Update quay.io/argoproj/argocd Docker tag to v2.6.6 #1157

Closed
renovate-bot wants to merge 1 commits from renovate/quay.io-argoproj-argocd-2.x into master
Contributor

This PR contains the following updates:

Package Update Change
quay.io/argoproj/argocd minor v2.4.11 -> v2.6.6

Release Notes

argoproj/argo-cd

v2.6.6

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.6/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.6/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 12 contributions from 4 contributors with 0 features and 3 bug fixes.

Bug fixes (3)
  • fix(appset): git files generator in matrix generator produces no params (#​12881) (#​12882)
  • fix: log plugin commands in a better format (#​12260) (#​12875)
  • fix: support 'project' filter field for backwards-compatibility (#​12594)
Documentation (4)
Other (5)
  • chore(deps): bump actions/setup-go from 3.5.0 to 4.0.0 (#​12888)
  • chore(deps): bump actions/checkout from 3.3.0 to 3.4.0 (#​12889)
  • build: Enable CI checks on PRs to release branches (#​12887)
  • test: wait longer after repo server restarted to avoid errors on s390x (#​12839) (#​12886)
  • chore(deps): bump actions/cache from 3.2.6 to 3.3.1 (#​12845)

v2.6.5

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.5/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.5/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues
Broken matrix-nested git files generator in 2.6.5

Argo CD 2.5.14 introduced a bug in the matrix-nested git files generator. The bug only applies when the git files
generator is the second generator nested under a matrix. For example:

apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: guestbook
spec:
  generators:
  - matrix:
      generators:
        - clusters: {}
        - git:
            repoURL: https://git.example.com/org/repo.git
            revision: HEAD
            files:
              - path: "defaults/*.yaml"
  template:

##### ...

The nested git files generator will produce no parameters, causing the matrix generator to also produce no parameters.
This will cause the ApplicationSet to produce no Applications. If the ApplicationSet controller is
configured with the ability to delete applications,
it will delete all Applications which were previously created by the ApplicationSet.

To avoid this issue, upgrade directly to >=2.5.15 or >= 2.6.6.

Changes

This release includes 6 contributions from 2 contributors with 0 features and 3 bug fixes.

Bug fixes (3)
Documentation (2)
Other (1)
  • chore: upgrade https lib to avoid CVE-2022-41723

v2.6.4

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.4/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.4/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 15 contributions from 3 contributors with 0 features and 5 bug fixes.

Bug fixes (5)
Documentation (5)
Other (5)
  • chore(deps): bump actions/cache from 3.2.5 to 3.2.6 (#​12567)
  • chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (#​12689)
  • chore: Add unit tests for the shared health resource feature and fix docs (#​12715) (#​12720) (#​12731)
  • chore: upgrade redis to 7.0.8 to avoid several CVEs (#​12627)
  • chore: upgrade haproxy to 2.6.9 to avoid multiple CVEs (#​12628) (#​12658)

v2.6.3

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.3/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.3/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 19 contributions from 16 contributors (7 of them new) with 0 features and 7 bug fixes.

A special thanks goes to the 7 new contributors:

  • atusy
  • Dmitriy Mann
  • Michael Chen
  • Steve Ramage
  • Vaibhav Bhembre
  • Wojtek Cichoń
  • Zadkiel Aharonian
Bug fixes (7)
Documentation (8)
  • docs: add 2.5->2.6 upgrade notes to table of contents (#​12319)
  • docs: add multi source app ref in helm section (#​12499)
  • docs: FAQ improvements (#​12146)
  • docs: fix a few typos and grammar mistakes (#​12280)
  • docs: fix typo (#​12389)
  • docs: Updated link to Jenkins and added GitHub Actions link (#​12465)
  • docs: fix typo in health documentation (#​12497)
  • docs: Clarify cascade delete of resource and finalizer (#​11064)
Other (4)
  • chore: use registry.k8s.io instead of k8s.gcr.io (#​12362)
  • chore(deps): bump imjasonh/setup-crane from 0.2 to 0.3 (#​12504)
  • chore(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 (#​12308)
  • chore(deps): bump actions/cache from 3.2.4 to 3.2.5 (#​12433)

v2.6.2

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.2/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.2/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 2 contributions from 1 contributors with 0 features and 0 bug fixes.

Security (1)
  • CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j)
Other (1)
  • chore: add dist to path to use our kustomize version (#​12352)

v2.6.1

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.1/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.1/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 1 contributions from 1 contributors with 0 features and 1 bug fixes.

Security (1)
  • MEDIUM: Argo CD leaks repository credentials in user-facing error messages and in logs (GHSA-mv6w-j4xc-qpfw)

v2.6.0

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.0/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.0/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 235 contributions from 94 contributors (54 of them new) with 39 features and 34 bug fixes.

Features (39)
  • feat: make discovery field optional in plugins (#​12073)
  • feat: Allow force of basic auth for HTTP repositories (#​11983)
  • feat(security): require the aud claim from OIDC providers by default (#​12187)
  • feat: add health checks for keptn resources (#​11716)
  • feat: Extend Cluster.cluster.x-k8s.io health check (#​11705)
  • feat: support Knative Serving 1.5 Custom Health Checks (#​9719)
  • feat: AppSet Progressive Rollouts with RollingSync (#​9437) (#​10048)
  • feat: Multiple sources for applications (#​2789) (#​10432)
  • feat: add google cloud source repo support (#​7534) (#​11618)
  • feat: ApplicationSet add create-delete policy #​9101 (#​11107)
  • feat: Allow Matrix generator to have two Git child generators without conflict (#​10522) (#​10523)
  • feat: expose deep links in UI (#​11680)
  • feat: show cmpv2 plugins in create app wizard (#​11615)
  • feat: pull request labels exposed in Pull Request generator template (#​10204) (#​11397)
  • feat: add deny sources (#​11639) (#​11646)
  • feat: Add support for proxy extensions (#​11307)
  • feat: added deep links backend changes (#​11401)
  • feat: Allow proxy to be saved when creating repoCreds (#​11351) (#​11425)
  • feat: show app age in application list view (#​11209) (#​11502)
  • feat: add support for plugin name in CMPv2 (#​11290) (#​11341)
  • feat: parameterized config management plugins (#​9135) (#​9216)
  • feat: Add wildcard support in OCI Helm Repositories targetRevision (#​6686) (#​10641)
  • feat(ui): add a filter for auto sync (#​11357)
  • feat: Implement karmada CRD health checks (#​11192)
  • feature: allow a custom labels on any resource to surface in the UI (tree view node tags) (#​11153)
  • feat: display auto sync status in application details view (#​11200)
  • feat: Shared custom health check for multiple resources (#​4212) (#​10885)
  • feat: Add new admin command to print Argo CD initial password (11117) (#​11155)
  • feat: enable metadata to be set on namespaces (#​10672)
  • feat: add labels and annotations to cluster details page (#​9707)
  • feat: sort resource list by created_at, add message to AnalysisRun and replicas to ReplicaSet (#​10613)
  • feat: UI Add copy to clipboard shortcut (#​10958)
  • feat: directory app include/exclude fields in UI (#​10880)
  • feat: make applicationset controller configurable in argocd-cmd-params (#​10961)
  • feat: add bcrypt support for argocd CLI (#​10934)
  • feat: link path directly to the path in repo (#​10568) (#​10860)
  • feat: make ARGOCD_GIT_MODULES_ENABLED configurable in argocd-cmd-params (#​10931)
  • feat: Implement MachineHealthCheck CRD health check (#​10846)
  • feat: Implement SecretStore health check (#​10847)
Bug fixes (34)
  • fix: remove argocd-cm plugin warnings (#​11740)
  • fix: multi-source app refresh (#​11772) (#​12217)
  • fix: don't dump SSG to server logs, change deprecation notice to v2.7 (#​12285)
  • fix: AppSet Progressive sync fixes, docs, and logging improvements (#​11924) (#​12103)
  • fix: disable edit button on App Details Summary and Parameters tabs multi-source apps (#​12048)
  • fix: return nil if reading application set was successful (#​12261)
  • fix: repo-server - prevent locked state after unclean git checkout (#​7898) (#​11805)
  • fix: Upgrade gopkg.in/yaml.v2 to v2.4.0 [release-2.6] (#​12245)
  • fix: disable More button for multiple sources (#​11760) (#​11971)
  • fix: create separate API to load configured plugins (#​12164)
  • fix: values should always be visible, even when they are empty (#​11676) (#​11681)
  • fix: pathParamPrefix is optional (#​11796) (#​11943)
  • fix: parsed url is not exposed (#​11816) (#​11916)
  • fix: upgrade qs to avoid CVE-2022-24999 (#​11743)
  • fix: Applications with suspended jobs now marked "Suspended" instead of "Progressing" (#​11603) (#​11626)
  • fix: disable rollback button for apps with multiple sources (#​11785)
  • fix: set Path as empty if path is not specified for a source in multiple sources (#​11756) (#​11774)
  • fix: sources.ref allow hyphen and underscore (#​11775)
  • fix: support for enabling progressive rollouts from argocd-cmd-params-cm (#​11776)
  • fix: support relative links in OCI tags query response (#​11708)
  • fix: rollback react to known working version (#​11703)
  • fix: Unknown sync operation state on app list page (#​11621)
  • fix: only add baseURL in github_app client for GHE client (#​11622)
  • fix: set baseURL in github_app client (#​11613)
  • fix: misc css fixes for mobile (#​5705) (#​11508)
  • fix: upgrade golang.org/x/net vuln (#​11447)
  • fix: incorrect can-i documentation (#​11463)
  • fix: application list api is very slow when fields query parameter is supplied (#​11250)
  • fix: add check for trailing/leading whitespace in project role group names (#​10919) (#​10988)
  • fix(ui): show orphaned as gray. fixes: #​11180 (#​11218)
  • fix: point gitops-engine to current master (#​11230)
  • fix: do not mutate live when managed namespace enabled (#​11197)
  • fix: defaulting to in-cluster is misleading for disconnected clusters (#​10132)
  • fix: trim whitespace from auth token (#​10539)
Documentation (32)
  • docs: update config management plugin docs (#​11690)
  • docs: add 2.5->2.6 upgrade notes to list (#​12283)
  • docs: sign up for 1.8 release (#​12266)
  • docs: release cycle refresh (#​11137)
  • docs: Fix heading to not include a v for the second version (#​12218)
  • docs: add destination.name example (#​12242)
  • docs: custom health check resource group wildcard (#​4212)
  • docs: added deep links doc (#​11888)
  • docs: Update bullet formatting on Progressive Rollouts.md (#​11777)
  • docs: bump elasticsearch version to 8.5.1 (#​11771)
  • docs: add appset progressive rollout strategy proposal (#​9979)
  • docs: fix web terminal step list numbering (#​11590)
  • docs: clarify finalizer effect and link to app-of-apps (#​11272)
  • docs: update remote-debugging-docs (#​11424)
  • docs: update contributor meeting times (#​11294)
  • docs: Use new Google Analytics 4 ID (#​11291)
  • docs: add info about sync interval (#​11281)
  • docs: fix formatting (#​11245)
  • docs(user-guide): update link to Helm hooks documentation (#​11045)
  • docs: fix typo in declarative-setup.md (#​11190)
  • docs: debugging CMPs (#​11142)
  • docs: add ui banner options in docs (#​10907)
  • docs: Add AirQo to users list (#​11160)
  • docs: Add SI Analytics to ArgoCD Users list (#​11110)
  • docs: message is no longer truncated (#​10962)
  • docs: add reverse proxy proposal for enhanced UI extensions (#​10435)
  • docs: fix link in auth0.md (#​10531)
  • docs: update debugging remote argocd environment (#​10811)
  • docs: Add Gepardec to users (#​10840)
  • docs: add dtag to users (#​10845)
  • docs: #argo-contributors instead of #argo-dev in FAQ
  • docs: add declarative syntax examples for helm (#​10764)
Other (105)
  • chore: rename 'progressive rollouts' to 'progressive syncs' (#​12265)
  • chore: upgrade cookiejar to avoid CVE-2022-25901 (#​12030)
  • chore: upgrade net/http2 to avoid CVE-2022-41717 (#​11616)
  • bug: fix url parsing for non git urls (oci://, no protocol etc) (#​11819)
  • chore: change logging level to Debug (#​11773)
  • chore: add kustomize project for testing param CMP locally (#​11265)
  • chore: upgrade minimatch to avoid CVE-2022-3517 (#​11745)
  • chore: upgrade git-url-parse to avoid CVE-2022-2900 (#​11744)
  • chore: add Voyager Digital to USERS.md (#​11735)
  • chore: Add Cloud Scale to USERS.md (#​11731)
  • chore: Add Getyourguide to USERS.md (#​11704)
  • chore: add Mercedes-Benz Tech Innovation to user list (#​11682)
  • chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.54 to 0.9.55 (#​11678)
  • chore(deps-dev): bump @​types/cookie from 0.3.3 to 0.5.1 in /ui (#​11659)
  • chore: downgrade React to v17 (#​11653)
  • chore(deps): bump github.com/casbin/casbin/v2 from 2.59.0 to 2.60.0 (#​11656)
  • chore(deps): bump express from 4.17.1 to 4.18.2 in /ui (#​11591)
  • chore(deps-dev): bump tslint-react from 3.6.0 to 5.0.0 in /ui (#​11559)
  • chore(deps): bump react-paginate from 6.5.0 to 8.1.4 in /ui (#​11558)
  • chore: Bump version in master to 2.6.0 (#​11641)
  • includeKinds for APIVersions in cluster info cache (#​11241)
  • chore(deps): bump github.com/aws/aws-sdk-go from 1.44.129 to 1.44.156 (#​11629)
  • chore: add Trusting Social users list (#​11584)
  • chore(deps): bump github.com/casbin/casbin/v2 from 2.57.1 to 2.59.0 (#​11607)
  • chore(deps): bump github.com/go-redis/redis/v8 from 8.11.3 to 8.11.5 (#​11606)
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 (#​11605)
  • chore(deps): bump github.com/go-openapi/loads from 0.19.4 to 0.21.2 (#​11569)
  • chore(deps): bump sigs.k8s.io/structured-merge-diff/v4 (#​11580)
  • chore: add Vinted to users list (#​11214)
  • chore(deps): bump github.com/go-openapi/runtime from 0.19.4 to 0.25.0 (#​11568)
  • add otel interceptor (#​11561)
  • chore(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#​11555)
  • chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.40 to 0.9.54 (#​11554)
  • chore(deps): bump github.com/valyala/fasttemplate from 1.2.1 to 1.2.2 (#​11552)
  • chore: Update notifications-engine dependency (#​11479)
  • Hack] Add concurrency to cluster creation in resource generator. ([#​11266](https://github.com/argoproj/argo-cd/issues/11266))
    
