@jaypipes)a8b4283: Merge pull request #19 from argoproj/fix-slack-invite ( <>)57db784: Merge pull request #2 from 2opremio/master ( <>)7220635: Merge pull request #20 from dholbach/add-logo ( <>)051b7c6: Merge pull request #22 from argoproj/update-events (@jaypipes)be3abd2: Merge pull request #23 from argoproj/add-faq (@jaypipes)6dee3d6: Merge pull request #24710 from leoluz/gitops-migration (@leoluz)ac46a18: Merge pull request #24726 from crenshaw-dev/fix-health-typo (@leoluz)74a3275: Merge pull request #24733 from ranakan19/logVerbosity (@leoluz)78edcf4: Merge pull request #4 from dholbach/more-info ( <>)1bd4f7a: Merge pull request #9 from dholbach/add-coc (@jaypipes)f5382d9: Merge remote-tracking branch 'ge-migrated/prepare-migration' into gitops-migration (@leoluz)8430dc0: Move argocd core to gitops engine repo (@alexmt)53ff80f: Move bottom-up design from google doc to markdown ( <>)fb4d62b: Point to #gitops on Kubernetes Slack for now ( <>)5622a64: Reduce k8s.io/kubernetes usage (#57) (@ash2k)921c307: Rename black-box, white-box designs to bottom-up/top-down ( <>)d5b318d: Rephrase a sentence that describes a requirement to contribute Flux specific features into GitOps engine ( <>)6f8e242: Replace SyncUnit with Sync ( <>)148710a: Replace app with SyncUnit ( <>)7d3da9f: Replace ghodss/yaml with sigs.k8s.io/yaml (#62) (@ash2k)8697b44: Revert "Add option to skip the dryrun from the sync context (#708)" (#730) (@crenshaw-dev)38db8bb: Update OWNERS (#237) (@edlee2121)991ede4: Update USERS.md (#25243) ( <>)bf8e17f: Update and trim dependencies (#123) (@ash2k)8a3ce6d: Update condition to select right pvc as child for statefulset (#550) (@hanzala1234)4815faf: Update events section ( <>)b371e3b: Update namespace v2 (#465) (@blakepettersson)6a28738: Update specs/design-black-box.md ( <>)6f11a04: Update specs/design-black-box.md ( <>)3fdca00: Update specs/design-black-box.md ( <>)47e2511: Update specs/design-black-box.md ( <>)8049fbc: Update specs/design-black-box.md ( <>)a1b2105: Update specs/design-black-box.md ( <>)dd78b0b: Update specs/design-black-box.md ( <>)37e7d2b: Update specs/design-black-box.md ( <>)374c236: Update specs/design-black-box.md ( <>)ab1888e: Update specs/design-black-box.md ( <>)2bb9588: Update specs/design-black-box.md ( <>)8635459: Update specs/design-black-box.md ( <>)3a53391: Update specs/design-black-box.md ( <>)40c5701: Update specs/design-black-box.md ( <>)16598d5: Use UpdateSettingsFunc type (#58) (@ash2k)fd50001: Use scheme.GroupKind as key for resource customization settings ( <>)9068f90: add readme notice about ongoing migration (#781) (@ppapapetrou76)ef4dcd6: add some explanation about what this project tries to do ( <>)90e5e3a: added common disable sync otpion (#749) (@reggie-k)d3f2ce3: addressed review feedback from Jay ( <>)a16fb84: bump k8s v1.32 (#665) (@sivchari)675f8cf: chore(cherry-pick-3.3): bump expr tov1.17.7(#25888) (@nitishfy)6cce4b2: chore(ci): don't run renovate on forks (#24600) (@blakepettersson)47142b8: chore(ci): enable Renovate (#24602) (@crenshaw-dev)e4cacd3: chore(ci): run tests on cherry-pick PRs (#694) (@crenshaw-dev)4e42f00: chore(ci): update github runners to oci gh arc runners (#24632) (@koksay)116707b: chore(cli): plugins always have an argocd prefix (#24768) (@blakepettersson)112657a: chore(docs): typo fixing in agent README file (#351) (@LinuxSuRen)9acb8f8: chore(docs): update all installs to use --server-side (#25538) (@pjiang-dev)27f30b4: chore(refactor): use