Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 94037c4: fix(ui): keep the sidebar layout in sync after toggling it (cherry-pick #30762 for 3.6) (#30771) (@shimagrawal)
• abfc761: fix(ui): stop webpack minifying index.html so --rootpath/--basehref work (#30763) (cherry-pick #30767 for 3.6) (#30768) (@argo-cd-cherry-pick-bot[bot])

Other work

• c7c41d3: chore: bump version to 3.6.1 on release-3.6 branch (#30769) (@github-actions[bot])

Full Changelog: v3.6.0...v3.6.1

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• bac4616: feat(actions): add hibernate/rehydrate actions for CNPG Cluster (#28478) (@purisev)
• 0df1a4b: feat(appset): Add progressive sync metrics for AppSet (#29202) (@ranakan19)
• ad23d3a: feat(appset): Adding annotations on apps to force reconciliation before proceeding with progressive sync (#27467) (@ranakan19)
• 94564eb: feat(appset): add metrics for count of app refreshes triggered by appset during progressive sync (#29244) (@ranakan19)
• 9ef034e: feat(appset): expose workqueue rate limiter flags on applicationset-controller (#28286) (@om7057)
• 5899f89: feat(appset): surface progressive sync scenario into condition as reasons and messages (#27820) (@ranakan19)
• 4e8ea39: feat(ci): enable Zizmor to enforce secure config (#27304) (@crenshaw-dev)
• ec10f2e: feat(cli): optionally exclude status field when using argocd admin export command (#29219) (@nitishfy)
• 5c3637d: feat(controller): allow metrics label/condition flags via argocd-cmd-params-cm (#28287) (@edgrz)
• 5f8562e: feat(dex): Configure Dex TLS Cipher Suites and Curve Preferences (cherry-pick #29658 for 3.6) (#30217) (@argo-cd-cherry-pick-bot[bot])
• d94bcb1: feat(dex): Configure TLS Minversion for Dex web (#28712) (@akhilnittala)
• 465d43b: feat(dex): Making Dex storage type and config configurable from argocd-cm configmap (#28624) (@akhilnittala)
• 2e2f4e4: feat(health): Implement kyverno health checks (#27354) (@sandert-k8s)
• 034ab61: feat(health): add built-in health check for TLSRoute (#26596) (@dnfwlq8054)
• 49aa0ea: feat(health): add health check for AWS ACK resources (#29016) (@philljie)
• e1145c6: feat(health): add health check for CloudNativePG Backup (#28468) (@yugstar)
• 643de0b: feat(health): add health check for CloudNativePG Database CRD (#29511) (@Matthiator)
• ff00ee7: feat(health): add health check for Kro resources (#28743) (@philljie)
• 3825b96: feat(health): add health check for MedusaBackupJob (issue #28009) (#28008) (@mgross2)
• 309594b: feat(health): add health check for MedusaTask (issue #28007) (#28006) (@mgross2)
• 6858a80: feat(health): add health check for Prometheus Operator Alertmanager (#28446) (@yugstar)
• 2338867: feat(health): add health check for Prometheus Operator ThanosRuler (#28463) (@yugstar)
• 831d77b: feat(health): add health check for cert-manager CertificateRequest (#28465) (@yugstar)
• dec470a: feat(health): add health check for cert-manager trust-manager Bundle (#28615) (@yugstar)
• fdf6751: feat(health): add health check for flink.apache.org/FlinkSessionJob (#26626) (@sivchari)
• 21ac508: feat(health): add health checks for Tekton PipelineRun and TaskRun (#28467) (@yugstar)
• 180061c: feat(health): add health checks for Velero Backup, Restore, and Schedule (#28464) (@yugstar)
• 5708801: feat(health): add health checks for cert-manager ACME Order and Challenge (#28466) (@yugstar)
• 291bfab: feat(health): enable a Pipeline labeled 'recyclable-expired' to be deleted (#28532) (@juliev0)
• 463f39a: feat(health): support ListenerSet.gateway.networking.k8s.io (#28388) (@root30)