  • chore(deps-dev): bump babel-jest from 24.9.0 to 26.6.3 in /ui (#​11483)
  • chore(deps-dev): bump @​babel/preset-react from 7.7.0 to 7.18.6 in /ui (#​11489)
  • chore(deps-dev): bump @​types/prop-types from 15.7.1 to 15.7.5 in /ui (#​11487)
  • chore(deps): bump github.com/google/go-jsonnet from 0.18.0 to 0.19.1 (#​11484)
  • chore(deps): bump github.com/mattn/go-zglob from 0.0.3 to 0.0.4 (#​11486)
  • chore: upgrade React version (#​11467)
  • chore(deps-dev): bump @​types/lodash-es from 4.17.5 to 4.17.6 in /ui (#​11488)
  • chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.4.3 (#​11485)
  • chore(deps): bump github.com/alicebob/miniredis/v2 from 2.14.2 to 2.23.1 (#​11481)
  • chore(deps): bump github.com/evanphx/json-patch (#​11482)
  • chore: Update to v3 of the sprig library for ApplicationSets (#​11277) (#​11292)
  • chore: dependabot for npm (#​11474)
  • chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 (#​11469)
  • chore(deps): bump google.golang.org/grpc from 1.45.0 to 1.51.0 (#​11454)
  • chore(deps): bump github.com/gosimple/slug from 1.12.0 to 1.13.1 (#​11452)
  • chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.2 (#​11468)
  • chore(deps): bump github.com/itchyny/gojq from 0.12.3 to 0.12.9 (#​11471)
  • chore: update otel libraries to 1.11.1 (#​11461)
  • chore:remove redundant parentheses (#​11436)
  • chore(deps): bump gopkg.in/go-playground/webhooks.v5 (#​11369)
  • chore(deps): bump github.com/prometheus/client_golang (#​11366)
  • chore(deps): bump github.com/casbin/casbin/v2 from 2.39.1 to 2.57.1 (#​11420)
  • chore: push GHCR image to repo scope (#​11394)
  • chore: add Liatrio to the official users list (#​11377)
  • proposal: Deep Links (#​10278)
  • bug(ui): fix incomplete drop-down resource acctions (#​11384)
  • chore: fix username for ghcr.io (#​11373)
  • chore: Include error when dex config unmarshal fails (#​11349)
  • chore: add user to list (#​11336)
  • chore: add Wolffun Game to USERS (#​11342)
  • chore: grant packages.write for image workflow (#​11358)
  • chore: Enable dependabot for automatic dependency updates (#​8339)
  • chore: Add Divistant to Users list (#​11298)
  • chore(docs): fix build, prepare for google analytics v4 (#​10850) (#​11248)
  • chore: add Pigment to list of users (#​11127)
  • Action menu: sort items, show in resource details page (#​11008)
  • chore: Add Envoy to Users list (#​11169)
  • chore: beta.kubernetes.io/arch has been deprecated in 1.14 (#​11016)
  • chore: add Objective to USERS.md (#​11202)
  • chore: Add Amadeus to user list (#​11177)
  • chore: update owners file from membership meeting (#​11184)
  • chore: Add retry to cluster generation for testing in hack folder (#​11067)
  • chore: fix misleading error message in the e2e tests (#​11085)
  • chore: migrate import statements from es5 to es6 (#​11042)
  • test: simplify bcrypt test (#​11013)
  • chore: increase liveness timeout (#​10730)
  • chore: wrap errors with message (#​10592) (#​10986)
  • test: add unit test for server version (#​10720)
  • chore: update error message to provide context (#​10978)
  • chore: decreased indent level in setApplicationHealth (#​10980)
  • chore: updated error message to include context (#​10592) (#​10960)
  • chore: Enhance title & description for Certificates on settings page (#​7560) (#​10956)
  • chore: improve error logs (#​10944)
  • chore: wrap error objects to include context (#​10592) (#​10940)
  • chore: delete old snyk reports, 2nd attempt (#​10950)
  • chore: rewording of misleading message (#​10407)
  • chore: delete old snyk reports (#​10938)
  • chore: fix wrong annotation in function (#​10923)
  • chore: improve error logs (#​10933)
  • chore: improve log in argo-cd/applicationset/generators/generator_spec_processor.go (#​10906)
  • chore: fix git push command in Snyk update workflow (#​10920)
  • chore: open a PR instead of pushing for Snyk updates (#​10889)
  • chore: wrap error objects to include context (#​10904)
  • chore: wrap error objects to include context (#​10592) (#​10871)
  • chore: add security logs to webhook verification failures (#​10372)
  • chore: use appv1 prefix everywhere (#​10621)
  • chore: wrap error objects to include context (#​10592) (#​10859)
  • chore: Added artifact hub badge (#​10854)
  • chore: update robfig/cron to v3 (#​10588)

v2.5.15

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.15/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.15/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 13 contributions from 4 contributors with 0 features and 4 bug fixes.

Bug fixes (4)
  • fix codegen
  • fix(appset): git files generator in matrix generator produces no params (#​12881)
  • fix: log plugin commands in a better format (#​12260)
  • fix: support 'project' filter field for backwards-compatibility (#​12594)
Documentation (4)
Other (5)
  • chore(deps): bump actions/setup-go from 3.5.0 to 4.0.0 (#​12888)
  • chore(deps): bump actions/checkout from 3.3.0 to 3.4.0 (#​12889)
  • build: Enable CI checks on PRs to release branches (#​12887)
  • test: wait longer after repo server restarted to avoid errors on s390x (#​12839) (#​12885)
  • chore(deps): bump actions/cache from 3.2.6 to 3.3.1 (#​12845)

v2.5.14

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.14/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.14/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues

Broken matrix-nested git files generator in 2.5.14

Argo CD 2.5.14 introduced a bug in the matrix-nested git files generator. The bug only applies when the git files
generator is the second generator nested under a matrix. For example:

apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: guestbook
spec:
  generators:
  - matrix:
      generators:
        - clusters: {}
        - git:
            repoURL: https://git.example.com/org/repo.git
            revision: HEAD
            files:
              - path: "defaults/*.yaml"
  template:

### ...

The nested git files generator will produce no parameters, causing the matrix generator to also produce no parameters.
This will cause the ApplicationSet to produce no Applications. If the ApplicationSet controller is
configured with the ability to delete applications,
it will delete all Applications which were previously created by the ApplicationSet.

To avoid this issue, upgrade directly to >=2.5.15 or >= 2.6.6.

Changes

This release includes 5 contributions from 2 contributors with 0 features and 3 bug fixes.

Bug fixes (3)
Documentation (1)
Other (1)
  • chore: upgrade https lib to avoid CVE-2022-41723

v2.5.13

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.13/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.13/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 11 contributions from 4 contributors with 0 features and 4 bug fixes.

Bug fixes (4)
Documentation (3)
Other (4)
  • chore(deps): bump actions/cache from 3.2.5 to 3.2.6 (#​12567)
  • chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (#​12689)
  • chore: upgrade redis to 7.0.8 to avoid several CVEs (#​12627)
  • chore: upgrade haproxy to 2.6.9 to avoid multiple CVEs (#​12628) (#​12659)

v2.5.12

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.12/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.12/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 14 contributions from 12 contributors (6 of them new) with 0 features and 5 bug fixes.

A special thanks goes to the 6 new contributors:

  • atusy
  • Dmitriy Mann
  • Michael Chen
  • Vaibhav Bhembre
  • Wojtek Cichoń
  • Zadkiel Aharonian
Bug fixes (5)
Documentation (5)
  • docs: FAQ improvements (#​12146)
  • docs: fix typo (#​12389)
  • docs: Updated link to Jenkins and added GitHub Actions link (#​12465)
  • docs: fix typo in health documentation (#​12497)
  • docs: Clarify cascade delete of resource and finalizer (#​11064)
Other (4)
  • chore: use registry.k8s.io instead of k8s.gcr.io (#​12362)
  • chore(deps): bump imjasonh/setup-crane from 0.2 to 0.3 (#​12504)
  • chore(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 (#​12308)
  • chore(deps): bump actions/cache from 3.2.4 to 3.2.5 (#​12433)

v2.5.11

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.11/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.11/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 6 contributions from 5 contributors with 0 features and 2 bug fixes.

Security (1)
  • CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j)
Bug fixes (2)
  • fix: don't dump SSG to server logs, change deprecation notice to v2.7 (#​12285)
  • fix: return nil if reading application set was successful (#​12261)
Documentation (2)
  • docs: Fix heading to not include a v for the second version (#​12218)
  • docs: add destination.name example (#​12242)
Other (1)
  • chore: add dist to path to use our kustomize version (#​12352)

v2.5.10

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.10/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.10/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 10 contributions from 9 contributors (3 of them new) with 0 features and 3 bug fixes.

A special thanks goes to the 3 new contributors:

  • Adam Jensen
  • James Brady
  • Nobuo Takizawa
Bug fixes (3)
Documentation (3)
  • docs: Fix copy that refers to a different CLI flag (#​12236)
  • docs: Clarify directory recursion (#​12037)
  • docs: Fix list formatting in "Resource Actions" docs page (#​12061)
Other (4)
  • chore: remove unnecessary whitespace
  • chore(deps): bump docker/setup-buildx-action from 2.2.1 to 2.4.0 (#​12227)
  • chore(deps): bump actions/cache from 3.2.3 to 3.2.4 (#​12228)
  • chore: Update dex's image tag that is forgotten to be updated (#​12234)

v2.5.9

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.9/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.9/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 4 contributions from 4 contributors (2 of them new) with 0 features and 3 bug fixes.

A special thanks goes to the 2 new contributors:

  • Eugen Friedland
  • Ian Delahorne
Bug fixes (3)
  • fix(health): Handling SparkApplication CRD health status if dynamic allocation is enabled (#​7557) (#​11522)
  • fix: add CLI client IDs to default OIDC allowed audiences (#​12170) (#​12179)
  • fix: Add namespace to sub-application link URLs (#​11946)
Other (1)
  • chore: Refactor terminal handler to use auth-middleware (#​12052)

v2.5.8

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.8/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.8/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues

If you use the bundled Dex instance for SSO, a bug in 2.5.8 will prevent CLI clients from successfully authenticating with the Argo CD API. A patch for the bug is being tested as of Friday, Jan 27, and a fix will be released shortly.

Changes

This release includes 5 contributions from 4 contributors (1 of them new) with 0 features and 1 bug fixes.

A special thanks goes to the 1 new contributors:

  • Mike Bryant
Security (2)
Bug fixes (1)
  • fix: Support resource actions for apps in different Namespace (#​12115)
Documentation (1)
  • docs: clarify value for disabling tools (#​11395)
Other (1)
  • chore: disable docker sbom and attestations (#​12059)

v2.5.7

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.7/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.7/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 6 contributions from 3 contributors with 0 features and 2 bug fixes.

Bug fixes (2)
  • fix: Fixed matrix requeueAfterSeconds for PR (#​10914) (#​10915)
  • fix: Argo CD doesn't detect the repo type when repository is scoped (#​11959)
Other (4)
  • chore(deps): bump actions/cache from 3.2.2 to 3.2.3 (#​11928)
  • chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 (#​11895)
  • chore(deps): bump actions/setup-node from 3.5.1 to 3.6.0 (#​11896)
  • chore(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 (#​11929)

v2.5.6

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.6/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.6/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 21 contributions from 11 contributors (4 of them new) with 0 features and 6 bug fixes.

A special thanks goes to the 4 new contributors:

  • Gaël Jourdan-Weil
  • Matt Clegg
  • Ryan Umstead
  • yanyx
Bug fixes (6)
  • fix(redis): explicit bind to redis and sentinel for IPv4 clusters (#​11388) (#​11862)
  • fix: upgrade qs to avoid CVE-2022-24999
  • fix: web terminal namespace handler (#​11891)
  • fix: web terminal outside argocd namespace (#​11166) (#​11400)
  • fix: ssa e2e tests failing after updating to kubectl 1.26 (#​11753)
  • fix: sign container images by digest (#​11151)
Documentation (7)
  • docs: note risks of secret-injection plugins (#​11617)
  • docs: clarify project destination possibilities (#​11706)
  • docs: correct SSO configuration URL in example configmap (#​11720)
  • docs: Update example dockerfile (#​11721)
  • docs: clarify that all labels must exist (#​11693)
  • docs: update cosign docs (#​11749)
  • docs: Document applications in any namespace (#​10678)
Other (8)
  • chore: upgrade redis to 7.0.7 to avoid CVE-2022-3996 (#​11925)
  • chore(deps): bump actions/cache from 3.2.0 to 3.2.2 (#​11839)
  • chore(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 (#​11894)
  • chore(deps): bump actions/cache from 3.0.11 to 3.2.0 (#​11809)
  • chore: fix lint error (#​11788)
  • chore: get image digest in seperate step (#​11778)
  • chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#​11697)
  • doc: correct kustomize demo path (#​11762)

v2.5.5

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.5/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.5/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 14 contributions from 9 contributors (1 of them new) with 0 features and 6 bug fixes.

A special thanks goes to the 1 new contributor:

  • schakrad
Bug fixes (6)
Documentation (3)
  • docs: Clarification of the create namespace feature (#​11723)
  • docs: kustomize has access to build environment (#​11643)
  • docs: add warning for user when using replace sync option (#​11566)
Other (5)
  • chore: upgrade helm to most recent version (v3.10.3) (#​11725)
  • chore: fix flaky e2e test for immutable fields (#​11685)
  • chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 (#​11679)
  • chore: fix flaky e2e test (#​11670)
  • chore: fix flaky e2e test (#​11509) (#​11654)

v2.5.4

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.4/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.4/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 20 contributions from 16 contributors (10 of them new) with 0 features and 6 bug fixes.

A special thanks goes to the 10 new contributors:

  • Antoine Pultier
  • Artur Rodrigues
  • Cedar
  • Dieter Bocklandt
  • Duncan
  • Gerald Spencer
  • Michael Merrill
  • Michael Vittrup Larsen
  • Nathanael Liechti
  • Philip Haberkern
Bug fixes
  • fix: sidebar css (#​11531)
  • fix: use repository GithubAppCreds proxy if set (#​11422)
  • fix(ui): fix sorting of parameters. Make the Remove override button clickable again (#​11316)
  • fix: add missing changes for bitbucket cloud SCM provider (#​10143) (#​11150)
  • fix: expose missing ReactDOM to enable extensions implementation (#​11495)
  • fix: sonarlint issue (#​11472)
Documentation
  • docs: Add skipCrds and ignoreMissingValueFiles to application.yaml example (#​11565)
  • docs: update how to access arrays in Go templates (#​11562)
  • docs: Added ARGOCD_ENV_ prefix to FOO (#​11545)
  • docs: Add CSI secret driver to the secret management options (#​10900)
  • docs: Improve Keycloak documentation for command line sign-in (#​8758)
  • docs: Update operator manual installation helm available url (#​11120)
  • docs: Update Pull Request generator documentation to include application lifecycle (#​11274)
  • docs: fix markdown formatting (#​11460)
Other
  • chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 in /ui (#​11533)
  • chore: add debug logs around CMP manifest generation (#​11185)
  • chore(deps): bump actions/setup-go from 3.3.1 to 3.4.0 (#​11535)
  • chore(deps): bump softprops/action-gh-release from 0.1.14 to 0.1.15 (#​11534)
  • chore: pin actions (#​11360)
  • chore: use set-output environment file (#​10999)

v2.5.3

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.3/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.3/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 21 contributions from 15 contributors (6 of them new) with 0 features and 11 bug fixes.