rbac package for valid actions (#25456) (@nitishfy)49f5c03: chore(tilt): add deps for build and ui packages (#25165) (@FourFifthsCode)712109b: chore(ui): convert ApplicationDetails components to functional components (#23767) (@chansuke)d1523a0: chore(ui): convert user-info-overview to function component (#23786) (@linghaoSu)4a71661: chore(ui): fix Incorrect links to applications managed by other argo instances (#23266) (@aali309)af7ae18: chore: Add appkey and error fields in appcontroller (#24668) (#24669) (@andrii-korotkov)e0a0d5b: chore: Adds a script to prepare repo for migration to main ArgoCD Repo (#766) (@ppapapetrou76)d590fe5: chore: Cleanup IterateHierarchy v1 (#748) (@andrii-korotkov)a586397: chore: Fix go version during ci lint (#401) (@leoluz)531c0db: chore: Remove support for deprecated extensions APIs (#381) (@terrytangyuan)6f7cd4f: chore: Speficy correct module dependency for kube-aggregator (#39) (@jannfis)55bb494: chore: Spelling (#215) (@jsoref)370078d: chore: Switch dry run applies to log with debug level (#705) (@andrii-korotkov-verkada)cc707cc: chore: Update to Kubernetes v1.19.2 (#139) (@ash2k)9282458: chore: Use v0.20.4 kube dependencies (#238) (@sbose78)df2a759: chore: add --force-conflicts and notes (#25639) (@pjiang-dev)363a715: chore: add CODEOWNERS (#641) (@jmeridth)7500c4f: chore: add OWNERS file (#41) ( <>)c8a5159: chore: add search option to docs while previewing locally (#25660) (@onasser1)7258614: chore: add unit test for ssa with dryRun (#703) (@pjiang-dev)b4e626c: chore: add unit tests for printKeyTable (header, rows, uppercase subtype) (#24274) (#24706) (@myeunee)a48b381: chore: allow devs to run locally a subset of e2e tests (#25514) (@ppapapetrou76)46deaab: chore: allow docs approvers to merge for docs/operator-manual (#24813) (@crenshaw-dev)72bcdda: chore: avoid unnecessary json marshal (#626) (@crenshaw-dev)df9b446: chore: avoid unnecessary json unmarshal (#627) (@crenshaw-dev)edb9faa: chore: bump golangci-lint to v1.63.4 and list argo-cd linters (#670) (@mmorel-35)95e0025: chore: bump k8s libraries to 1.31 (#619) (@crenshaw-dev)97ad5b5: chore: bump k8s v1.34 (#773) (@pjiang-dev)a45189f: chore: bump k8s.io dependencies to 1.17 (#70) (@darshanime)099cba6: chore: bump kubernetes version to 0.30.x (#579) (@sivchari)efca5b9: chore: bumps golang version everywhere to the latest 1.25.5 (cherry-pick #25716 for 3.3) (#25808) (@argo-cd-cherry-pick-bot[bot])5db7846: chore: bumps helm to 3.19.2 and kustomize to 5.7.1 (#25362) (@ppapapetrou76)10f60b9: chore: bumps redis to the latest stable to eliminate vulns (#25272) (@ppapapetrou76)1d13ebc: chore: bumps redis version to 8.2.1 (#24523) (@ppapapetrou76)d00c99d: chore: copy gitops-engine deps to test container (#24764) (@fm1ck3y)97d4a75: chore: enable Dependabot v2 (#67) (@sullis)c323d36: chore: enable dot-imports, duplicated-imports from revive (#678) (@mmorel-35)70bee6a: chore: enable early-return, indent-error-flow and unnecessary-stmt from revive (#674) (@mmorel-35)b111e50: chore: enable errorlint (#673) (@mmorel-35)cc13a7d: chore: enable gocritic (#680) (@mmorel-35)f948991: chore: enable gofumpt, gosimple and whitespace linters (#666) (@mmorel-35)0047207: chore: enable goimports linter (#669) (@mmorel-35)ad846ac: chore: enable increment-decrement and redundant-import-alias from revive (#679) (@mmorel-35)bfdad63: chore: enable misspell linter (#672) (@mmorel-35)7357465: chore: enable noctx linter (#24765) (@mmorel-35)f5aa9e4: chore: enable perfsprint linter (#676) (@mmorel-35)0426664: chore: enable require-error from testifylint (#681) (@mmorel-35)3826638: chore: enable testifylint linter (#657) (@mmorel-35)367311b: chore: enable thelper linter (#675) (@mmorel-35)782fb85: chore: enable unparam linter (#677) (@mmorel-35)ccee583: chore: enable unused-parameter and var-declaration from revive (#668) (@mmorel-35)7ac688a: chore: enable use-any from revive (#667) (@mmorel-35)fdd2736: chore: fix Dockerfile COPY to correctly handle gitops-engine (#24863) (@downfa11)f20995b: chore: fix codegen check (@leoluz)3fcb1a2: chore: fix go.work.sum (@leoluz)517c1ff: chore: fix typo in log message (#445) (@yujunz)f13be2a: chore: gitops migration test PR (@leoluz)a2b3f0a: chore: gitops-engine post migration fixes (#24727) (@leoluz)a00ce82: chore: log cluster sync error (#541) (@crenshaw-dev)ba91252: chore: merge gitops-engine test (@leoluz)7d150d0: chore: more docstrings (#606) (@crenshaw-dev)3de3136: chore: more logging for CRD updates (#554) (@crenshaw-dev)4ea2768: chore: refactor test functions to pass context from testing.T to fixtures (#25134) (@mmorel-35)a702089: chore: regenerate cluster cache mocks (#40) ( <>)b7f60b7: chore: release champ 3.3 (#25202) (@pjiang-dev)a093a76: chore: remove actions/cache duplicated behavior with actions/setup-go (#658) (@mmorel-35)4386ff4: chore: remove duplicate scheme import (#580) (@pgier)541a154: chore: remove unnecessary lock value copy in test (#24939) (@shota3506)d6f25a1: chore: remove unused struct (#25186) (@crenshaw-dev)3d9aab3: chore: speed up resolveResourceReferences (#625) (@crenshaw-dev)8e19104: chore: switch CI to golangci/golangci-lint-action@v2 (#259) ( <>)b855894: chore: test resource conversion (#403) (@crenshaw-dev)8d65e80: chore: update README get involved links (#647) (@jmeridth)fa0e8d6: chore: update static scheme (#588) (@crenshaw-dev)67ddccd: chore: upgrade k8s cliet to v0.24.2 (#427) (@alexmt)f8f1b61: chore: upgrade k8s to 1.33.1 (#735) (@pjiang-dev)4546217: chore: upgrade the notification engine deps (#25219) (@afzal442)f26533a: chore: use Expecter Structs from mockery (#25133) (@mmorel-35)7cdc0f9: chore: use WatchFuncWithContext (#25520) (@crenshaw-dev)079240b: chore: use go mod override instead of go.work (#24841) (@alexmt)cebed7e: chore: wrap errors (#732) (@crenshaw-dev)f960274: ci(release): only set latest release in github when latest (#24525) (@agaudreault)9ae26e4: ci: test against k8s 1.34.2 (cherry-pick #25856 for 3.3) (#25858) (@argo-cd-cherry-pick-bot[bot])58443c6: describe license and code-of-conduct ( <>)9d32a60: document meeting times ( <>)b8a7d7b: document youtube playlist too ( <>)b18f378: fix for nil while sync (#83) (@mayzhang2000)c08fd18: fix second slack-invite link ( <>)c0ffe84: manage clusters via proxy (#466) (@ls0f)21a4cdc: no current events planned ( <>)bcc0243: prepare repo for migration to ArgoCD repo (@leoluz)ce9616a: refactor: IterateHierarchy method should use read lock (#65) ( <>)46d1496: refactor: Kubernetes 1.21 libraries (#266) (@ash2k)32c6afc: refactor: Kubernetes v1.20.1 (#195) (@ash2k)8d05efd: refactor: Return error from context (#140) (@ash2k)6884d33: refactor: add an API that returns built-in health assessement function (#285) ( <>)16575f1: refactor: add methods in errors package to quit with exit codes (#49) (@darshanime)e344629: refactor: allow PatchResource to accept subresource (#175) (@jessesuen)411c8d0: refactor: cache cmdutil.Factory to