• ffe66ff: feat(health): support custom deletion messages (#27595) (#27596) (@crenshaw-dev)
• 5e8ed63: feat(health): support various policies _.microgateway.airlock.com (#28268) (@root30)
• 961bd43: feat(hydrator): add metrics to app info (#29512) (#29514) (@crenshaw-dev)
• 2d71dc6: feat(hydrator): sign hydrated commits (Alpha) (#28239) (#28271) (@mladjan-gadzic)
• c2df91b: feat(impersonation): allow to disable strict enforcement (#27084) (#27573) (@agaudreault)
• e2b719a: feat(otel): add spans with configurable sampling (#28396) (@blakepettersson)
• b2e6d1d: feat(perf): configurable serialization and compression for cached manifests (#26897) (#28600) (@adityaraj178)
• e5eb504: feat(perf): count apps per cluster in a single pass (#29570) (@rumstead)
• 4c36558: feat(perf): drop two redundant application copies from the refresh path (#29581) (@rumstead)
• 37273e3: feat(perf): partial json unmarshalling (#29378) (@blakepettersson)
• 0f901d1: feat(perf): resolve the destination server without copying the cluster (#29573) (@rumstead)
• 0c2545d: feat(perf): reuse matrix child params when the generator is unchanged (#29582) (@rumstead)
• 54a740e: feat(resource_customizations): support ignored status for victoriametrics healthcheck (#29351) (@AndrewChubatiuk)
• 4abcbcf: feat(server): Add support for redirect to selected Dex connector (Alpha) (#24221) (@antonu17)
• e4470c5: feat(server): add configHash field to Cluster (#25311) (#27657) (@matmil-dev)
• c2e39d8: feat(server): log username on login attempts (cherry-pick #29841 for 3.6) (#29859) (@argo-cd-cherry-pick-bot[bot])
• fc848eb: feat(server): set X-Robots-Tag to prevent indexing of the UI (#28359) (@yugstar)
• 0141bf0: feat(tls): Make TLS Curve prefereneces configurable while setting TLS options for repo-server and server. (#28846) (@akhilnittala)
• ba47c6b: feat(ui): Implement virtual scrolling for Apps list/tiles view when all is selected (#29542) (@aali309)
• bf984ea: feat(ui): Lazy loading (#29087) (@jwinters01)
• ac01194: feat(ui): add regex search toggle to application(sets) list (#27857) (#27889) (@rickbrouwer)
• 8073201: feat(ui): add resources explorer view (#28098) (@agaudreault)
• 5b4b5de: feat(ui): add search bar and pagination to settings pages (#28305) (@agaudreault)
• e2a605e: feat(ui): add server-side name filter to applications list and watch (#29106) (#29242) (@rickbrouwer)
• f495ca5: feat(ui): advanced settings view (#28383) (@agaudreault)
• 4fa944e: feat(ui): enable React Compiler in the build (@jwinters01)
• 1433359: feat(ui): show last scheduled and successful times for CronJob in summary panel (cherry-pick #30690 for 3.6) (#30748) (@dudinea)
• 9cf8d7c: feat(ui): sidebar anchors (#28527) (@blakepettersson)
• 91f7adc: feat(ui): use anchors instead of divs in app/appset tiles and tablerows (#28005) (@blakepettersson)
• 73bf020: feat(webhook): Add manifest-generate-paths annotation support for BitBucket Server (#27552) (@adityaraj178)
• ca3139e: feat(webhook): add webhook support for harbor (#27810) (#27884) (@adityaraj178)
• 7bdadbf: feat(webhooks): add webhook support for DockerHub (#28022) (@nitishfy)
• 79b0815: feat: Add deprecation warning when using --signature-keys (#28941) (@kuci-JK)
• b5d698a: feat: Add health check for pulumi.com/Stack (#28534) (@guineveresaenger)
• 0703fca: feat: Add health check resource customizations for Envoy Gateway Extension CRDs (#27291) (@obliadp)
• 34427a6: feat: Add reporting component to events list (#25684) (#27678) (@Suven-p)
• 816fcd0...