A special thanks goes to the 6 new contributors:

  • Edmund Rhudy
  • F1ko
  • Nicholas Morey
  • Nick Mohoric
  • Patrice Chalin
  • Shuai Zhang
Bug fixes
  • fix: hide app namespace on the ui (#​11111) (#​11247)
  • fix: ui banner covering sidebar (#​11101)
  • fix: Add support for /api/v1/applicationsets* via HTTP (#​11409)
  • fix: application stuck in infinite reconciliation loop if using wrong project (#​11246)
  • fix: remove 0.0.0.0/0 ipblock from network policies (#​11321) (#​11322)
  • fix: set HELM_CONFIG_HOME dir for oci registry authentication; fixes: #​11284 (#​11285)
  • fix: UI can now get clusters with slashes in name (#​9812) (#​9813)
  • fix: allow resolving repo root as jsonnet lib path (#​11119)
  • fix: retry token creation/deletion upon project conflict errors (#​11199)
  • fix: Retry IsConflict for settings update. Map kube API errors to retryable HTTP status codes (#​10817)
  • fix: use non distroless image for dex (#​11219)
Documentation
  • docs: improve build env variable list formatting (#​11429)
  • docs: fix references to cli tools moved under argocd admin (#​11181)
  • docs: Enable Google Analytics 4 for 2.5 (stable) (#​11323)
  • docs: add example for config management plugins exclusion (#​11187)
Other
  • chore(deps): bump actions/upload-artifact from 2 to 3 (#​11365)
  • chore(deps): bump actions/setup-node from 1 to 3 (#​11364)
  • chore(deps): bump actions/cache from 1 to 3 (#​11363)
  • chore(deps): bump codecov/codecov-action from 1 to 3 (#​11362)
  • chore(deps): bump actions/download-artifact from 2 to 3 (#​11361)
  • chore: use --password-stdin for docker login (#​11331)

v2.5.2

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.2/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.2/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 8 contributions from 5 contributors (2 of them new) with 0 features and 3 bug fixes.

A special thanks goes to the 2 new contributors:

  • balajisa
  • Chris Lewis
Bug fixes
  • fix: templating keys in ApplicationSet (#​11076) (#​11163)
  • fix: handle apiGroup updates in resource-tracking (#​11012)
  • fix: upgrade redis-ha chart to 4.22.3, redis regression (#​11176)
Documentation
  • docs: Add Contributor's Quickstart Page (#​11108)
  • docs: debugging CMPs (#​11142)
  • docs: add Dockerfile example for plugin (#​11130)
  • docs: document metadata access for go-templated cluster generator (#​10929)
  • docs(user-guide): Add doc for import argocd packages (#​11041) (#​11096)

v2.5.1

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.1/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.1/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes
Security fixes

This release includes openssl version 3.0.2-0ubuntu1.7, which patches high-severity vulnerabilities.

v2.5.0

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.0/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.0/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 301 contributions from 136 contributors (89 of them new) with 59 features and 62 bug fixes.

Features
  • feat(ui): notification subscriptions edit field #​10310 (#​10839)
  • feat: system level extensions (#​10758)
  • feat: equality-based and set-based filtering by label keys and values for list, sync, delete and wait App commands (#​10548)
  • feat: add health checks for storage.cnrm.cloud.google.com/StorageBucketAccessControl (#​10727)
  • feat: add the ability to filter apps based on clusters (#​10465)
  • feat: argocd app delete apps by label (#​10091) (#​10118)
  • feat: add health checks for iam.cnrm.cloud.google.com/IAMPolicy (#​10725)
  • feat: add Prometheus health check (#​10508)
  • feat: add health check for cloudscheduler.cnrm.cloud.google.com/CloudSchedulerJob (#​10606)
  • feat: add health check for cloudscheduler.cnrm.cloud.google.com/CloudFunctionsFunction (#​10607)
  • feat: health check for compute.cnrm.cloud.google.com/ComputeDisk (#​10608)
  • feat: health check for OnePasswordItem (#​10690)
  • feat: health check storage.cnrm.cloud.google.com/StorageDefaultObjectAccessControl (#​10726)
  • feat(ui): Collapsable sidebar with filters (#​10626)
  • feat: dark mode (#​4722) (#​9703)
  • feat: create cli commands for ApplicationSet (#​9584)
  • feat: add permitOnlyProjectScopedClusters flag (#​10237)
  • feat: add scrollbar to live manifest (#​10379)
  • feat: add notifications API (#​10279)
  • feat(applicationset): reuse repo-creds for an existing GitHub App (#​10092)
  • feat: Support Custom Application Actions in CLI #​7577 (#​10015)
  • feat: make https repo credentials editable in the UI (#​9108) (#​9782)
  • feat!(cli): add confirm for cluster remove (#​10319)
  • feat: server-side manifest generation for local diff (#​8145) (#​10019)
  • feat: support gzip compression for data stored in redis (#​10190)
  • feat: Make additional namespaces configurable via environment (#​10270)
  • feat: Applications in any namespace (#​9755)
  • feat: add support for default container annotation (#​8015) (#​9769)
  • feat: add projects filter to app sync command (#​8320) (#​10133)
  • feat: add Gitlab PR generator webhooks support (#​10235)
  • feat: refactor redis-ha NetworkPolicy to include egress rules (#​10226)
  • feat: restrict egress onredis (#​10227)
  • feat: Added health check for spot.io SpotDeployment (#​10152)
  • feat: Added Google Project health check (#​10230)
  • feat: Added Google PubSub Topic and Subscription health checks (#​10229)
  • feat: ApplicationSet Go template (#​10026)
  • feat: Introduces Server-Side Apply as sync option (#​9711)
  • feat: app wait with --degraded (#​10139)
  • feat: Expose the Argo CD ID through an ENV in the Dockerfile (#​10113) (#​10115)
  • feat: Support environment variables in Helm value file paths (#​10213)
  • feat: Add labelSelector style to filter all generators (#​9312)
  • feat: add deny destinations for projects (#​9464) (#​9652)
  • feat: argocd app manifests --local (#​5525) (#​10061)
  • feat: add ingress network policies for applicationset and notifications controller (#​10053)
  • feat: add HTTPS to dex server (#​9424) (#​9883)
  • feat: allow argocd cluster rotate-auth to accept cluster name (#​9838)
  • feat(applicationset): add short sha to PR generator (#​9668) (#​9669)
  • feat: implement consistent startup messages for all components (#​9800)
  • feat: allow interpolation of cluster generator values (#​9254)
  • feat: add initiatedBy info to App status field when performing a rollback (#​9713)
  • feat: Add Azure DevOps SCM Provider Generator; add branchNormalized to SCM Generator template fields. (#​9283)
  • feat: Added the ability to filter MRs by 'state' to Gitlab PR Generator (#​9540)
  • feat: support health check on FlinkDeployment (#​9300) (#​9300)
  • feat: Slugified the branch name in PR generators (#​9462)
  • feat: combine form repo settings page #​9167 (#​9374)
  • feat: Matrix generator where a generator can reference items of another one (#​9080)
  • feat: Expansion support and line relayout (#​8661)
  • feat: Network view should group pods into higher level workload (#​5468) (#​8996)
  • feat: Move app resources commands to dedicated command file (#​9306)
Bug fixes
  • fix: Update custom health check for kiali.io/Kiali (#​10995)
  • fix: Resource list in sync page msg style#​10887 (#​10970)
  • fix: upgrade Helm to avoid disk use issue (#​8773) (#​10937)
  • fix: Resource list loading slowly due to Sync Wave sorting (#​10932)
  • fix: add applicationsets to RBAC policy (#​10810) (#​10891)
  • fix: duplicate source namespace validation (#​10853)
  • fix: applicationset controller should respect logging flags (#​10513)
  • fix: show revision in badge when param is true (#​10545)
  • fix: Unbreak app refresh from panel list (#​10825)
  • fix: Add filter icon to help users find filters (#​10809)
  • fix: reduce noise in logs (#​10369) (#​10765)
  • fix: New sidebar icons are missing margin (#​10794)
  • fix: incorrect filters placement on resource list (#​10781)
  • fix: add theme to version panel in ui (#​10762)
  • fix: always prune on git fetch (#​10664)
  • fix: duplicate z-index (#​10760)
  • fix: ui add tooltips on repository url links and names (#​9868) (#​10108)
  • fix: add tooltip for long title in list view ui (#​9792)
  • fix: button consistency in logs panel #​9945 (#​10016)
  • fix: Provide better error message when application source is missing some settings (#​10694)
  • fix: Application details page crashes with JS error (#​10640)
  • fix: snyk report bugs (#​10544)
  • fix: add more info to creationtime format (#​10286) (#​10493)
  • fix: invalid error handling (#​10384) (#​10385)
  • fix: Remove quotes from delete dialog #​10008 (#​10471)
  • fix(ui): Remove application namespace field in app creation (#​10481)
  • fix(ui): Fix multi-app refresh and sync in the UI (#​10421)
  • fix: add space before prompt in CLI (#​10362)
  • fix: Add logic to handle for fileHandle.Close() (#​9963) (#​10361)
  • fix: Replace dangerous use of xargs (#​10331)
  • fix: Trim white space from string slice retrieved from environment (#​10275)
  • fix(applicationset): support webhook with matrix interpolation (#​9931) (#​10236)
  • fix: consistent example indentation in CLI (#​10075)
  • fix: set default value for users.session.duration (#​9962) (#​10185)
  • fix: Add logic to handle for file.Close() (#​9963) (#​10159)
  • fix: add logic to handle for f.Close() for util/gpg (#​9963) (#​10130)
  • fix: Add logic to handle for f.Close() for util/db (#​9963) (#​10127)
  • fix: Handle github ping webhook event (#​7555) (#​10082)
  • fix: add logic to handle for f.Close() for util/io/files/tar.go (#​9963)
  • fix: off positioned filter icon (#​10013)
  • fix: Add logic to handle for f.Close() in util/localconfig/ (#​9963)
  • fix: copy claims before modifying for logs (#​10044)
  • fix: api server should use ARGOCD_SERVER_LOG_LEVEL instead of ARGOCD_REPO_SERVER_LOGLEVEL (#​9970) (#​9975)
  • fix: don't log group claims unless log level is debug (#​9549) (#​9947)
  • fix: bad error message (#​9967)
  • fix: validateProject() function in app_project_types.go file has nil dereference bug (#​9917)
  • fix: 'unexpected reserved bits' breaking web terminal (#​9605) (#​9895)
  • fix: make test-tools-image work on apple silicon (#​9808)
  • fix(applicationset): provide nameNormalized template param for local cluster (#​9728)
  • fix: upgrade superagent from 7.1.3 to 7.1.6 (#​9748)
  • fix: pss restricted securityContext (#​9765)
  • fix: overrides should not appear in the manifest cache key (#​9601)
  • fix: ui add tooltips on cluster urls (#​9567)
  • fix: better error message for invalid repo URL (#​9513)
  • fix: Use the matchMode specified in the rbac configmap (#​9419)
  • fix: New line layout not applied to load balancer; podGroup fix (#​9452) (#​9523)
  • fix: added extra protection to syncing app with replace (#​9187)
  • fix: upgrade superagent to resolve potential CVE (#​9494)
  • fix: restore broken source-maps to simplify UI debugging (#​9491)
  • fix: Pass context to resource tree (#​5468) (#​9401)
  • fix spelling (#​9372)
  • fix: http headers contain colons in the field value (#​9375)
Documentation
  • docs: fix 'bellow' typos (#​11038)
  • docs: mention that OCI helm does not support version ranges (#​11026)
  • docs: release signature verification (#​10967)
  • docs: more versioned docs fixes (#​10342)
  • docs: fix examples for ArgoCD ApplicationSet Git Generator (#​10857)
  • docs: Add example about how to patch with SSA syncs (#​10829)
  • docs: Add OccMundial to list of users (#​10712)
  • docs: Fix TLS configure link on getting started (#​10734)
  • docs: Default value for server.rootpath is incorrect (#​10665)
  • docs: Add enigmo to list of users (#​10603)
  • docs: decision about logs RBAC enforcement in release notes (#​10563)
  • docs: Include Pandosearch in USERS.md (#​10596)
  • docs: Add Productboard to users (#​10528)
  • docs: Fix typo and rephrase sentence (#​10504)
  • docs: document sync interval setting (#​10520)
  • docs: Remove invalid link to hands-on labs (#​10466)
  • docs: Add CERN as a ArgoCD user (#​10470)
  • docs: add OpsVerse as an official user (USERS.md) (#​10436)
  • docs: add nethopper to users.md (#​10402)
  • docs: Add fully-local developer workflow and traps (#​10333)
  • docs: s/ArgoCD/Argo CD (#​10352)
  • docs: fix indentation of example AppProject in 'Sync Windows' documentation (#​10388)
  • docs: use table instead of list for Snyk scans (#​10141)
  • docs: Note Helm has been upgraded (#​10349)
  • docs: add wemaintain as official user (#​10348)
  • docs: remove version notes - rely on docs versioning (#​10338)
  • docs: fix first sentence in custom style docs (#​10322)
  • docs: grammar fix (#​10328)
  • docs: fixes the YAML codefence for Slack notification service (#​8776) (#​10311)
  • docs: document revision history limit field (#​10302)
  • docs: add freshop to USERS.md (#​10276)
  • docs: revert appset path.path and path.segments docs (#​10254)
  • docs: add gloat to USERS.md (#​10252)
  • docs: update changelog for 2.1.x through 2.4.x (#​10241) (#​10242)
  • docs: recommend offline bcrypt (#​10050) (#​10056)
  • docs: use install instead of curling directly to /usr/local/bin (#​9944)
  • docs: add Lian Chu Securities to Users (#​10080)
  • docs: add Techcombank to users (#​10085)
  • docs: add kurly to Argo CD Users (#​10069)
  • docs: fix typo - user->use (#​10078)
  • docs: improve docs/user-guide/kustomize.md (#​10025)
  • docs: add GLOBIS to users (#​9987)
  • docs: fix Ingress documentation for AWS ALBs (#​9926)
  • docs: Add application.resourceTrackingMethod to example CM (#​9892)
  • docs: fix outdated example in helm.md (#​8506)
  • docs correction on how to override azure devops URL. (#​9699)
  • docs: clarify microsoft.md OIDC setup (#​8329)
  • docs: Add server-side apply proposal (#​8812)
  • docs: fix PR generators list (#​9387)
  • docs: add Meican to users (#​9377)
  • docs: add Coralogix to users (#​9361)
  • docs: Reword SSO Client Secrets doc (#​8666)
  • docs: fix local apiserver host name (#​9313)
Other
  • chore: fix CI (#​11022)
  • chore: fix e2e (#​11005)
  • chore: upgrade actions/checkout to v3, i.e. Node.js 16 (#​10947)
  • chore: release signature of sbom (#​10969)
  • Bump version to 2.5.0-rc3
  • Bump version to 2.5.0-rc3
  • Bump version to 2.5.0-rc2
  • Bump version to 2.5.0-rc2
  • chore: update Server-Side Apply docs for patching of existing rresources (#​10822)
  • Bump version to 2.5.0-rc1
  • Bump version to 2.5.0-rc1
  • chore: remove unused import (#​10773)
  • chore: Add support for apple sillicon build machines (#​10777)
  • chore: update to gitops engine 98ccd3d (#​10787)
  • chore: Add Gridfuse to USERS.md (#​10750)
  • chore: fix incorrect cluster delete description (#​10631)
  • chore: Add security logging for Dex errors (#​10455)
  • chore: Upgrade shipped version of Redis to 7.0.5 to fix CVE-2022-35951 (#​10702)
  • chore: Added Hetki to USERS.md (#​10586)
  • chore: add Adfinis to USERS.md (#​10741)
  • test: read appset (#​10743)
  • chore: typo for SyncStatusCodeOutOfSync comment (#​10748)
  • chore: upgrade dex to v2.32.1-distroless (#​10746)
  • Add Splunk as ArgoCD user (#​10718)
  • tests: cmd unit test version (#​10689)
  • chore: upgrade k8s.io/kube-openapi to avoid CVE-2022-1996 (#​10691)
  • chore: update install-codegen-tools.sh and upgrade docs (#​10692)
  • chore: update Helm and Kustomize versions (#​10273) (#​10599)
  • test: Add logic to handle for fileHandle.Close() (#​10632)
  • Add Kandji to users list (#​10650)
  • Adding Elastic as an ArgoCD User (#​10649)
  • added ./ for broken url link (#​10623)
  • chore: update gitops-engine (3951079) (#​10616)
  • chore: remove incompatible miniredis dependency (#​10566)
  • chore: Remove bad symlink used for tests (#​10527)
  • chore: add security log issue template (#​10368)
  • Adding Magic Leap as argocd user (#​10509)
  • chore: update gitops-engine to c036d3f (#​10423)
  • chore: drop hardcoded processors from HA manifests (#​10458)
  • chore: remove duplicate word in comments (#​10479)
  • chore: Add security logging in util/app (#​10416)
  • chore: Add security logging in util/git|helm (#​10410)
  • Add a newline character to fix the render (#​10431)
  • chore: sort users.md (#​10387)
  • chore: infer managed resources health from redis instead of storing it in CRD (#​10191)
  • chore: deprecate argocd-cm plugins (#​8117) (#​10341)
  • chore: add security logging and cwe fields (#​10256)
  • chore: Ignore VERSION file for Snyk scan (#​10363)
  • chore: downgrade go version to v1.18 (#​10351)
  • chore: Don't run snyk report in clones (#​10323)
  • ci: Update K3s version matrix in e2e tests (#​10313)
  • chore: upgrade helm to most recent version (v3.9.3) (#​10296)
  • chore: upgrade redis-ha chart to 4.17.8, HAProxy v2.6.2 (#​10032) (#​10297)
  • chore: improve logs in util/argo/argo.go (#​10271)
  • chore: Bump version in master to 2.5.0 (#​10266)
  • chore(deps): bump terser from 5.12.1 to 5.14.2 in /ui (#​10064)
  • chore: improve argocd app delete (#​10160)
  • proposal: Applications outside argocd namespace (#​6409)
  • chore: cleanup remnants of snyk scan removal (#​10225)
  • chore: no non-container scans in workflow (scan limit hit) (#​10222)
  • chore: Upgrade Golang to 1.19 (#​10176) (#​10186)
  • chore: fix some typos (#​10217)
  • chore: upgrade dex to distroless avoid CVE-2022-2097/CVE-2022-30065 (#​10203)
  • chore: fix codegen (#​10202)
  • chore: update redis-ha manifests (#​10032)
  • build: Enable optional skipping of building test-tools-image (#​10199)
  • chore: install snyk before generating report (#​10158)
  • chore: upgrade codeql action to v2 (#​10165)
  • chore: no colons in filenames (#​10183)
  • chore: fix sarif upload categories (#​10171)
  • chore: fix typo in image workflow (again) (#​10164)
  • chore: fix typo in image workflow (#​10161)
  • chore: fix codeql category error (#​10137)
  • chore: exclude docs from Sonar check completely (#​10142)
  • chore: exclude docs from Sonar check (#​10136)
  • chore: ignore CVE-2022-0624 - not exploitable in Argo CD (#​10128)
  • test: Add logic to handle for f.Close() for cmd/argocd/commands/admin (#​9963) (#​10074)
  • chore: add Snyk scans to docs (#​9856)
  • chore: argocd app create output states whether app exists (#​9984)
  • add securityContext to redis-ha containers (#​9930)
  • chore: spelling: retrieve (#​10051)
  • add logic to handle for f.Close() (#​10004)
  • chore: use manifest version for redis+dex in E2E tests (#​9955) (#​9959)
  • chore: upgrade k8s client to v0.24.2 (#​9932)
  • test: check for error messages from CI env (#​9953)
  • block out of bounds symlinks (#​9738) (#​9843)
  • chore: Replace deprecated ioutil in CLI code (#​9846)
  • Added health checks for Config Connector resources. (#​9878)
  • chore: Replace deprecated ioutil in util packages (#​9848)
  • chore: Replace deprecated ioutil in hacks (#​9851)
  • refactor: improve context handling in cmd/ (#​9860)
  • chore: Fix import of context package across codebase (#​9852)
  • chore: remove semicolon from end of statement (#​9837)
  • chore: adjust docs (#​9829)
  • Add scmp.com to argo-cd users (#​9823)
  • chore: add k8s v1.24.1 to test matrix (#​9714)
  • chore: upgrade kustomize to 4.5.5 (#​9650)
  • log: debug manifest cache (#​9602)
  • chore: revert adding k8s 1.24.1 to test matrix (#​9657)
  • chore: add k8s v1.24.1 release to test matrix (#​9636)
  • chore: fix typo in godoc string (#​9644)
  • chore: use Ubuntu 22.04 in CI (#​9587)
  • Grupo MasMovil Spain added to users list (#​9585)
  • chore: remove controller liveness probe (#​9557)
  • ci: remove cache from image build (#​9564)
  • Add elementor (#​9544)
  • chore: ignore irrelevant formidable vulnerability (#​9470)
  • add pismo on users (#​9532)
  • Fix radio button click experience problem (#​9520)
  • bump helm version to 3.9.0 (#​9486)
  • chore: Simplified GetRepoHTTPClient function (#​9396)
  • chore: add argocd binary to argocd-test-tool docker image (#​9459) (#​9467)
  • bug(gitpod): change Kubebuilder curl (#​9097) (#​9197)
  • chore: add GOPKGINYAMLV2-2840885 to snyk ignore list (#​9495)
  • Add GitLab PR generator for applicationset (#​9264)
  • chore: upgrade golangci-lint to v1.46.2 (#​9448)
  • some optimizations for cert.go (#​9404)
  • chore: add labels to notifications controller serviceaccount (#​9373)
  • add reev.com (#​9409)
  • chore: use filepath.Join to get sock path (#​9395)
  • chore: ignore irrelevant go-restful vulnerability (#​9347)
  • use filepath to combire dirs (#​9358)
  • Remove Kubernetes External Secret from docs (#​9251)
  • improved pr generator doc (#​9350)
  • chore: resource state tests (#​9307)
  • chore: Set GITHUB_TOKEN in the test container (#​9317)
  • chore: Pull in recent kubectl to test container (#​9316)

