chore(deps): update dependency argoproj/argo-cd to v3 - #1471
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
![mergify[bot]](https://avatars.githubusercontent.com/in/10562?s=60&v=4){kind=small}
✅ Deploy Preview for eks-workshop ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
5 times, most recently
from
June 5, 2025 16:49
a4c2a48 to
8ab0ac6
Compare
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
June 10, 2025 01:54
8ab0ac6 to
786e528
Compare
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
from
June 12, 2025 16:25
786e528 to
026467b
Compare
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
14 times, most recently
from
July 2, 2025 12:29
14d0ea8 to
db5a139
Compare
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
2 times, most recently
from
July 2, 2025 18:12
d078984 to
3fda0b4
Compare
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
6 times, most recently
from
July 15, 2025 18:33
e91d07c to
3676d02
Compare
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
11 times, most recently
from
July 27, 2025 13:48
fd1eef4 to
61059cc
Compare
renovate
Bot
force-pushed
the
renovate/argoproj-argo-cd-3.x
branch
12 times, most recently
from
August 4, 2025 20:40
be82520 to
be3be8d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.14.21→3.5.2v3.5.3Release Notes
argoproj/argo-cd (argoproj/argo-cd)
v3.5.2Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
f1f109c: fix(appset): restore ignoreApplicationDifferences after normalization (cherry-pick #29070 for 3.5) (#29195) (@argo-cd-cherry-pick-bot[bot])a45dd38: fix(repository): resolve untyped helm source type in UpdateRevisionForPaths (cherry-pick #28904 for 3.5) (#29399) (@argo-cd-cherry-pick-bot[bot])417c675: fix(revert): auto-sync skipped when newer commit arrives during sync (cherry-pick #28692 for 3.5) (#29224) (@rumstead)961ee40: fix(ui): remove kind filter from appset page (#29310) (#29311) (cherry-pick 3.5) (#29314) (@crenshaw-dev)cc1f3ee: fix(ui): show operation state on applications list page (cherry-pick release-3.5) (#29344) (@antonu17)5accee3: fix: don't degrade Cluster API Cluster health while Ready is False during provisioning (cherry-pick #29237 for 3.5) (#29273) (@argo-cd-cherry-pick-bot[bot])4d99c52: fix: recover from kubectl panic in AuthReconcile when SA is forbidden (cherry-pick #28669 for 3.5) (#29294) (@alexymantha)Dependency updates
8b9e270: chore(deps): update dependency dexidp/dex to v2.45.1 (#29334) (@nitishfy)Other work
e258ee2: chore: bump version to 3.5.2 on release-3.5 branch (#29404) (@github-actions[bot])a9d94d6: fix(notification-controller): deep-copy before mutating object from a shared cache (cherry-pick #29350 for 3.5) (#29354) (@argo-cd-cherry-pick-bot[bot])cc1d7a2: fix(notification-controller): read appprojects from informer cache (#28815) (cherry-pick release-3.5) (#29345) (@antonu17)Full Changelog: argoproj/argo-cd@v3.5.1...v3.5.2
v3.5.1Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
33f3bc5: fix(appset): stop progressive sync reconciling in a tight loop (#27577) (#29139) (@himeshp)d358e75: fix(appset): verify terminating Applications against the API server (#29042) (#29138) (@himeshp)ecf3737: fix(controller): cherry-pick treattimeout.reconciliation=0as disabled soft expiry (#27683) (#29007) (@aali309)978fa65: fix(controller): reuse server-side diff result when masking Secret data (#27858) (#29074) (@1ovsss)f399c84: fix(controller): use diff cache when timeout.reconciliation is disabled (cherry-pick #29073 for 3.5) (#29158) (@argo-cd-cherry-pick-bot[bot])960bed7: fix(server): prevent SSD CLI secret mask spoofing (cherry-pick #29089 for 3.5) (#29130) (@argo-cd-cherry-pick-bot[bot])9f360f4: fix(ssd): hide secret in last-applied-configuration annotation (#28989) (#29052) (@pjiang-dev)Other work
109ca7c: chore: bump version to 3.5.1 on release-3.5 branch (#29165) (@github-actions[bot])b44fbbc: fix(manifest-generate-paths): Consistent gen manifest cache key (#28074 and #29037) (#29049) (@agaudreault)Full Changelog: argoproj/argo-cd@v3.5.0...v3.5.1
v3.5.0Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