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.7/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.7/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 7490bea: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.5) (#30651) (@argo-cd-cherry-pick-bot[bot])
• 7111dbd: fix(app): ensure deletion message is printed only for text output fomat (cherry-pick #30600 for 3.5) (#30616) (@argo-cd-cherry-pick-bot[bot])
• 0b3553c: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.5) (#30482) (@argo-cd-cherry-pick-bot[bot])
• 21aea4e: fix(appset): refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.5) (#30620) (@argo-cd-cherry-pick-bot[bot])
• 4f2aec5: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.5) (#30497) (@argo-cd-cherry-pick-bot[bot])
• 847e0b5: fix(cli): send --header values when refreshing an expired auth token (#30061) (#30546) (@nitishfy)
• 40bd9f3: fix(controller): allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.5) (#30503) (@argo-cd-cherry-pick-bot[bot])
• e9ef25a: fix(controller): rewrite resource tree when an app moves back to a controller (cherry-pick #30313 for 3.5) (#30430) (@shimagrawal)
• dee004d: fix(exec): don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.5) (#30436) (@argo-cd-cherry-pick-bot[bot])
• 8a164d3: fix(git): send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.5) (#30407) (@argo-cd-cherry-pick-bot[bot])
• f9abfd4: fix(health): handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.5) (#30627) (@argo-cd-cherry-pick-bot[bot])
• dcfbe29: fix(health): report CRDs that are not established yet as Progressing (#26346) (cherry-pick #30441 for 3.5) (#30575) (@argo-cd-cherry-pick-bot[bot])
• f67a23e: fix(health): report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.5) (#30421) (@argo-cd-cherry-pick-bot[bot])
• 9f2f72e: fix(health): use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.5) (#30655) (@argo-cd-cherry-pick-bot[bot])
• 2c9d7db: fix(server): allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.5) (#30568) (@antcybersec)
• 43b4eb9: fix(server): keep the gRPC code when manifest generation is interrupted (cherry-pick #30425 for 3.5) (#30552) (@argo-cd-cherry-pick-bot[bot])
• 6bbaccf: fix(server): prevent PodLogs goroutine leak on client disconnect (cherry-pick #30450 for 3.5) (#30460) (@argo-cd-cherry-pick-bot[bot])
• e0b841e: fix(sync): remove hook finalizer when live object is missing from reconciliation cache (cherry-pick #29469 for 3.5) (#30660) (@ppapapetrou76)
• 9ca2f26: fix(ui): don't crash resource panel when desired state is null (#30528) (cherry-pick #30532 for 3.5) (#30540) (@argo-cd-cherry-pick-bot[bot])
• 4474f55: fix(ui): keep status panel links readable when focused in dark mode (#29288) (cherry-pick #30493 for 3.5) (#30543) (@argo-cd-cherry-pick-bot[bot])
• 8bdacc6: fix(ui): refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.5) (#30594) (@adityaraj178)
• a6eaca6: fix: Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.5) (#30508) (@argo-cd-cherry-pick-bot[bot])
• cc47a8e: fix: accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.5) (#30515) (@argo-cd-cherry-pick-bot[bot])
• a304e87: fix: badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.5) (#30580) (@argo-cd-cherry-pick-bot[bot])
• c4a620f: fix: honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.5) (#30610) (@argo-cd-cherry-pick-bot[bot])
• 5de7fd9: fix: include multi-source revisions in sync completion event (cherry-pick #30446 for 3.5) (#30471) (@gdsoumya)
• ae1da1b: fix: modify GPG regex to support additional key algorithms (cherry-pick #27638 for 3.5) (#30496) (@argo-cd-cherry-pick-bot[bot])
• 8685022: fix: prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.5) (#30615) (@argo-cd-cherry-pick-bot[bot])
• 4cec051: fix: remove generation from ssd (#30398) (cherry-pick #30402 for 3.5) (#30442) (@argo-cd-cherry-pick-bot[bot])
• 4b0c664: fix: skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.5) (#30649) (@argo-cd-cherry-pick-bot[bot])
• f277dd0: fix: wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.5) (#30355) (@argo-cd-cherry-pick-bot[bot])