v2.4.27

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.27/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.27/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 10 contributions from 4 contributors with 0 features and 3 bug fixes.

Bug fixes (3)
  • fix codegen
  • fix: log plugin commands in a better format (#​12260)
  • fix: support 'project' filter field for backwards-compatibility (#​12594)
Documentation (2)
Other (5)
  • chore(deps): bump actions/setup-go from 3.5.0 to 4.0.0 (#​12888)
  • chore(deps): bump actions/checkout from 3.3.0 to 3.4.0 (#​12889)
  • build: Enable CI checks on PRs to release branches (#​12887)
  • test: wait longer after repo server restarted to avoid errors on s390x (#​12839) (#​12884)
  • chore(deps): bump actions/cache from 3.2.6 to 3.3.1 (#​12845)

v2.4.26

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.26/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.26/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 3 contributions from 3 contributors (1 of them new) with 0 features and 1 bug fixes.

A special thanks goes to the 1 new contributor:

  • Shaw Ho
Bug fixes (1)
  • fix: Fix the applicationset kind typo (#​12690)
Documentation (1)
Other (1)
  • chore: upgrade https lib to avoid CVE-2022-41723

v2.4.25

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.25/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.25/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 11 contributions from 5 contributors with 0 features and 3 bug fixes.

Bug fixes (3)
Documentation (3)
Other (5)
  • chore: fix whitespace for codegen
  • chore(deps): bump actions/cache from 3.2.5 to 3.2.6 (#​12567)
  • chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (#​12689)
  • chore: upgrade redis to 7.0.8 to avoid several CVEs (#​12627)
  • chore: upgrade haproxy to 2.0.31 to avoid multiple CVEs (#​12629)

v2.4.24

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.24/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.24/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 13 contributions from 11 contributors (6 of them new) with 0 features and 4 bug fixes.

A special thanks goes to the 6 new contributors:

  • atusy
  • Dmitriy Mann
  • Michael Chen
  • schakrad
  • Wojtek Cichoń
  • Zadkiel Aharonian
Bug fixes (4)
Documentation (5)
  • docs: FAQ improvements (#​12146)
  • docs: fix typo (#​12389)
  • docs: Updated link to Jenkins and added GitHub Actions link (#​12465)
  • docs: fix typo in health documentation (#​12497)
  • docs: Clarify cascade delete of resource and finalizer (#​11064)
Other (4)
  • chore: use registry.k8s.io instead of k8s.gcr.io (#​12362)
  • chore(deps): bump imjasonh/setup-crane from 0.2 to 0.3 (#​12504)
  • chore(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 (#​12308)
  • chore(deps): bump actions/cache from 3.2.4 to 3.2.5 (#​12433)

v2.4.23

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.23/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.23/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 4 contributions from 3 contributors with 0 features and 0 bug fixes.

Security (1)
  • CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j)
Documentation (2)
  • docs: Fix heading to not include a v for the second version (#​12218)
  • docs: add destination.name example (#​12242)
Other (1)
  • chore: add dist to path to use our kustomize version (#​12352)

v2.4.22

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.22/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.22/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 8 contributions from 7 contributors (3 of them new) with 0 features and 2 bug fixes.

A special thanks goes to the 3 new contributors:

  • Adam Jensen
  • James Brady
  • Nobuo Takizawa
Bug fixes (2)
Documentation (3)
  • docs: Fix copy that refers to a different CLI flag (#​12236)
  • docs: Clarify directory recursion (#​12037)
  • docs: Fix list formatting in "Resource Actions" docs page (#​12061)
Other (3)
  • chore(deps): bump docker/setup-buildx-action from 2.2.1 to 2.4.0 (#​12227)
  • chore(deps): bump actions/cache from 3.2.3 to 3.2.4 (#​12228)
  • chore: Update dex's image tag that is forgotten to be updated (#​12234)

v2.4.21

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.21/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.21/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 3 contributions from 3 contributors (1 of them new) with 0 features and 2 bug fixes.

A special thanks goes to the 1 new contributors:

  • Eugen Friedland
Bug fixes (2)
  • fix(health): Handling SparkApplication CRD health status if dynamic allocation is enabled (#​7557) (#​11522)
  • fix: add CLI client IDs to default OIDC allowed audiences (#​12170) (#​12179)
Other (1)
  • chore: Refactor terminal handler to use auth-middleware (#​12052)

v2.4.20

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.20/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.20/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues

If you use the bundled Dex instance for SSO, a bug in 2.4.20 will prevent CLI clients from successfully authenticating with the Argo CD API. A patch for the bug is being tested as of Friday, Jan 27, and a fix will be released shortly.

Changes

This release includes 2 contributions from 2 contributors with 0 features and 0 bug fixes.

Security (1)
Other (1)
  • chore: disable docker sbom and attestations (#​12059)

v2.4.19

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.19/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.19/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 28 contributions from 12 contributors (4 of them new) with 0 features and 5 bug fixes.

A special thanks goes to the 4 new contributors:

  • Aymen Ben Tanfous
  • Gaël Jourdan-Weil
  • Matt Clegg
  • yanyx
Bug fixes (5)
  • fix: Fixed matrix requeueAfterSeconds for PR (#​10914) (#​10915)
  • fix: upgrade qs to avoid CVE-2022-24999
  • fix: upgrade superagent to resolve potential CVE (#​9494)
  • fix: ssa e2e tests failing after updating to kubectl 1.26 (#​11753)
  • fix: sign container images by digest (#​11151)
Documentation (5)
  • docs: note risks of secret-injection plugins (#​11617)
  • docs: clarify project destination possibilities (#​11706)
  • docs: correct SSO configuration URL in example configmap (#​11720)
  • docs: Update example dockerfile (#​11721)
  • docs: clarify that all labels must exist (#​11693)
Other (18)
  • chore: upgrade github.com/prometheus/client_golang to v1.11.1 to avoid CVE-2022-21698 (#​12015)
  • chore: fix bad merge
  • chore(deps): bump actions/cache from 3.2.2 to 3.2.3 (#​11928)
  • chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 (#​11895)
  • chore: fix codegen
  • chore: fix codegen
  • chore(deps): bump actions/setup-node from 3.5.1 to 3.6.0 (#​11896)
  • chore(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 (#​11929)
  • Revert "fix: ssa e2e tests failing after updating to kubectl 1.26 (#​11753)"
  • chore: upgrade redis to 7.0.7 to avoid CVE-2022-3996 (#​11925)
  • chore: Upgrade shipped version of Redis to 7.0.5 to fix CVE-2022-35951 (#​10702)
  • chore(deps): bump actions/cache from 3.2.0 to 3.2.2 (#​11839)
  • chore(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 (#​11894)
  • chore(deps): bump actions/cache from 3.0.11 to 3.2.0 (#​11809)
  • chore: fix lint error (#​11788)
  • chore: get image digest in seperate step (#​11778)
  • chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#​11697)
  • doc: correct kustomize demo path (#​11762)

v2.4.18

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.18/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.18/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 29 contributions from 12 contributors (6 of them new) with 0 features and 10 bug fixes.