be19446: feat(Jitter): Add Configurable Jitter for Webhook-Triggered application Refreshes (#25433) (@adityaraj178)5b30739: feat(appset): add concurrency when managing applications (#26642) (@rumstead)29fd8db: feat(appset): filtering repos by archived status #20736 (#21505) (@prune998)57942ce: feat(cli): Add support for Source Integrity configuration (#26997) (@olivergondza)3cc6ba7: feat(cli): add --app-namespace flag to missing argocd app subcommands (#27942) (@Mangaal)0e729cc: feat(cli): add appset-namespace for appset command (#27022) (@Mangaal)744983b: feat(health): Add healthcheck for gardener "Shoot" resources (#25750) (@Sven1410)6cc786d: feat(health): add GatewayClass health check (#26591) (@dnfwlq8054)eabd4d6: feat(health): add pause and unpause actions to psmdb resource (#27616) (@KyriosGN0)daadf86: feat(health): additional promoter.argoproj.io health checks (#27170) (@crenshaw-dev)4b69a7f: feat(health): finalizer messages for Promoter checks (#27478) (@crenshaw-dev)289a4c0: feat(health): support BackendTLSPolicy.gateway.networking.k8s.io (#27385) (@snorwin)4cdc650: feat(helm): support wildcard glob patterns forvalueFiles(#26768) (@nitishfy)f7a7deb: feat(hydrator): dynamically manage README template from argocd-cm ConfigMap [updated] (#19067) (#24309) (@gyu-young-park)86936e2: feat(hydrator): make manifest hydration queue concurrency configurable (#27926) (#27948) (@GuruduGanesh)2308e17: feat(hydrator): opt-in source integrity verification for dry sources (Alpha) (#19302) (#28084) (@mladjan-gadzic)bf1591d: feat(hydrator): support syncSource repoURL for separate destination repo (#27011) (@boostrack)41b6fee: feat(impersonation): allow to disable strict enforcement (#27084) (cherry-pick #27573 for 3.5) (#28595) (@argo-cd-cherry-pick-bot[bot])0c0140c: feat(metrics): add parallelism limit repo server (#27911) (@pjiang-dev)7d2eb77: feat(renovate): clean up config and remove github app (#27738) (@rumstead)153ec67: feat(resource_customizations): add health checks for VictoriaMetrics (#27451) (@megative)6b84ea9: feat(server): drop objects from non-allowed namespaces before they enter the cache. (#28018) (@christianh814)224b75a: feat(server): use typed Argo CD EventList for event-listing APIs (#25767) (#26322) (@chansuke)64a0417: feat(ui): Add AppSet to Application Resource Tree (#26601) (@pjiang-dev)b035a77: feat(ui): ApplicationSet Preview Apps tab in UI (#27799) (@pjiang-dev)566c172: feat(ui): add GitOps Promoter resource icon (#26894) (@crenshaw-dev)0dd8874: feat(ui): add nauth.io resource icon (#28226) (@choufraise)f16d08a: feat(ui): add repo url as filter in home page (#26670) (#27418) (@adityaraj178)91e7664: feat(ui): per-application notice banner and info icon (#14405) (#27719) (@gdsoumya)1b405ce: feat(ui): search filter by target revision (#24038) (@choejwoo)706a037: feat(ui): support creating multi-source applications in New App panel[CONTINUED..](#27095) (@aali309)2fcf104: feat(ui): support spec.sourceHydrator.drySource.repoURL (@crenshaw-dev)74d1fe0: feat(ui): use toggle-auto-sync resource action in app details page (#21564) (#27226) (@shiiyan)db7d672: feat(webhooks): add webhook support for GHCR (#26462) (@nitishfy)6d92e17: feat: Add ProvideClusterInfo and Config fields to ExecProviderConfig (#24282) (#27976) (@mikeshng)022f935: feat: Add basic support for git tag path prefixes (#27290) (@k4r1)aad3422: feat: Add suspend/resume actions for MariaDB (#27675) (#27674) (@mgross2)586430c: feat: Migrate from Helm 3 to Helm 4 (#28076) (@reggie-k)c61c1dc: feat: Render Helm ValuesObject as YAML in log output instead of binary (#18342) (#27649) (@subhramit)9a19735: feat: Support Azure Service Principal authentication for Azure DevOps repositories (#25324) (@allanyung)97082e8: feat: add Gateway API support to network view (#26188) (@tete17)603c900: feat: add action to delete recyclable Numaflow pipelines (#25900) (@dpadhiar)de94161: feat: add action to restart StrimziPodSet (#27266) (@KyriosGN0)a2b91ce: feat: add depth option to ui (#26618) (@blakepettersson)1dc2ad0: feat: add health check for karpenter.sh/NodeClaim (#26876) (@Navneet072300)611fcb0: feat: add sync overrun option to sync windows (#25361) (#25510) (@puskunalis)48f18e2: feat: add toggle-auto-sync resource action for Application (#21564) (#26477) (@vikasrao23)2df5f75: feat: adds mTLS