Documentation

• 6af872f: docs: add FAQ for importing Argo CD as a Go library (cherry-pick #30555 for 3.5) (#30561) (@argo-cd-cherry-pick-bot[bot])
• ae0f73a: docs: fix non-existent 'argocd repo edit' command in HA guide (cherry-pick #30694 for 3.5) (#30708) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

• a97897b: chore(deps): bump slack-go to v0.23.1 and golang.org/x/net to v0.53.0 (cherry-pick #28377 for 3.5) (#30696) (@argo-cd-cherry-pick-bot[bot])

Other work

• 6d73296: chore: bump version to 3.5.7 on release-3.5 branch (#30720) (@github-actions[bot])
• f68ec0a: fix(gitops-engine): race condition on empty-uid backfill (cherry-pick #28343 for 3.5) (#30523) (@argo-cd-cherry-pick-bot[bot])
• 7d89f90: fix(util/grpc): don't drop request log entries for Kubernetes-typed messages (cherry-pick #29872 for 3.5) (#30521) (@argo-cd-cherry-pick-bot[bot])
• c67d1e5: test(cmpserver): fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.5) (#30418) (@argo-cd-cherry-pick-bot[bot])
• 9644b05: test(controller): wait for the add handler before swapping the cache client (#30384) (cherry-pick #30400 for 3.5) (#30519) (@crenshaw-dev)
• cad895b: test(git): run TestLsRemote against a local repository (#30386) (cherry-pick #30399 for 3.5) (#30412) (@argo-cd-cherry-pick-bot[bot])
• 0e824b2: test(notification-controller): fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.5) (#30416) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: v3.5.6...v3.5.7

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.13/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.13/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 42e23cb: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.4) (#30653) (@argo-cd-cherry-pick-bot[bot])
• 9b48378: fix(app): ensure deletion message is printed only for text output fomat (cherry-pick #30600 for 3.4) (#30617) (@argo-cd-cherry-pick-bot[bot])
• 19c7221: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.4) (#30479) (@argo-cd-cherry-pick-bot[bot])
• 46a318f: fix(appset): refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.4) (#30621) (@argo-cd-cherry-pick-bot[bot])
• 1085b62: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.4) (#30499) (@argo-cd-cherry-pick-bot[bot])
• 53c49c3: fix(cli): send --header values when refreshing an expired auth token (#30547) (@nitishfy)
• 97854e7: fix(controller): allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.4) (#30502) (@argo-cd-cherry-pick-bot[bot])
• 39d0bc1: fix(exec): don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.4) (#30435) (@argo-cd-cherry-pick-bot[bot])
• 7c167f7: fix(git): send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.4) (#30408) (@argo-cd-cherry-pick-bot[bot])
• ab48586: fix(health): handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.4) (#30625) (@argo-cd-cherry-pick-bot[bot])
• 72ac2bc: fix(health): report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.4) (#30424) (@argo-cd-cherry-pick-bot[bot])
• f5ede5b: fix(health): use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.4) (#30654) (@argo-cd-cherry-pick-bot[bot])
• de71193: fix(server): allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.4) (#30569) (@antcybersec)
• e8472fa: fix(sync): remove hook finalizer when live object is missing from reconciliation cache (cherry-pick #29469 for 3.4) (#30659) (@argo-cd-cherry-pick-bot[bot])
• 4bfc7be: fix(ui): keep status panel links readable when focused in dark mode (#29288) (cherry-pick #30493 for 3.4) (#30541) (@argo-cd-cherry-pick-bot[bot])
• e27c9c7: fix(ui): refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.4) (#30595) (@adityaraj178)
• 7aa6bdf: fix: Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.4) (#30507) (@argo-cd-cherry-pick-bot[bot])
• e0370cf: fix: accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.4) (#30516) (@argo-cd-cherry-pick-bot[bot])
• 69f908f: fix: badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.4) (#30581) (@argo-cd-cherry-pick-bot[bot])
• 0023636: fix: fix escaped URL routing for write repo (creds) endpoints (cherry-pick #29940 for 3.4) (#29955) (@argo-cd-cherry-pick-bot[bot])
• 6929086: fix: honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.4) (#30624) (@adityaraj178)
• 40f9a9b: fix: include multi-source revisions in sync completion event (cherry-pick #30446 for 3.4) (#30470) (@gdsoumya)
• 2145508: fix: prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.4) (#30614) (@argo-cd-cherry-pick-bot[bot])
• 9b3eb49: fix: skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.4) (#30646) (@argo-cd-cherry-pick-bot[bot])
• 3ce8c62: fix: wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.4) (#30353) (@argo-cd-cherry-pick-bot[bot])