improve syncronization performance (#281) ( <>)e024377: refactor: cleanup printing and logging (#124) (@ash2k)ef7702f: refactor: cleanups (#142) (@ash2k)1723191: refactor: deprecates obsolete Diff field (#54) ( <>)8472746: refactor: ensure list semaphore is released after response is fully processed (#135) ( <>)cc0fb55: refactor: improve func signature (#103) (@ash2k)11e3221: refactor: reduce usage of k8s.io/kubernetes packages (#258) (@ash2k)b067bd7: refactor: regenerate cluster cache mock (#291) ( <>)afc2e64: refactor: remove dependency on github.com/argoproj/pkg package (#111) ( <>)5da9c7e: refactor: stop caching OpenAPISchema since it is cached by cmdutil.Factory (#287) ( <>)27374da: refactor: ugprade k8s client to v0.22.2 (#338) ( <>)57ea690: refactor: update resources install order according to helm implementation (#309) ( <>)3131194: refactor: use github.com/go-logr/logr for logging (#162) (@ash2k)579ea1d: refactor: using open api schema in cluster live state cache (#289) ( <>)5946820: seed FAQ document with content from the Slack AMA session ( <>)c5b7114: selective sync (#213) (@kshamajain99)631d429: set default verbosity as 0 when dry run strategy is none (@ranakan19)a36bd76: shore: update go.work.sum (@leoluz)d8c17c2: spelling: less than (#434) (@jsoref)b628c6d: test(controller): avoid race in test (#25655) (@crenshaw-dev)dc952c1: validate resource opts (#759) (@agaudreault)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.6...v3.3.0
v3.2.12Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
2d1a0bb: fix(lint): unnecessary nesting (cherry-pick #27815 for 3.2) (#27819) (@argo-cd-cherry-pick-bot[bot])4caf270: fix: export url validation function (#27816) (@crenshaw-dev)d6e96fc: fix: wrap lines toggle causes log lines to overflow container - Fixes [Issue #27586] (cherry-pick #27627 for 3.2) (#27668) (@argo-cd-cherry-pick-bot[bot])Dependency updates
cff8c03: chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (cherry-pick #27401 for 3.2) (#27735) (@argo-cd-cherry-pick-bot[bot])Other work
3f7237b: Merge commit from fork (@pjiang-dev)c8df5ff: Merge commit from fork (@blakepettersson)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.11...v3.2.12
v3.2.11Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
de48839: fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.2) (#27500) (@argo-cd-cherry-pick-bot[bot])81e6c69: fix(ui): handle 401 error in stream (cherry-pick #26917 for 3.2) (#27572) (@argo-cd-cherry-pick-bot[bot])eadd52e: fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.2) (#27563) (@argo-cd-cherry-pick-bot[bot])Dependency updates
37c360e: chore(deps): bump SonarSource/sonarqube-scan-action from 5.3.1 to 8.0.0 (cherry pick 27602 to release 3.2) (#27609) (@dudinea)Other work
9625be3: Merge commit from fork (@alexmt)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.10...v3.2.11
v3.2.10Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
91da6a0: Revert "fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.2)" (#27399) (@crenshaw-dev)5426e98: fix(appcontroller): application controller in core mode fails to sync when server.secretkey is missing (#26793) (#27463) (@anandf)c3df70e: fix(cli): uses DrySource revision for app diff/manifests with sourceHydrator (#23817) (cherry-pick #24670 for 3.2) (#27482) (@argo-cd-cherry-pick-bot[bot])3f789ce: fix: avoid stale informer cache in RevisionMetadata handler (cherry-pick #27392 for 3.2) (#27394) (@argo-cd-cherry-pick-bot[bot])860ef55: fix: revert autosync event message format change (cherry-pick #27387 for 3.2) (#27388) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.9...v3.2.10