A special thanks goes to the 6 new contributors:

  • Edmund Rhudy
  • Justin Marquis
  • Michael Merrill
  • Michael Vittrup Larsen
  • Nicholas Morey
  • Shuai Zhang
Bug fixes (10)
  • fix: pin kubectl version (#​11726)
  • fix(helm): login OCI Helm dependencies correctly (#​8563) (#​11327)
  • fix(helm): helm v3 doesn't have these flags (#​11100) (#​11540)
  • fix: add missing changes for bitbucket cloud SCM provider (#​10143) (#​11150)
  • fix: expose missing ReactDOM to enable extensions implementation (#​11495)
  • fix: application stuck in infinite reconciliation loop if using wrong project (#​11246)
  • fix: set HELM_CONFIG_HOME dir for oci registry authentication; fixes: #​11284 (#​11285)
  • fix: UI can now get clusters with slashes in name (#​9812) (#​9813)
  • fix: allow resolving repo root as jsonnet lib path (#​11119)
  • fix: use non distroless image for dex (#​11219)
Documentation (4)
  • docs: Clarification of the create namespace feature (#​11723)
  • docs: kustomize has access to build environment (#​11643)
  • docs: add warning for user when using replace sync option (#​11566)
  • docs: Add skipCrds and ignoreMissingValueFiles to application.yaml example (#​11565)
Other (15)
  • chore: fix flaky e2e test for immutable fields (#​11685)
  • chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 (#​11679)
  • chore: fix flaky e2e test (#​11670)
  • chore: fix flaky e2e test (#​11509) (#​11654)
  • chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 in /ui (#​11533)
  • Revert "fix: application stuck in infinite reconciliation loop if using wrong project (#​11246)"
  • chore(deps): bump actions/setup-go from 3.3.1 to 3.4.0 (#​11535)
  • chore(deps): bump softprops/action-gh-release from 0.1.14 to 0.1.15 (#​11534)
  • chore: pin actions (#​11360)
  • chore: use set-output environment file (#​10999)
  • chore(deps): bump actions/upload-artifact from 2 to 3 (#​11365)
  • chore(deps): bump actions/setup-node from 1 to 3 (#​11364)
  • chore(deps): bump codecov/codecov-action from 1 to 3 (#​11362)
  • chore(deps): bump actions/download-artifact from 2 to 3 (#​11361)
  • chore: use --password-stdin for docker login (#​11331)

v2.4.17

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.17/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.17/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 1 contributions from 1 contributors with 0 features and 1 bug fixes.

Bug fixes
  • fix: handle apiGroup updates in resource-tracking (#​11012)

v2.4.16

Compare Source

Quick Start
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.16/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.16/manifests/ha/install.yaml
Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 9 contributions from 6 contributors (4 of them new) with 0 features and 2 bug fixes.

A special thanks goes to the 4 new contributors:

  • Alex Eftimie
  • Allex
  • Chromo-residuum-opec
  • Jessie Teng
Security fixes

This release includes openssl version 3.0.2-0ubuntu1.7, which patches high-severity vulnerabilities.

Bug fixes
Documentation
  • docs: fix 'bellow' typos (#​11038)
  • docs: mention that OCI helm does not support version ranges (#​11026)
Other

v2.4.15

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.15/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.15/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 24 contributions from 15 contributors (10 of them new) with 9 bug fixes.

A special thanks goes to the 10 new contributors:

  • Aiman Fatima
  • Chris Davis
  • Eddie Knight
  • Lars Kellogg-Stedman
  • Matt Morrison
  • Mayursinh Sarvaiya
  • Nir Shtein
  • Richard Jennings
  • rumstead
  • Sakshi Jain
Bug fixes
  • fix: Display pointer on labels for resource names in sync panel (#​10959)
  • fix: Use os.PathSeparator instead of hard-coded string to resolve local file paths (#​10945) (#​10946)
  • fix(ui): sync option label doesn't check corresponding box (#​10863) (#​10876)
  • fix: clicking HEAD in bitbucket leads to a 404 page (#​10862)
  • fix: added css to change cursor to pointer on hover (#​10864) (#​10867)
  • fix: consider destination cluster name when validating destinations (#​10594)
  • fix: Add missing statuses to MinIO Tenant health check (#​10815)
  • fix: add applicationset to crds generated by gen-crd-spec (#​10833)
  • fix(ui): Don't jump back to tiles view on app deletion (#​8764) (#​10826)
Documentation
  • docs: appset PR generator docs fixes (#​10567)
  • docs: add link to 2.4-2.5 upgrade guide (#​10808)
  • docs: more docs for directory apps (#​10879)
  • docs: clarify how default RBAC policy works (#​10896)
  • docs: fix examples for ArgoCD ApplicationSet Git Generator (#​10857)
  • docs: remove unused plugin config fields (#​10304)
  • docs: fix advice about preferred version in high availability (#​10619)
  • docs: Correct grammar issues in docs on manifest path annotations (#​10776)
  • docs: Update link to resource customizations (#​10827) (#​10828)
Other
  • chore: add script to generate release notes (#​10806)
  • chore: sign checksums file for release binaries (#​10963)
  • chore: implement signed images (#​10925)
  • chore: upgrade dex to v2.35.3 to avoid CVE-2022-27665 (#​10939)
  • Revert "fix: add applicationset to crds generated by gen-crd-spec (#​10833)"
  • chore: Added recommended permissions to github actions workflows (#​10812)

v2.4.14

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.14/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.14/manifests/ha/install.yaml

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

Other

v2.4.13

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.13/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.13/manifests/ha/install.yaml
Security fixes

CVE-2022-39222 is a backchannel attack against the Dex OIDC provider. If you are impacted Argo CD, an attacker could use the process described in the vulnerability description to steal an Argo CD token from some Argo CD user. The attacker could then impersonate the targeted user and act with the victim's privileges.

Am I impacted?

This Dex vulnerability impacts Argo CD users who either 1) use the bundled Dex instance for OIDC or 2) use an external Dex instance running Dex <= 2.34.x.

If you do not use Dex, then you are not impacted.

Bundled Dex

To determine if you use the bundled Dex instance, run this command, replacing argocd with the namespace where your Argo CD instance is installed:

kubectl get cm -n argocd argocd-cm -ojson | jq '.data["dex.config"] != null'

If that command prints true, then you use the bundled Dex instance, and you should upgrade.

External Dex

To determine if you use an external Dex instance, run this command:

kubectl get cm -n argocd argocd-cm -ojson | jq '.data["oidc.config"]'

That will print your Argo CD instance's OIDC config. It might be obvious whether the OIDC provider is Dex (for example, the word dex might be in the URL). Or you might have to contact whoever manages the configured OIDC provider to ask.

You will also have to check with whoever manages the Dex instance to determine if it is still running a vulnerable version (<= 2.34.x).

How can I resolve the vulnerability as a user of the bundled Dex instance?

Upgrading Dex is the only way to resolve the vulnerability.

If you're using the manifests from the argo-cd repository to install Argo CD, the easiest way to resolve the vulnerability is to use the latest release's manifests, which point to the Dex 2.35.0 image. If you do not want to upgrade the full manifest, then you can manually change the Dex image tags in your deployed manifests to use a >= 2.35.0 tag.

If you're using the argo-helm argo-cd chart, you can either upgrade to 5.5.8 which points to the new Dex version, or you can set the dex.image.tag parameter to a >= 2.35.0 tag.

To confirm that you are using a patched version of Dex, use this command (replacing argocd with the namespace where your Argo CD instance is deployed):

kubectl get deployment -n argocd argocd-dex-server -ojson | jq '.spec.template.spec.containers[0].image'

The image tag should point to a Dex version >= 2.35.0.

Bug fixes
  • fix: fix subscription health check (#​10450)
  • fix: Fix a nil pointer crash for repo server (#​10696)
Other changes
  • docs: add note about multiple sync options on annotation (#​10739)
  • docs: fix broken links in faq.md (#​10744)
  • chore: upgrade Dex to 2.35.0 (#​10775)
  • docs: syncWindows in project.yaml (#​10591)
  • docs: Update Generators-Pull-Request.md (#​10643) (#​10642)
  • docs: fix typo in GitHub section (#​10723)
  • chore: upgrade dex to v2.32.1-distroless (#​10746)