support in repo-server (#26715) (@ppapapetrou76)4d02fc2: feat: expose Appset UI and fix pie chart summary (#26666) (@pjiang-dev)a889f46: feat: make appset proxy-url param a native flag (#27788) (@ppapapetrou76)ad310c2: feat: replace error message in webhook handler with metrics (#27215) (@alexmt)01187d1: feat: support Azure AD groups claims overflow via Microsoft Graph API (#27397) (@gravufo)f71239c: feat: support destinationServiceAccounts in global projects (#23059) (@enneitex)f460a3c: feat: surface root cause in sync failure message and cache discovery errors (#27750) (@ppapapetrou76)3eebbcb: feat: use impersonation for server operations (logs, delete, etc) #22996 (#26898) (@alexymantha)Bug fixes
b982144: Revert "fix: prevent automatic refreshes from informer resync and status updates" (#27562) (@agaudreault)c5d1c91: fix(UI): show RollingSync step clearly when labels match no step (#26877) (@aali309)c52bf66: fix(appcontroller): application controller in core mode fails to sync when server.secretkey is missing (#26793) (@anandf)e81969f: fix(applicationset): include repo URL in git file generator errors (#28075) (@morning-verlu)e4fe7f6: fix(appset): don't release finalizer while children still terminate (cherry-pick #28999 for 3.5) (#29006) (@argo-cd-cherry-pick-bot[bot])06fae9d: fix(appset): fall back to create when patch returns NotFound (#17312) (cherry-pick #28645 for 3.5) (#28716) (@argo-cd-cherry-pick-bot[bot])45a84df: fix(ci): add .gitkeep to images dir (#26892) (@blakepettersson)4c42071: fix(ci): openssf scorecard doesn't allow global vars (#27203) (@crenshaw-dev)36f4ff7: fix(ci): pin goreman version used in ci-build.yaml (#27062) (#27061) (@dudinea)25b3037: fix(ci): pnpm sbom generation (#27337) (#27339) (@crenshaw-dev)99c51df: fix(ci): renovatebot action uses floating image tag (#27023) (#27024) (@dudinea)fb82b16: fix(ci): run yarn install with --frozen-lockfile (#27098) (#27099) (@dudinea)b403f5c: fix(cli): hide unsupported --tls-server-name kubectl REST flag (#27694) (#27711) (@SAY-5)60b878d: fix(cli): hide unsupported kubectl REST flags (#25875) (#25977) (@HyejunKoo)21fe1fb: fix(cli): honor --kube-context when creating core-mode REST config (#12883) (#27661) (@ystkfujii)52f7b3b: fix(cli): print clear timeout message when argocd app wait times out (#28274) (@pncloud)f48091a: fix(cli): return immediately from 'app wait' when app is already in desired state (#12211) (#27503) (@jheyduk)6256abf: fix(cli): uses DrySource revision for app diff/manifests with sourceHydrator (#23817) (#24670) (@adityaraj178)c3c12c1: fix(commitserver): Static analysis fixes (#27085) (@olivergondza)5a20f9b: fix(controller): gracefully handle k8s resource size limit for applications (#27802) (@nitishfy)32f23a4: fix(controller): reduce secret deepcopies and deserialization (#27049) (@rumstead)4051511: fix(controller): replace removed kubectl PodRequestsAndLimits (#27895) (@mfacenet)5ec0603: fix(controller): requeue source hydration on periodic refresh timeout (#27009) (@boostrack)a62624a: fix(diff): don't drop manager-owned descendant fields when filtering webhook mutations (cherry-pick #28819 for 3.5) (#28895) (@argo-cd-cherry-pick-bot[bot])e960635: fix(docs): Fix formatting and clarity about requestedScopes in Keycloak integration docs (#27019) (@todaywasawesome)d449294: fix(docs): Fix manifest path in Source Hydrator docs (#27123) (@olivergondza)2f48cfb: fix(docs): revert bogus 3.3-3.4 upgrade guide changes in #26322 (@dudinea)c2044db: fix(health): PromotionStrategy stuck Progressing after no-op re-hydration (#28124) (#28125) (@crenshaw-dev)9c67c89: fix(health): add missing HPA degraded states for metric failures (#26274) (@rickbrouwer)0b42a6d: fix(helm): pass registry passwords through stdin (Cherry-Pick) (#28834) (@nitishfy)ae10c0c: fix(hook): Fixed hook code issues that caused stuck applications on "Deleting" state (Issues #18355 and #17191) (#26724) (@nikos445)4d2b6fa: fix(hydrator): align dry source validation cache keys with hydrator (#27182) (@agaudreault)8c29202: fix(hydrator): fix race condition in status update with hydrate annotation (#27183) (@agaudreault)f298f45: fix(hydrator): preserve all source type fields in GetDrySource() (#27189) (@agaudreault)f73e136: fix(lint): unnecessary nesting (#27815) (@crenshaw-dev)6a0457a: fix(makefile): Run goals with bind mounts on SELinux enabled host (build-ui,build-docs,serve-docs) (#28003) (@olivergondza)7fa7d82: fix(normalizers): include resource context in failed normalization log (#27769) (@rafaelmfried)d0810e3: fix(oidc_userinfo): allow userInfo URL to be customized (#27720) (@the-technat)87d79f9: fix(performance): add cache support for ResolveRevision to reduce Git operations (#27193) (@agaudreault)5c1b930: fix(progressivesync): check if error == notfound (cherry-pick #28663 for 3.5) (#28670) (@argo-cd-cherry-pick-bot[bot])4f47dd0: fix(rbac): resolve RBAC regression for project-scoped resources in multi-namespace architecture (#25289) (#26573) (@tcfwbper)3b60b5e: fix(reposerver): honor depth of referenced source instead of primary source (cherry-pick #28339 for 3.5) (#28340) (@alexandresavicki)f397bf6: fix(server): Avoid error when attempting a second delete operation (#27495) (@thomastaylor312)382c507: fix(server): Cache glob patterns to improve RBAC evaluation performance (#25759) (@Sinhyeok)4259f46: fix(server): Ensure OIDC config is refreshed at server restart (#26913) (@OpenGuidou)91d83d3: fix(server): fix find container logic for terminal (#26858) (@linghaoSu)d6b2be8: fix(server): make server.glob.cache.size optional (#28242) (#28243) (@crenshaw-dev)1dd9075: fix(settings): only trigger reload for app.kubernetes.io/part-of=argocd secrets (#27213) (@EronWright)212f51d: fix(sharding): fix log format verb and document intentional shard-0 fallback (#27222) (@nitishfy)8feb146: fix(ssa): do not run auth reconcile with SSA (#26175) (#27601) (@agaudreault)134b428: fix(ssd): regression causing diff to error on new objects (#27679) (#27703) (@agaudreault)63a009e: fix(test): make fail message better for TestAuthReconcileWithMissingNamespace (#26856) (@cjcocokrisp)abf7311: fix(ui): Application Summary crashes on load for non-hydrator apps (#28112) (@agaudreault)b4af746: fix(ui): ApplicationSet detail view for non-default namespace (#27928) (#27931) (@AsifAd)25df43d: fix(ui): Improve message on self-healing disabling panel (#26977) (#26978) (@bebosudo)30efe53: fix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (#27097) (@karimzakzouk)30ab5b5: fix(ui): adapt new applicationset icon test to react-testing-library (@jwinters01)993533a: fix(ui): add icon for view.promoter.argoproj.io API group (#28246) (#28247) (@crenshaw-dev)1bd0d48: fix(ui): add truncation and tooltip for long sync status branch names (#27260) (@choejwoo)a5012a0: fix(ui): add url origin to return_url (#27733) (@Sumis34)f6ade14: fix(ui): app/appset size of ResourceIcon (#28141) (@agaudreault)0c80d13: fix(ui): avoid mutating toolbar input in AddAuthToToolbar (@jwinters01)8206eb9: fix(ui): contain settings textareas within panel width (#27943) (@choejwoo)d1d0e5d: fix(ui): don't prefetch errors (#27877) (#27925) (@blakepettersson)4fbe92a: fix(ui): guard against undefined groupName in project role groups edit (@jwinters01)8e2571f: fix(ui): handle 401 error in stream (#26917) (@linghaoSu)2653f25: fix(ui): include Deleting and Terminated apps in Syncing operation filter (#27874) (@choejwoo)4b4bbc8: fix(ui): include _-prefixed dirs in embedded assets (#26589) (@choejwoo)9a05e0e: fix(ui): placate sonar with adding compare function for repo path sort autocomplete (#26906) (@reggie-k)5453172: fix(ui): prevent pod logs viewer crash on stale container index (#27553) (@youhonglian)b6a715c: fix(ui): prevent wide gaps in grouped resource tree (#25747) (@choejwoo)566c622: fix(ui): reduce loaded application data on list operation (Relates [#15509]) (#25451) (@aveuiller)3c889f4: fix(ui): regenerate pnpm-lock.yaml against public npm registry (@jwinters01)a39953d: fix(ui): remove auto-sync toggle from app top bar (#27868) (@shiiyan)b1db1b1: fix(ui): restore public registry tarball URLs in pnpm-lock.yaml (@jwinters01)fc821b8: fix(ui): restore token diff highlighting in resource diff view (@jwinters01)26621ad: fix(ui): return full source for non-hydrator apps in Parameters tab (#26946) ([@himeshpConfiguration
📅 Schedule: (UTC)
* * 7-14 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.