v3.2.9Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
8420af5: fix(ci): run yarn install with --frozen-lockfile (cherry-pick #27099 for 3.2) (#27355) (@dudinea)d76e1bd: fix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (cherry-pick #27097 for 3.2) (#27364) (@argo-cd-cherry-pick-bot[bot])f9623ce: fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.2) (#27236) (@aali309)Dependency updates
a39f06d: chore(deps): bump fast-xml-parser from 4.5.3 to 4.5.6 in /ui - 3.2 (#27361) (@keithchong)9ff165a: chore(deps): update notifications-engine dependency in release-3.2 to v0.5.1-0.20260316232552-d27ba0152c1c (#27094) (@pasha-codefresh)Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.8...v3.2.9
v3.2.8Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
65378e6: fix(UI): show RollingSync step clearly when labels match no step (cherry-pick #26877 for 3.2) (#26883) (@argo-cd-cherry-pick-bot[bot])1515e91: fix: controller incorrectly detecting diff during app normalization (cherry-pick #27002 for 3.2) (#27012) (@argo-cd-cherry-pick-bot[bot])5fca1ce: fix: mitigation of grpc-go CVE-2026-33186 for release-3.2 (#26983) (@dudinea)Other work
e7d33de: chore: use base ref for cherry-pick prs (cherry-pick #26551 for 3.2) (#26554) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.7...v3.2.8
v3.2.7Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
ca08f90: fix(server): OIDC config via secrets fails (#18269) (cherry-pick #26214 for 3.2) (#26389) (@argo-cd-cherry-pick-bot[bot])10c3fd0: fix: Fix excessive ls-remote requests on monorepos with Auto Sync enabled apps (26277) (cherry-pick #26278 for 3.2) (#26502) (@dudinea)9c128e2: fix: compressedLayerExtracterStore+isCompressedLayer - allow tar.gzip suffixes (cherry-pick #26355 for 3.2) (#26375) (@argo-cd-cherry-pick-bot[bot])Dependency updates
75eddbd: chore(deps): update group golang to v1.25.6 (cherry-pick release-3.2) (#26291) (@nitishfy)Other work
1f03b27: ci: exclude testdata from sonar.exclusions (cherry-pick #26398 and #26371 for 3.2) (#26424) (@argo-cd-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.6...v3.2.7
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.
ca5e42aaccto4c90239cc7chore(deps): update dependency argoproj/argo-cd to v3.3.0to chore(deps): update dependency argoproj/argo-cd to v3.3.14c90239cc7toc024a90de8chore(deps): update dependency argoproj/argo-cd to v3.3.1to chore(deps): update dependency argoproj/argo-cd to v3.3.2c024a90de8to555e4f3706chore(deps): update dependency argoproj/argo-cd to v3.3.2to chore(deps): update dependency argoproj/argo-cd to v3.3.3555e4f3706to829b2705bcchore(deps): update dependency argoproj/argo-cd to v3.3.3to chore(deps): update dependency argoproj/argo-cd to v3.3.4829b2705bcto011c7a9730chore(deps): update dependency argoproj/argo-cd to v3.3.4to chore(deps): update dependency argoproj/argo-cd to v3.3.5011c7a9730to9bfd8adc66chore(deps): update dependency argoproj/argo-cd to v3.3.5to chore(deps): update dependency argoproj/argo-cd to v3.3.69bfd8adc66to196a1ff348chore(deps): update dependency argoproj/argo-cd to v3.3.6to chore(deps): update dependency argoproj/argo-cd to v3.4.2196a1ff348to389c2e9b69chore(deps): update dependency argoproj/argo-cd to v3.4.2to chore(deps): update dependency argoproj/argo-cd to v3.4.3View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.