Other work

• 83ad9cd: chore: bump version to 3.4.13 on release-3.4 branch (#30721) (@github-actions[bot])
• 4dac47e: fix(gitops-engine): race condition on empty-uid backfill (cherry-pick #28343 for 3.4) (#30526) (@argo-cd-cherry-pick-bot[bot])
• fc097bd: test(cmpserver): fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.4) (#30417) (@argo-cd-cherry-pick-bot[bot])
• c49dd28: test(notification-controller): fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.4) (#30415) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: v3.4.12...v3.4.13

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.19/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.19/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• f392071: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.3) (#30650) (@argo-cd-cherry-pick-bot[bot])
• ef201d3: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.3) (#30480) (@argo-cd-cherry-pick-bot[bot])
• 34c59a8: fix(appset): refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.3) (#30622) (@argo-cd-cherry-pick-bot[bot])
• 42bdff4: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.3) (#30500) (@argo-cd-cherry-pick-bot[bot])
• 67ab019: fix(controller): allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.3) (#30504) (@argo-cd-cherry-pick-bot[bot])
• 36c346e: fix(exec): don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.3) (#30434) (@argo-cd-cherry-pick-bot[bot])
• e34397f: fix(git): send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.3) (#30409) (@argo-cd-cherry-pick-bot[bot])
• 569750a: fix(health): handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.3) (#30626) (@argo-cd-cherry-pick-bot[bot])
• 6ba0b1b: fix(health): report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.3) (#30422) (@argo-cd-cherry-pick-bot[bot])
• 6cc8e2b: fix(health): use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.3) (#30656) (@argo-cd-cherry-pick-bot[bot])
• 75e5d84: fix(server): allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.3) (#30570) (@antcybersec)
• eba2d77: fix(ui): refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.3) (#30596) (@adityaraj178)
• f985ac9: fix: Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.3) (#30510) (@argo-cd-cherry-pick-bot[bot])
• e388575: fix: accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.3) (#30514) (@argo-cd-cherry-pick-bot[bot])
• f44be7e: fix: badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.3) (#30582) (@argo-cd-cherry-pick-bot[bot])
• 35bf00a: fix: honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.3) (#30619) (@adityaraj178)
• 17ed834: fix: prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.3) (#30612) (@argo-cd-cherry-pick-bot[bot])
• feb076b: fix: skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.3) (#30647) (@argo-cd-cherry-pick-bot[bot])
• 4145a4c: fix: wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.3) (#30356) (@argo-cd-cherry-pick-bot[bot])

Other work

• 554529f: chore: bump version to 3.3.19 on release-3.3 branch (#30722) (@github-actions[bot])
• df91d32: fix(gitops-engine): race condition on empty-uid backfill (cherry-pick #28343 for 3.3) (#30525) (@argo-cd-cherry-pick-bot[bot])
• 4f209aa: test(cmpserver): fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.3) (#30420) (@argo-cd-cherry-pick-bot[bot])
• 303bb45: test(notification-controller): fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.3) (#30413) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: v3.3.18...v3.3.19

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0-rc4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0-rc4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 166cb92: fix(sharding): recompute distribution when Update adds an unknown cluster (#29476) (cherry-pick #29477 for 3.6) (#30318) (@argo-cd-cherry-pick-bot[bot])
• ce9fdb7: fix: (ui) reduce Applications virtual-scroll flicker on scroll (cherry-pick #29935 for 3.6) - REVERT (#29973) (@keithchong)
• f63d92d: fix: restore SSH repository fetch through a SOCKS5 proxy (cherry-pick #30238 for 3.6) (#30252) (@ppapapetrou76)
• ac0059e: fix: server-side diff reports fields removed by other managers as diffs (cherry-pick #30206 for 3.6) (#30231) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

• 43cfa8d: chore(deps): update group golang to v1.27.3 (release-3.6) (#30304) (@argoproj-renovate[bot])

Other work

• 2eaca1f: chore: bump version to 3.6.0-rc4 on release-3.6 branch (#30347) (@github-actions[bot])

Full Changelog: v3.6.0-rc3...v3.6.0-rc4

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.18/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.18/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 4692a04: fix(security): emudhra CA certs compromise for release 3.3 (#30349) (@dudinea)

Other work

• d0b5dfd: chore: bump version to 3.3.18 on release-3.3 branch (#30350) (@github-actions[bot])

Full Changelog: v3.3.17...v3.3.18

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.6/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• f62e0c6: fix(grpc): a workaround to fix SRV _grpclb._tcp SRV lookups (#29989) (cherry-pick #30084 for 3.5) (#30170) (@argo-cd-cherry-pick-bot[bot])
• d98924d: fix: restore SSH repository fetch through a SOCKS5 proxy (cherry-pick #30238 for 3.5) (#30246) (@argo-cd-cherry-pick-bot[bot])
• d575730: fix: server-side diff reports fields removed by other managers as diffs (cherry-pick #30206 for 3.5) (#30229) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

• cad84a8: chore(deps): bump dompurify for release-3.5 (#30176) (@ranakan19)
• 940d00e: chore(deps): update group golang to v1.26.10 (release-3.5) (#30305) (@argoproj-renovate[bot])

Other work

• c2b1e30: chore: bump version to 3.5.6 on release-3.5 branch (#30319) (@github-actions[bot])

Full Changelog: v3.5.5...v3.5.6

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.12/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.12/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• ad17ffa: fix: restore SSH repository fetch through a SOCKS5 proxy (cherry-pick #30238 for 3.4) (#30250) (@ppapapetrou76)
• b8dbf20: fix: server-side diff reports fields removed by other managers as diffs (cherry-pick #30206 for 3.4) (#30230) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

• 2ae5194: chore(deps): bump dompurify for release-3.4 (#30175) (@ranakan19)
• caebfdb: chore(deps): update group golang to v1.26.10 (release-3.4) (#30306) (@argoproj-renovate[bot])

Other work

• 590e562: chore: bump version to 3.4.12 on release-3.4 branch (#30320) (@github-actions[bot])

Full Changelog: v3.4.11...v3.4.12

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.17/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.17/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• e4b4168: fix: restore SSH repository fetch through a SOCKS5 proxy (cherry-pick #30238 for 3.3) (#30251) (@ppapapetrou76)

Dependency updates

• 0e765ce: chore(deps): bump dompurify for release-3.3 (#30174) (@ranakan19)
• 46a4939: chore(deps): update group golang to v1.26.10 (release-3.3) (#30307) (@argoproj-renovate[bot])

Other work

• 30abed5: chore: bump version to 3.3.17 on release-3.3 branch (#30322) (@github-actions[bot])

Full Changelog: v3.3.16...v3.3.17