v2.4.12

Compare Source

Quick Start

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.12/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.12/manifests/ha/install.yaml
Bug fixes
  • fix: add skip-test-tls flag to optionally skip testing for tls (#​9679) (10564)
  • fix: update deploymentConfig's healthcheck to wait for replicationController to be Available (#​10462)
  • fix: hide terminal on the non-pod resource kind (#​9980) (#​10556)
  • fix: appset controller should preserve argocd refresh annotation (#​10510)
  • fix: invalid error handling (#​10384) (#​10385)
Other changes
  • docs: decision about logs RBAC enforcement in release notes for 2.4 (#​10564)
  • docs: update description of policy.csv example in rbac.md (#​10565)
  • docs: Fix Broken Link in Getting Started Docs (#​10585)
  • docs: remove duplicate word in user-management doc (#​10546)
  • fix: added github and gitlab response mock and replaced external calls (#​9305)
  • test: fix flaky gitea tests (#​10354)
  • fix: Added mock for gitea response in appset PR,SCM generator (#​9400)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [quay.io/argoproj/argocd](https://github.com/argoproj/argo-cd) | minor | `v2.4.11` -> `v2.6.6` | --- ### Release Notes <details> <summary>argoproj/argo-cd</summary> ### [`v2.6.6`](https://github.com/argoproj/argo-cd/releases/tag/v2.6.6) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.6.5...v2.6.6) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.6/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.6/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 12 contributions from 4 contributors with 0 features and 3 bug fixes. ##### Bug fixes (3) - fix(appset): git files generator in matrix generator produces no params ([#&#8203;12881](https://github.com/argoproj/argo-cd/issues/12881)) ([#&#8203;12882](https://github.com/argoproj/argo-cd/issues/12882)) - fix: log plugin commands in a better format ([#&#8203;12260](https://github.com/argoproj/argo-cd/issues/12260)) ([#&#8203;12875](https://github.com/argoproj/argo-cd/issues/12875)) - fix: support 'project' filter field for backwards-compatibility ([#&#8203;12594](https://github.com/argoproj/argo-cd/issues/12594)) ##### Documentation (4) - docs: fix version numbers in upgrade notes ([#&#8203;12896](https://github.com/argoproj/argo-cd/issues/12896)) - docs: cleanup HA operator manual ([#&#8203;10409](https://github.com/argoproj/argo-cd/issues/10409)) ([#&#8203;12867](https://github.com/argoproj/argo-cd/issues/12867)) - docs: fix list formatting in keycloak.md ([#&#8203;11061](https://github.com/argoproj/argo-cd/issues/11061)) ([#&#8203;12864](https://github.com/argoproj/argo-cd/issues/12864)) - docs: Post Selector moved to Generators section ([#&#8203;11109](https://github.com/argoproj/argo-cd/issues/11109)) ([#&#8203;12858](https://github.com/argoproj/argo-cd/issues/12858)) ##### Other (5) - chore(deps): bump actions/setup-go from 3.5.0 to 4.0.0 ([#&#8203;12888](https://github.com/argoproj/argo-cd/issues/12888)) - chore(deps): bump actions/checkout from 3.3.0 to 3.4.0 ([#&#8203;12889](https://github.com/argoproj/argo-cd/issues/12889)) - build: Enable CI checks on PRs to release branches ([#&#8203;12887](https://github.com/argoproj/argo-cd/issues/12887)) - test: wait longer after repo server restarted to avoid errors on s390x ([#&#8203;12839](https://github.com/argoproj/argo-cd/issues/12839)) ([#&#8203;12886](https://github.com/argoproj/argo-cd/issues/12886)) - chore(deps): bump actions/cache from 3.2.6 to 3.3.1 ([#&#8203;12845](https://github.com/argoproj/argo-cd/issues/12845)) ### [`v2.6.5`](https://github.com/argoproj/argo-cd/releases/tag/v2.6.5) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.6.4...v2.6.5) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.5/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.5/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Known Issues ##### Broken matrix-nested git files generator in 2.6.5 Argo CD 2.5.14 introduced a bug in the matrix-nested git files generator. The bug only applies when the git files generator is the second generator nested under a matrix. For example: ```yaml apiVersion: argoproj.io/v1alpha1 kind: ApplicationSet metadata: name: guestbook spec: generators: - matrix: generators: - clusters: {} - git: repoURL: https://git.example.com/org/repo.git revision: HEAD files: - path: "defaults/*.yaml" template: ##### ... ``` The nested git files generator will produce no parameters, causing the matrix generator to also produce no parameters. This will cause the ApplicationSet to produce no Applications. If the ApplicationSet controller is [configured with the ability to delete applications](https://argo-cd.readthedocs.io/en/latest/operator-manual/applicationset/Controlling-Resource-Modification/), it will delete all Applications which were previously created by the ApplicationSet. To avoid this issue, upgrade directly to >=2.5.15 or >= 2.6.6. ##### Changes This release includes 6 contributions from 2 contributors with 0 features and 3 bug fixes. ##### Bug fixes (3) - fix: ignore gitlab projects w/o repository ([#&#8203;12819](https://github.com/argoproj/argo-cd/issues/12819)) ([#&#8203;12820](https://github.com/argoproj/argo-cd/issues/12820)) ([#&#8203;12827](https://github.com/argoproj/argo-cd/issues/12827)) - fix: use field-wise templating for child matrix generators ([#&#8203;11661](https://github.com/argoproj/argo-cd/issues/11661)) ([#&#8203;12287](https://github.com/argoproj/argo-cd/issues/12287)) ([#&#8203;12771](https://github.com/argoproj/argo-cd/issues/12771)) - fix: Fix the applicationset kind typo ([#&#8203;12690](https://github.com/argoproj/argo-cd/issues/12690)) ([#&#8203;12767](https://github.com/argoproj/argo-cd/issues/12767)) ##### Documentation (2) - docs: Provide example RBAC for API server in apps-in-any-namespace ([#&#8203;12341](https://github.com/argoproj/argo-cd/issues/12341)) ([#&#8203;12824](https://github.com/argoproj/argo-cd/issues/12824)) - docs: Fix Jenkins guide link in understand_the_basics.md ([#&#8203;12814](https://github.com/argoproj/argo-cd/issues/12814)) ([#&#8203;12818](https://github.com/argoproj/argo-cd/issues/12818)) ##### Other (1) - chore: upgrade https lib to avoid CVE-2022-41723 ### [`v2.6.4`](https://github.com/argoproj/argo-cd/releases/tag/v2.6.4) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.6.3...v2.6.4) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.4/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.4/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 15 contributions from 3 contributors with 0 features and 5 bug fixes. ##### Bug fixes (5) - fix: typo in doc link ([#&#8203;12744](https://github.com/argoproj/argo-cd/issues/12744)) ([#&#8203;12760](https://github.com/argoproj/argo-cd/issues/12760)) - fix: Validate chat button url only when chatUrl is set ([#&#8203;12655](https://github.com/argoproj/argo-cd/issues/12655)) ([#&#8203;12749](https://github.com/argoproj/argo-cd/issues/12749)) ([#&#8203;12757](https://github.com/argoproj/argo-cd/issues/12757)) - fix: suppress Kubernetes API deprecation warnings from application controller ([#&#8203;12067](https://github.com/argoproj/argo-cd/issues/12067)) ([#&#8203;12742](https://github.com/argoproj/argo-cd/issues/12742)) - fix: Use CredsStore for GoogleCloudCreds ([#&#8203;12391](https://github.com/argoproj/argo-cd/issues/12391)) ([#&#8203;12741](https://github.com/argoproj/argo-cd/issues/12741)) - fix: ensure certificate gets updated on reload ([#&#8203;12076](https://github.com/argoproj/argo-cd/issues/12076)) ([#&#8203;12696](https://github.com/argoproj/argo-cd/issues/12696)) ##### Documentation (5) - docs: add namespace to initial-password command ([#&#8203;12718](https://github.com/argoproj/argo-cd/issues/12718)) ([#&#8203;12737](https://github.com/argoproj/argo-cd/issues/12737)) - docs: Update kustomization example ([#&#8203;12555](https://github.com/argoproj/argo-cd/issues/12555)) ([#&#8203;12738](https://github.com/argoproj/argo-cd/issues/12738)) - docs: unset finalizer before deleting an app non-cascadingly ([#&#8203;10949](https://github.com/argoproj/argo-cd/issues/10949)) ([#&#8203;12733](https://github.com/argoproj/argo-cd/issues/12733)) - docs: 2.6 addendum for plugin.name ([#&#8203;12701](https://github.com/argoproj/argo-cd/issues/12701)) ([#&#8203;12704](https://github.com/argoproj/argo-cd/issues/12704)) - docs: link directly to HA manifests ([#&#8203;11970](https://github.com/argoproj/argo-cd/issues/11970)) ([#&#8203;12682](https://github.com/argoproj/argo-cd/issues/12682)) ##### Other (5) - chore(deps): bump actions/cache from 3.2.5 to 3.2.6 ([#&#8203;12567](https://github.com/argoproj/argo-cd/issues/12567)) - chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 ([#&#8203;12689](https://github.com/argoproj/argo-cd/issues/12689)) - chore: Add unit tests for the shared health resource feature and fix docs ([#&#8203;12715](https://github.com/argoproj/argo-cd/issues/12715)) ([#&#8203;12720](https://github.com/argoproj/argo-cd/issues/12720)) ([#&#8203;12731](https://github.com/argoproj/argo-cd/issues/12731)) - chore: upgrade redis to 7.0.8 to avoid several CVEs ([#&#8203;12627](https://github.com/argoproj/argo-cd/issues/12627)) - chore: upgrade haproxy to 2.6.9 to avoid multiple CVEs ([#&#8203;12628](https://github.com/argoproj/argo-cd/issues/12628)) ([#&#8203;12658](https://github.com/argoproj/argo-cd/issues/12658)) ### [`v2.6.3`](https://github.com/argoproj/argo-cd/releases/tag/v2.6.3) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.6.2...v2.6.3) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.3/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.3/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 19 contributions from 16 contributors (7 of them new) with 0 features and 7 bug fixes. A special thanks goes to the 7 new contributors: - atusy - Dmitriy Mann - Michael Chen - Steve Ramage - Vaibhav Bhembre - Wojtek Cichoń - Zadkiel Aharonian ##### Bug fixes (7) - fix: traverse generator tree when getting requeue time ([#&#8203;12407](https://github.com/argoproj/argo-cd/issues/12407)) ([#&#8203;12612](https://github.com/argoproj/argo-cd/issues/12612)) - fix: evaluate all possible refresh reasons for multi-source apps ([#&#8203;12379](https://github.com/argoproj/argo-cd/issues/12379)) ([#&#8203;12609](https://github.com/argoproj/argo-cd/issues/12609)) - fix: valid username in webhook URL matching regex ([#&#8203;9055](https://github.com/argoproj/argo-cd/issues/9055)) ([#&#8203;12203](https://github.com/argoproj/argo-cd/issues/12203)) - fix: setting spec.SyncPolicy crashes 'argocd appset get' output ([#&#8203;12424](https://github.com/argoproj/argo-cd/issues/12424)) ([#&#8203;12425](https://github.com/argoproj/argo-cd/issues/12425)) - fix(security): add url validation for help chat ([#&#8203;9956](https://github.com/argoproj/argo-cd/issues/9956)) ([#&#8203;10417](https://github.com/argoproj/argo-cd/issues/10417)) - fix: show full event message in pod event view ([#&#8203;12104](https://github.com/argoproj/argo-cd/issues/12104)) ([#&#8203;12267](https://github.com/argoproj/argo-cd/issues/12267)) - fix: when resource does not exist node menu and resource details shou… ([#&#8203;12360](https://github.com/argoproj/argo-cd/issues/12360)) ##### Documentation (8) - docs: add 2.5->2.6 upgrade notes to table of contents ([#&#8203;12319](https://github.com/argoproj/argo-cd/issues/12319)) - docs: add multi source app ref in helm section ([#&#8203;12499](https://github.com/argoproj/argo-cd/issues/12499)) - docs: FAQ improvements ([#&#8203;12146](https://github.com/argoproj/argo-cd/issues/12146)) - docs: fix a few typos and grammar mistakes ([#&#8203;12280](https://github.com/argoproj/argo-cd/issues/12280)) - docs: fix typo ([#&#8203;12389](https://github.com/argoproj/argo-cd/issues/12389)) - docs: Updated link to Jenkins and added GitHub Actions link ([#&#8203;12465](https://github.com/argoproj/argo-cd/issues/12465)) - docs: fix typo in health documentation ([#&#8203;12497](https://github.com/argoproj/argo-cd/issues/12497)) - docs: Clarify cascade delete of resource and finalizer ([#&#8203;11064](https://github.com/argoproj/argo-cd/issues/11064)) ##### Other (4) - chore: use registry.k8s.io instead of k8s.gcr.io ([#&#8203;12362](https://github.com/argoproj/argo-cd/issues/12362)) - chore(deps): bump imjasonh/setup-crane from 0.2 to 0.3 ([#&#8203;12504](https://github.com/argoproj/argo-cd/issues/12504)) - chore(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 ([#&#8203;12308](https://github.com/argoproj/argo-cd/issues/12308)) - chore(deps): bump actions/cache from 3.2.4 to 3.2.5 ([#&#8203;12433](https://github.com/argoproj/argo-cd/issues/12433)) ### [`v2.6.2`](https://github.com/argoproj/argo-cd/releases/tag/v2.6.2) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.6.1...v2.6.2) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.2/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.2/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 2 contributions from 1 contributors with 0 features and 0 bug fixes. ##### Security (1) - CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j) ##### Other (1) - chore: add dist to path to use our kustomize version ([#&#8203;12352](https://github.com/argoproj/argo-cd/issues/12352)) ### [`v2.6.1`](https://github.com/argoproj/argo-cd/releases/tag/v2.6.1) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.6.0...v2.6.1) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.1/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.1/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 1 contributions from 1 contributors with 0 features and 1 bug fixes. ##### Security (1) - MEDIUM: Argo CD leaks repository credentials in user-facing error messages and in logs ([GHSA-mv6w-j4xc-qpfw](https://github.com/argoproj/argo-cd/security/advisories/GHSA-mv6w-j4xc-qpfw)) ### [`v2.6.0`](https://github.com/argoproj/argo-cd/releases/tag/v2.6.0) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.15...v2.6.0) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.0/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.0/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 235 contributions from 94 contributors (54 of them new) with 39 features and 34 bug fixes. ##### Features (39) - feat: make discovery field optional in plugins ([#&#8203;12073](https://github.com/argoproj/argo-cd/issues/12073)) - feat: Allow force of basic auth for HTTP repositories ([#&#8203;11983](https://github.com/argoproj/argo-cd/issues/11983)) - feat(security): require the `aud` claim from OIDC providers by default ([#&#8203;12187](https://github.com/argoproj/argo-cd/issues/12187)) - feat: add health checks for keptn resources ([#&#8203;11716](https://github.com/argoproj/argo-cd/issues/11716)) - feat: Extend Cluster.cluster.x-k8s.io health check ([#&#8203;11705](https://github.com/argoproj/argo-cd/issues/11705)) - feat: support Knative Serving 1.5 Custom Health Checks ([#&#8203;9719](https://github.com/argoproj/argo-cd/issues/9719)) - feat: AppSet Progressive Rollouts with RollingSync ([#&#8203;9437](https://github.com/argoproj/argo-cd/issues/9437)) ([#&#8203;10048](https://github.com/argoproj/argo-cd/issues/10048)) - feat: Multiple sources for applications ([#&#8203;2789](https://github.com/argoproj/argo-cd/issues/2789)) ([#&#8203;10432](https://github.com/argoproj/argo-cd/issues/10432)) - feat: add google cloud source repo support ([#&#8203;7534](https://github.com/argoproj/argo-cd/issues/7534)) ([#&#8203;11618](https://github.com/argoproj/argo-cd/issues/11618)) - feat: ApplicationSet add `create-delete` policy [#&#8203;9101](https://github.com/argoproj/argo-cd/issues/9101) ([#&#8203;11107](https://github.com/argoproj/argo-cd/issues/11107)) - feat: Allow Matrix generator to have two Git child generators without conflict ([#&#8203;10522](https://github.com/argoproj/argo-cd/issues/10522)) ([#&#8203;10523](https://github.com/argoproj/argo-cd/issues/10523)) - feat: expose deep links in UI ([#&#8203;11680](https://github.com/argoproj/argo-cd/issues/11680)) - feat: show cmpv2 plugins in create app wizard ([#&#8203;11615](https://github.com/argoproj/argo-cd/issues/11615)) - feat: pull request labels exposed in Pull Request generator template ([#&#8203;10204](https://github.com/argoproj/argo-cd/issues/10204)) ([#&#8203;11397](https://github.com/argoproj/argo-cd/issues/11397)) - feat: add deny sources ([#&#8203;11639](https://github.com/argoproj/argo-cd/issues/11639)) ([#&#8203;11646](https://github.com/argoproj/argo-cd/issues/11646)) - feat: Add support for proxy extensions ([#&#8203;11307](https://github.com/argoproj/argo-cd/issues/11307)) - feat: added deep links backend changes ([#&#8203;11401](https://github.com/argoproj/argo-cd/issues/11401)) - feat: Allow proxy to be saved when creating repoCreds ([#&#8203;11351](https://github.com/argoproj/argo-cd/issues/11351)) ([#&#8203;11425](https://github.com/argoproj/argo-cd/issues/11425)) - feat: show app age in application list view ([#&#8203;11209](https://github.com/argoproj/argo-cd/issues/11209)) ([#&#8203;11502](https://github.com/argoproj/argo-cd/issues/11502)) - feat: add support for plugin name in CMPv2 ([#&#8203;11290](https://github.com/argoproj/argo-cd/issues/11290)) ([#&#8203;11341](https://github.com/argoproj/argo-cd/issues/11341)) - feat: parameterized config management plugins ([#&#8203;9135](https://github.com/argoproj/argo-cd/issues/9135)) ([#&#8203;9216](https://github.com/argoproj/argo-cd/issues/9216)) - feat: Add wildcard support in OCI Helm Repositories targetRevision ([#&#8203;6686](https://github.com/argoproj/argo-cd/issues/6686)) ([#&#8203;10641](https://github.com/argoproj/argo-cd/issues/10641)) - feat(ui): add a filter for auto sync ([#&#8203;11357](https://github.com/argoproj/argo-cd/issues/11357)) - feat: Implement karmada CRD health checks ([#&#8203;11192](https://github.com/argoproj/argo-cd/issues/11192)) - feature: allow a custom labels on any resource to surface in the UI (tree view node tags) ([#&#8203;11153](https://github.com/argoproj/argo-cd/issues/11153)) - feat: display auto sync status in application details view ([#&#8203;11200](https://github.com/argoproj/argo-cd/issues/11200)) - feat: Shared custom health check for multiple resources ([#&#8203;4212](https://github.com/argoproj/argo-cd/issues/4212)) ([#&#8203;10885](https://github.com/argoproj/argo-cd/issues/10885)) - feat: Add new admin command to print Argo CD initial password (11117) ([#&#8203;11155](https://github.com/argoproj/argo-cd/issues/11155)) - feat: enable metadata to be set on namespaces ([#&#8203;10672](https://github.com/argoproj/argo-cd/issues/10672)) - feat: add labels and annotations to cluster details page ([#&#8203;9707](https://github.com/argoproj/argo-cd/issues/9707)) - feat: sort resource list by created_at, add message to AnalysisRun and replicas to ReplicaSet ([#&#8203;10613](https://github.com/argoproj/argo-cd/issues/10613)) - feat: UI Add copy to clipboard shortcut ([#&#8203;10958](https://github.com/argoproj/argo-cd/issues/10958)) - feat: directory app include/exclude fields in UI ([#&#8203;10880](https://github.com/argoproj/argo-cd/issues/10880)) - feat: make applicationset controller configurable in argocd-cmd-params ([#&#8203;10961](https://github.com/argoproj/argo-cd/issues/10961)) - feat: add bcrypt support for argocd CLI ([#&#8203;10934](https://github.com/argoproj/argo-cd/issues/10934)) - feat: link path directly to the path in repo ([#&#8203;10568](https://github.com/argoproj/argo-cd/issues/10568)) ([#&#8203;10860](https://github.com/argoproj/argo-cd/issues/10860)) - feat: make ARGOCD_GIT_MODULES_ENABLED configurable in argocd-cmd-params ([#&#8203;10931](https://github.com/argoproj/argo-cd/issues/10931)) - feat: Implement MachineHealthCheck CRD health check ([#&#8203;10846](https://github.com/argoproj/argo-cd/issues/10846)) - feat: Implement SecretStore health check ([#&#8203;10847](https://github.com/argoproj/argo-cd/issues/10847)) ##### Bug fixes (34) - fix: remove argocd-cm plugin warnings ([#&#8203;11740](https://github.com/argoproj/argo-cd/issues/11740)) - fix: multi-source app refresh ([#&#8203;11772](https://github.com/argoproj/argo-cd/issues/11772)) ([#&#8203;12217](https://github.com/argoproj/argo-cd/issues/12217)) - fix: don't dump SSG to server logs, change deprecation notice to v2.7 ([#&#8203;12285](https://github.com/argoproj/argo-cd/issues/12285)) - fix: AppSet Progressive sync fixes, docs, and logging improvements ([#&#8203;11924](https://github.com/argoproj/argo-cd/issues/11924)) ([#&#8203;12103](https://github.com/argoproj/argo-cd/issues/12103)) - fix: disable edit button on App Details Summary and Parameters tabs multi-source apps ([#&#8203;12048](https://github.com/argoproj/argo-cd/issues/12048)) - fix: return nil if reading application set was successful ([#&#8203;12261](https://github.com/argoproj/argo-cd/issues/12261)) - fix: repo-server - prevent locked state after unclean git checkout ([#&#8203;7898](https://github.com/argoproj/argo-cd/issues/7898)) ([#&#8203;11805](https://github.com/argoproj/argo-cd/issues/11805)) - fix: Upgrade gopkg.in/yaml.v2 to v2.4.0 \[release-2.6] ([#&#8203;12245](https://github.com/argoproj/argo-cd/issues/12245)) - fix: disable More button for multiple sources ([#&#8203;11760](https://github.com/argoproj/argo-cd/issues/11760)) ([#&#8203;11971](https://github.com/argoproj/argo-cd/issues/11971)) - fix: create separate API to load configured plugins ([#&#8203;12164](https://github.com/argoproj/argo-cd/issues/12164)) - fix: values should always be visible, even when they are empty ([#&#8203;11676](https://github.com/argoproj/argo-cd/issues/11676)) ([#&#8203;11681](https://github.com/argoproj/argo-cd/issues/11681)) - fix: pathParamPrefix is optional ([#&#8203;11796](https://github.com/argoproj/argo-cd/issues/11796)) ([#&#8203;11943](https://github.com/argoproj/argo-cd/issues/11943)) - fix: parsed url is not exposed ([#&#8203;11816](https://github.com/argoproj/argo-cd/issues/11816)) ([#&#8203;11916](https://github.com/argoproj/argo-cd/issues/11916)) - fix: upgrade qs to avoid CVE-2022-24999 ([#&#8203;11743](https://github.com/argoproj/argo-cd/issues/11743)) - fix: Applications with suspended jobs now marked "Suspended" instead of "Progressing" ([#&#8203;11603](https://github.com/argoproj/argo-cd/issues/11603)) ([#&#8203;11626](https://github.com/argoproj/argo-cd/issues/11626)) - fix: disable rollback button for apps with multiple sources ([#&#8203;11785](https://github.com/argoproj/argo-cd/issues/11785)) - fix: set Path as empty if path is not specified for a source in multiple sources ([#&#8203;11756](https://github.com/argoproj/argo-cd/issues/11756)) ([#&#8203;11774](https://github.com/argoproj/argo-cd/issues/11774)) - fix: sources.ref allow hyphen and underscore ([#&#8203;11775](https://github.com/argoproj/argo-cd/issues/11775)) - fix: support for enabling progressive rollouts from `argocd-cmd-params-cm` ([#&#8203;11776](https://github.com/argoproj/argo-cd/issues/11776)) - fix: support relative links in OCI tags query response ([#&#8203;11708](https://github.com/argoproj/argo-cd/issues/11708)) - fix: rollback react to known working version ([#&#8203;11703](https://github.com/argoproj/argo-cd/issues/11703)) - fix: Unknown sync operation state on app list page ([#&#8203;11621](https://github.com/argoproj/argo-cd/issues/11621)) - fix: only add baseURL in github_app client for GHE client ([#&#8203;11622](https://github.com/argoproj/argo-cd/issues/11622)) - fix: set baseURL in github_app client ([#&#8203;11613](https://github.com/argoproj/argo-cd/issues/11613)) - fix: misc css fixes for mobile ([#&#8203;5705](https://github.com/argoproj/argo-cd/issues/5705)) ([#&#8203;11508](https://github.com/argoproj/argo-cd/issues/11508)) - fix: upgrade golang.org/x/net vuln ([#&#8203;11447](https://github.com/argoproj/argo-cd/issues/11447)) - fix: incorrect can-i documentation ([#&#8203;11463](https://github.com/argoproj/argo-cd/issues/11463)) - fix: application list api is very slow when fields query parameter is supplied ([#&#8203;11250](https://github.com/argoproj/argo-cd/issues/11250)) - fix: add check for trailing/leading whitespace in project role group names ([#&#8203;10919](https://github.com/argoproj/argo-cd/issues/10919)) ([#&#8203;10988](https://github.com/argoproj/argo-cd/issues/10988)) - fix(ui): show orphaned as gray. fixes: [#&#8203;11180](https://github.com/argoproj/argo-cd/issues/11180) ([#&#8203;11218](https://github.com/argoproj/argo-cd/issues/11218)) - fix: point gitops-engine to current master ([#&#8203;11230](https://github.com/argoproj/argo-cd/issues/11230)) - fix: do not mutate live when managed namespace enabled ([#&#8203;11197](https://github.com/argoproj/argo-cd/issues/11197)) - fix: defaulting to in-cluster is misleading for disconnected clusters ([#&#8203;10132](https://github.com/argoproj/argo-cd/issues/10132)) - fix: trim whitespace from auth token ([#&#8203;10539](https://github.com/argoproj/argo-cd/issues/10539)) ##### Documentation (32) - docs: update config management plugin docs ([#&#8203;11690](https://github.com/argoproj/argo-cd/issues/11690)) - docs: add 2.5->2.6 upgrade notes to list ([#&#8203;12283](https://github.com/argoproj/argo-cd/issues/12283)) - docs: sign up for 1.8 release ([#&#8203;12266](https://github.com/argoproj/argo-cd/issues/12266)) - docs: release cycle refresh ([#&#8203;11137](https://github.com/argoproj/argo-cd/issues/11137)) - docs: Fix heading to not include a v for the second version ([#&#8203;12218](https://github.com/argoproj/argo-cd/issues/12218)) - docs: add destination.name example ([#&#8203;12242](https://github.com/argoproj/argo-cd/issues/12242)) - docs: custom health check resource group wildcard ([#&#8203;4212](https://github.com/argoproj/argo-cd/issues/4212)) - docs: added deep links doc ([#&#8203;11888](https://github.com/argoproj/argo-cd/issues/11888)) - docs: Update bullet formatting on Progressive Rollouts.md ([#&#8203;11777](https://github.com/argoproj/argo-cd/issues/11777)) - docs: bump elasticsearch version to 8.5.1 ([#&#8203;11771](https://github.com/argoproj/argo-cd/issues/11771)) - docs: add appset progressive rollout strategy proposal ([#&#8203;9979](https://github.com/argoproj/argo-cd/issues/9979)) - docs: fix web terminal step list numbering ([#&#8203;11590](https://github.com/argoproj/argo-cd/issues/11590)) - docs: clarify finalizer effect and link to app-of-apps ([#&#8203;11272](https://github.com/argoproj/argo-cd/issues/11272)) - docs: update remote-debugging-docs ([#&#8203;11424](https://github.com/argoproj/argo-cd/issues/11424)) - docs: update contributor meeting times ([#&#8203;11294](https://github.com/argoproj/argo-cd/issues/11294)) - docs: Use new Google Analytics 4 ID ([#&#8203;11291](https://github.com/argoproj/argo-cd/issues/11291)) - docs: add info about sync interval ([#&#8203;11281](https://github.com/argoproj/argo-cd/issues/11281)) - docs: fix formatting ([#&#8203;11245](https://github.com/argoproj/argo-cd/issues/11245)) - docs(user-guide): update link to Helm hooks documentation ([#&#8203;11045](https://github.com/argoproj/argo-cd/issues/11045)) - docs: fix typo in declarative-setup.md ([#&#8203;11190](https://github.com/argoproj/argo-cd/issues/11190)) - docs: debugging CMPs ([#&#8203;11142](https://github.com/argoproj/argo-cd/issues/11142)) - docs: add ui banner options in docs ([#&#8203;10907](https://github.com/argoproj/argo-cd/issues/10907)) - docs: Add AirQo to users list ([#&#8203;11160](https://github.com/argoproj/argo-cd/issues/11160)) - docs: Add SI Analytics to ArgoCD Users list ([#&#8203;11110](https://github.com/argoproj/argo-cd/issues/11110)) - docs: message is no longer truncated ([#&#8203;10962](https://github.com/argoproj/argo-cd/issues/10962)) - docs: add reverse proxy proposal for enhanced UI extensions ([#&#8203;10435](https://github.com/argoproj/argo-cd/issues/10435)) - docs: fix link in auth0.md ([#&#8203;10531](https://github.com/argoproj/argo-cd/issues/10531)) - docs: update debugging remote argocd environment ([#&#8203;10811](https://github.com/argoproj/argo-cd/issues/10811)) - docs: Add Gepardec to users ([#&#8203;10840](https://github.com/argoproj/argo-cd/issues/10840)) - docs: add dtag to users ([#&#8203;10845](https://github.com/argoproj/argo-cd/issues/10845)) - docs: #argo-contributors instead of #argo-dev in FAQ - docs: add declarative syntax examples for helm ([#&#8203;10764](https://github.com/argoproj/argo-cd/issues/10764)) ##### Other (105) - chore: rename 'progressive rollouts' to 'progressive syncs' ([#&#8203;12265](https://github.com/argoproj/argo-cd/issues/12265)) - chore: upgrade cookiejar to avoid CVE-2022-25901 ([#&#8203;12030](https://github.com/argoproj/argo-cd/issues/12030)) - chore: upgrade net/http2 to avoid CVE-2022-41717 ([#&#8203;11616](https://github.com/argoproj/argo-cd/issues/11616)) - bug: fix url parsing for non git urls (oci://, no protocol etc) ([#&#8203;11819](https://github.com/argoproj/argo-cd/issues/11819)) - chore: change logging level to Debug ([#&#8203;11773](https://github.com/argoproj/argo-cd/issues/11773)) - chore: add kustomize project for testing param CMP locally ([#&#8203;11265](https://github.com/argoproj/argo-cd/issues/11265)) - chore: upgrade minimatch to avoid CVE-2022-3517 ([#&#8203;11745](https://github.com/argoproj/argo-cd/issues/11745)) - chore: upgrade git-url-parse to avoid CVE-2022-2900 ([#&#8203;11744](https://github.com/argoproj/argo-cd/issues/11744)) - chore: add Voyager Digital to USERS.md ([#&#8203;11735](https://github.com/argoproj/argo-cd/issues/11735)) - chore: Add Cloud Scale to USERS.md ([#&#8203;11731](https://github.com/argoproj/argo-cd/issues/11731)) - chore: Add Getyourguide to USERS.md ([#&#8203;11704](https://github.com/argoproj/argo-cd/issues/11704)) - chore: add Mercedes-Benz Tech Innovation to user list ([#&#8203;11682](https://github.com/argoproj/argo-cd/issues/11682)) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.54 to 0.9.55 ([#&#8203;11678](https://github.com/argoproj/argo-cd/issues/11678)) - chore(deps-dev): bump [@&#8203;types/cookie](https://github.com/types/cookie) from 0.3.3 to 0.5.1 in /ui ([#&#8203;11659](https://github.com/argoproj/argo-cd/issues/11659)) - chore: downgrade React to v17 ([#&#8203;11653](https://github.com/argoproj/argo-cd/issues/11653)) - chore(deps): bump github.com/casbin/casbin/v2 from 2.59.0 to 2.60.0 ([#&#8203;11656](https://github.com/argoproj/argo-cd/issues/11656)) - chore(deps): bump express from 4.17.1 to 4.18.2 in /ui ([#&#8203;11591](https://github.com/argoproj/argo-cd/issues/11591)) - chore(deps-dev): bump tslint-react from 3.6.0 to 5.0.0 in /ui ([#&#8203;11559](https://github.com/argoproj/argo-cd/issues/11559)) - chore(deps): bump react-paginate from 6.5.0 to 8.1.4 in /ui ([#&#8203;11558](https://github.com/argoproj/argo-cd/issues/11558)) - chore: Bump version in master to 2.6.0 ([#&#8203;11641](https://github.com/argoproj/argo-cd/issues/11641)) - includeKinds for APIVersions in cluster info cache ([#&#8203;11241](https://github.com/argoproj/argo-cd/issues/11241)) - chore(deps): bump github.com/aws/aws-sdk-go from 1.44.129 to 1.44.156 ([#&#8203;11629](https://github.com/argoproj/argo-cd/issues/11629)) - chore: add Trusting Social users list ([#&#8203;11584](https://github.com/argoproj/argo-cd/issues/11584)) - chore(deps): bump github.com/casbin/casbin/v2 from 2.57.1 to 2.59.0 ([#&#8203;11607](https://github.com/argoproj/argo-cd/issues/11607)) - chore(deps): bump github.com/go-redis/redis/v8 from 8.11.3 to 8.11.5 ([#&#8203;11606](https://github.com/argoproj/argo-cd/issues/11606)) - chore(deps): bump github.com/Masterminds/semver/v3 from 3.1.1 to 3.2.0 ([#&#8203;11605](https://github.com/argoproj/argo-cd/issues/11605)) - chore(deps): bump github.com/go-openapi/loads from 0.19.4 to 0.21.2 ([#&#8203;11569](https://github.com/argoproj/argo-cd/issues/11569)) - chore(deps): bump sigs.k8s.io/structured-merge-diff/v4 ([#&#8203;11580](https://github.com/argoproj/argo-cd/issues/11580)) - chore: add Vinted to users list ([#&#8203;11214](https://github.com/argoproj/argo-cd/issues/11214)) - chore(deps): bump github.com/go-openapi/runtime from 0.19.4 to 0.25.0 ([#&#8203;11568](https://github.com/argoproj/argo-cd/issues/11568)) - add otel interceptor ([#&#8203;11561](https://github.com/argoproj/argo-cd/issues/11561)) - chore(deps): bump github.com/imdario/mergo from 0.3.12 to 0.3.13 ([#&#8203;11555](https://github.com/argoproj/argo-cd/issues/11555)) - chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.40 to 0.9.54 ([#&#8203;11554](https://github.com/argoproj/argo-cd/issues/11554)) - chore(deps): bump github.com/valyala/fasttemplate from 1.2.1 to 1.2.2 ([#&#8203;11552](https://github.com/argoproj/argo-cd/issues/11552)) - chore: Update notifications-engine dependency ([#&#8203;11479](https://github.com/argoproj/argo-cd/issues/11479)) - \[Hack] Add concurrency to cluster creation in resource generator. ([#&#8203;11266](https://github.com/argoproj/argo-cd/issues/11266)) - chore(deps-dev): bump babel-jest from 24.9.0 to 26.6.3 in /ui ([#&#8203;11483](https://github.com/argoproj/argo-cd/issues/11483)) - chore(deps-dev): bump [@&#8203;babel/preset-react](https://github.com/babel/preset-react) from 7.7.0 to 7.18.6 in /ui ([#&#8203;11489](https://github.com/argoproj/argo-cd/issues/11489)) - chore(deps-dev): bump [@&#8203;types/prop-types](https://github.com/types/prop-types) from 15.7.1 to 15.7.5 in /ui ([#&#8203;11487](https://github.com/argoproj/argo-cd/issues/11487)) - chore(deps): bump github.com/google/go-jsonnet from 0.18.0 to 0.19.1 ([#&#8203;11484](https://github.com/argoproj/argo-cd/issues/11484)) - chore(deps): bump github.com/mattn/go-zglob from 0.0.3 to 0.0.4 ([#&#8203;11486](https://github.com/argoproj/argo-cd/issues/11486)) - chore: upgrade React version ([#&#8203;11467](https://github.com/argoproj/argo-cd/issues/11467)) - chore(deps-dev): bump [@&#8203;types/lodash-es](https://github.com/types/lodash-es) from 4.17.5 to 4.17.6 in /ui ([#&#8203;11488](https://github.com/argoproj/argo-cd/issues/11488)) - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.4.3 ([#&#8203;11485](https://github.com/argoproj/argo-cd/issues/11485)) - chore(deps): bump github.com/alicebob/miniredis/v2 from 2.14.2 to 2.23.1 ([#&#8203;11481](https://github.com/argoproj/argo-cd/issues/11481)) - chore(deps): bump github.com/evanphx/json-patch ([#&#8203;11482](https://github.com/argoproj/argo-cd/issues/11482)) - chore: Update to v3 of the sprig library for ApplicationSets ([#&#8203;11277](https://github.com/argoproj/argo-cd/issues/11277)) ([#&#8203;11292](https://github.com/argoproj/argo-cd/issues/11292)) - chore: dependabot for npm ([#&#8203;11474](https://github.com/argoproj/argo-cd/issues/11474)) - chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 ([#&#8203;11469](https://github.com/argoproj/argo-cd/issues/11469)) - chore(deps): bump google.golang.org/grpc from 1.45.0 to 1.51.0 ([#&#8203;11454](https://github.com/argoproj/argo-cd/issues/11454)) - chore(deps): bump github.com/gosimple/slug from 1.12.0 to 1.13.1 ([#&#8203;11452](https://github.com/argoproj/argo-cd/issues/11452)) - chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.4.2 ([#&#8203;11468](https://github.com/argoproj/argo-cd/issues/11468)) - chore(deps): bump github.com/itchyny/gojq from 0.12.3 to 0.12.9 ([#&#8203;11471](https://github.com/argoproj/argo-cd/issues/11471)) - chore: update otel libraries to 1.11.1 ([#&#8203;11461](https://github.com/argoproj/argo-cd/issues/11461)) - chore:remove redundant parentheses ([#&#8203;11436](https://github.com/argoproj/argo-cd/issues/11436)) - chore(deps): bump gopkg.in/go-playground/webhooks.v5 ([#&#8203;11369](https://github.com/argoproj/argo-cd/issues/11369)) - chore(deps): bump github.com/prometheus/client_golang ([#&#8203;11366](https://github.com/argoproj/argo-cd/issues/11366)) - chore(deps): bump github.com/casbin/casbin/v2 from 2.39.1 to 2.57.1 ([#&#8203;11420](https://github.com/argoproj/argo-cd/issues/11420)) - chore: push GHCR image to repo scope ([#&#8203;11394](https://github.com/argoproj/argo-cd/issues/11394)) - chore: add Liatrio to the official users list ([#&#8203;11377](https://github.com/argoproj/argo-cd/issues/11377)) - proposal: Deep Links ([#&#8203;10278](https://github.com/argoproj/argo-cd/issues/10278)) - bug(ui): fix incomplete drop-down resource acctions ([#&#8203;11384](https://github.com/argoproj/argo-cd/issues/11384)) - chore: fix username for ghcr.io ([#&#8203;11373](https://github.com/argoproj/argo-cd/issues/11373)) - chore: Include error when dex config unmarshal fails ([#&#8203;11349](https://github.com/argoproj/argo-cd/issues/11349)) - chore: add user to list ([#&#8203;11336](https://github.com/argoproj/argo-cd/issues/11336)) - chore: add Wolffun Game to USERS ([#&#8203;11342](https://github.com/argoproj/argo-cd/issues/11342)) - chore: grant packages.write for image workflow ([#&#8203;11358](https://github.com/argoproj/argo-cd/issues/11358)) - chore: Enable dependabot for automatic dependency updates ([#&#8203;8339](https://github.com/argoproj/argo-cd/issues/8339)) - chore: Add Divistant to Users list ([#&#8203;11298](https://github.com/argoproj/argo-cd/issues/11298)) - chore(docs): fix build, prepare for google analytics v4 ([#&#8203;10850](https://github.com/argoproj/argo-cd/issues/10850)) ([#&#8203;11248](https://github.com/argoproj/argo-cd/issues/11248)) - chore: add Pigment to list of users ([#&#8203;11127](https://github.com/argoproj/argo-cd/issues/11127)) - Action menu: sort items, show in resource details page ([#&#8203;11008](https://github.com/argoproj/argo-cd/issues/11008)) - chore: Add Envoy to Users list ([#&#8203;11169](https://github.com/argoproj/argo-cd/issues/11169)) - chore: beta.kubernetes.io/arch has been deprecated in 1.14 ([#&#8203;11016](https://github.com/argoproj/argo-cd/issues/11016)) - chore: add Objective to USERS.md ([#&#8203;11202](https://github.com/argoproj/argo-cd/issues/11202)) - chore: Add Amadeus to user list ([#&#8203;11177](https://github.com/argoproj/argo-cd/issues/11177)) - chore: update owners file from membership meeting ([#&#8203;11184](https://github.com/argoproj/argo-cd/issues/11184)) - chore: Add retry to cluster generation for testing in hack folder ([#&#8203;11067](https://github.com/argoproj/argo-cd/issues/11067)) - chore: fix misleading error message in the e2e tests ([#&#8203;11085](https://github.com/argoproj/argo-cd/issues/11085)) - chore: migrate import statements from es5 to es6 ([#&#8203;11042](https://github.com/argoproj/argo-cd/issues/11042)) - test: simplify bcrypt test ([#&#8203;11013](https://github.com/argoproj/argo-cd/issues/11013)) - chore: increase liveness timeout ([#&#8203;10730](https://github.com/argoproj/argo-cd/issues/10730)) - chore: wrap errors with message ([#&#8203;10592](https://github.com/argoproj/argo-cd/issues/10592)) ([#&#8203;10986](https://github.com/argoproj/argo-cd/issues/10986)) - test: add unit test for server version ([#&#8203;10720](https://github.com/argoproj/argo-cd/issues/10720)) - chore: update error message to provide context ([#&#8203;10978](https://github.com/argoproj/argo-cd/issues/10978)) - chore: decreased indent level in setApplicationHealth ([#&#8203;10980](https://github.com/argoproj/argo-cd/issues/10980)) - chore: updated error message to include context ([#&#8203;10592](https://github.com/argoproj/argo-cd/issues/10592)) ([#&#8203;10960](https://github.com/argoproj/argo-cd/issues/10960)) - chore: Enhance title & description for Certificates on settings page ([#&#8203;7560](https://github.com/argoproj/argo-cd/issues/7560)) ([#&#8203;10956](https://github.com/argoproj/argo-cd/issues/10956)) - chore: improve error logs ([#&#8203;10944](https://github.com/argoproj/argo-cd/issues/10944)) - chore: wrap error objects to include context ([#&#8203;10592](https://github.com/argoproj/argo-cd/issues/10592)) ([#&#8203;10940](https://github.com/argoproj/argo-cd/issues/10940)) - chore: delete old snyk reports, 2nd attempt ([#&#8203;10950](https://github.com/argoproj/argo-cd/issues/10950)) - chore: rewording of misleading message ([#&#8203;10407](https://github.com/argoproj/argo-cd/issues/10407)) - chore: delete old snyk reports ([#&#8203;10938](https://github.com/argoproj/argo-cd/issues/10938)) - chore: fix wrong annotation in function ([#&#8203;10923](https://github.com/argoproj/argo-cd/issues/10923)) - chore: improve error logs ([#&#8203;10933](https://github.com/argoproj/argo-cd/issues/10933)) - chore: improve log in argo-cd/applicationset/generators/generator_spec_processor.go ([#&#8203;10906](https://github.com/argoproj/argo-cd/issues/10906)) - chore: fix git push command in Snyk update workflow ([#&#8203;10920](https://github.com/argoproj/argo-cd/issues/10920)) - chore: open a PR instead of pushing for Snyk updates ([#&#8203;10889](https://github.com/argoproj/argo-cd/issues/10889)) - chore: wrap error objects to include context ([#&#8203;10904](https://github.com/argoproj/argo-cd/issues/10904)) - chore: wrap error objects to include context ([#&#8203;10592](https://github.com/argoproj/argo-cd/issues/10592)) ([#&#8203;10871](https://github.com/argoproj/argo-cd/issues/10871)) - chore: add security logs to webhook verification failures ([#&#8203;10372](https://github.com/argoproj/argo-cd/issues/10372)) - chore: use `appv1` prefix everywhere ([#&#8203;10621](https://github.com/argoproj/argo-cd/issues/10621)) - chore: wrap error objects to include context ([#&#8203;10592](https://github.com/argoproj/argo-cd/issues/10592)) ([#&#8203;10859](https://github.com/argoproj/argo-cd/issues/10859)) - chore: Added artifact hub badge ([#&#8203;10854](https://github.com/argoproj/argo-cd/issues/10854)) - chore: update robfig/cron to v3 ([#&#8203;10588](https://github.com/argoproj/argo-cd/issues/10588)) ### [`v2.5.15`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.15) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.14...v2.5.15) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.15/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.15/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 13 contributions from 4 contributors with 0 features and 4 bug fixes. ##### Bug fixes (4) - fix codegen - fix(appset): git files generator in matrix generator produces no params ([#&#8203;12881](https://github.com/argoproj/argo-cd/issues/12881)) - fix: log plugin commands in a better format ([#&#8203;12260](https://github.com/argoproj/argo-cd/issues/12260)) - fix: support 'project' filter field for backwards-compatibility ([#&#8203;12594](https://github.com/argoproj/argo-cd/issues/12594)) ##### Documentation (4) - docs: fix version numbers in upgrade notes ([#&#8203;12896](https://github.com/argoproj/argo-cd/issues/12896)) - docs: cleanup HA operator manual ([#&#8203;10409](https://github.com/argoproj/argo-cd/issues/10409)) ([#&#8203;12866](https://github.com/argoproj/argo-cd/issues/12866)) - docs: fix list formatting in keycloak.md ([#&#8203;11061](https://github.com/argoproj/argo-cd/issues/11061)) ([#&#8203;12863](https://github.com/argoproj/argo-cd/issues/12863)) - docs: Post Selector moved to Generators section ([#&#8203;11109](https://github.com/argoproj/argo-cd/issues/11109)) ([#&#8203;12857](https://github.com/argoproj/argo-cd/issues/12857)) ##### Other (5) - chore(deps): bump actions/setup-go from 3.5.0 to 4.0.0 ([#&#8203;12888](https://github.com/argoproj/argo-cd/issues/12888)) - chore(deps): bump actions/checkout from 3.3.0 to 3.4.0 ([#&#8203;12889](https://github.com/argoproj/argo-cd/issues/12889)) - build: Enable CI checks on PRs to release branches ([#&#8203;12887](https://github.com/argoproj/argo-cd/issues/12887)) - test: wait longer after repo server restarted to avoid errors on s390x ([#&#8203;12839](https://github.com/argoproj/argo-cd/issues/12839)) ([#&#8203;12885](https://github.com/argoproj/argo-cd/issues/12885)) - chore(deps): bump actions/cache from 3.2.6 to 3.3.1 ([#&#8203;12845](https://github.com/argoproj/argo-cd/issues/12845)) ### [`v2.5.14`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.14) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.13...v2.5.14) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.14/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.14/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Known Issues ##### Broken matrix-nested git files generator in 2.5.14 Argo CD 2.5.14 introduced a bug in the matrix-nested git files generator. The bug only applies when the git files generator is the second generator nested under a matrix. For example: ```yaml apiVersion: argoproj.io/v1alpha1 kind: ApplicationSet metadata: name: guestbook spec: generators: - matrix: generators: - clusters: {} - git: repoURL: https://git.example.com/org/repo.git revision: HEAD files: - path: "defaults/*.yaml" template: ### ... ``` The nested git files generator will produce no parameters, causing the matrix generator to also produce no parameters. This will cause the ApplicationSet to produce no Applications. If the ApplicationSet controller is [configured with the ability to delete applications](https://argo-cd.readthedocs.io/en/latest/operator-manual/applicationset/Controlling-Resource-Modification/), it will delete all Applications which were previously created by the ApplicationSet. To avoid this issue, upgrade directly to >=2.5.15 or >= 2.6.6. #### Changes This release includes 5 contributions from 2 contributors with 0 features and 3 bug fixes. ##### Bug fixes (3) - fix: ignore gitlab projects w/o repository ([#&#8203;12819](https://github.com/argoproj/argo-cd/issues/12819)) ([#&#8203;12820](https://github.com/argoproj/argo-cd/issues/12820)) ([#&#8203;12826](https://github.com/argoproj/argo-cd/issues/12826)) - fix: use field-wise templating for child matrix generators ([#&#8203;11661](https://github.com/argoproj/argo-cd/issues/11661)) ([#&#8203;12287](https://github.com/argoproj/argo-cd/issues/12287)) - fix: Fix the applicationset kind typo ([#&#8203;12690](https://github.com/argoproj/argo-cd/issues/12690)) ([#&#8203;12766](https://github.com/argoproj/argo-cd/issues/12766)) ##### Documentation (1) - docs: Fix Jenkins guide link in understand_the_basics.md ([#&#8203;12814](https://github.com/argoproj/argo-cd/issues/12814)) ([#&#8203;12817](https://github.com/argoproj/argo-cd/issues/12817)) ##### Other (1) - chore: upgrade https lib to avoid CVE-2022-41723 ### [`v2.5.13`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.13) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.12...v2.5.13) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.13/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.13/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 11 contributions from 4 contributors with 0 features and 4 bug fixes. ##### Bug fixes (4) - fix: typo in doc link ([#&#8203;12744](https://github.com/argoproj/argo-cd/issues/12744)) ([#&#8203;12761](https://github.com/argoproj/argo-cd/issues/12761)) - fix: Validate chat button url only when chatUrl is set ([#&#8203;12655](https://github.com/argoproj/argo-cd/issues/12655)) ([#&#8203;12749](https://github.com/argoproj/argo-cd/issues/12749)) ([#&#8203;12758](https://github.com/argoproj/argo-cd/issues/12758)) - fix: suppress Kubernetes API deprecation warnings from application controller ([#&#8203;12067](https://github.com/argoproj/argo-cd/issues/12067)) - fix: ensure certificate gets updated on reload ([#&#8203;12076](https://github.com/argoproj/argo-cd/issues/12076)) ([#&#8203;12695](https://github.com/argoproj/argo-cd/issues/12695)) ##### Documentation (3) - docs: Update kustomization example ([#&#8203;12555](https://github.com/argoproj/argo-cd/issues/12555)) ([#&#8203;12739](https://github.com/argoproj/argo-cd/issues/12739)) - docs: unset finalizer before deleting an app non-cascadingly ([#&#8203;10949](https://github.com/argoproj/argo-cd/issues/10949)) ([#&#8203;12734](https://github.com/argoproj/argo-cd/issues/12734)) - docs: link directly to HA manifests ([#&#8203;11970](https://github.com/argoproj/argo-cd/issues/11970)) ([#&#8203;12683](https://github.com/argoproj/argo-cd/issues/12683)) ##### Other (4) - chore(deps): bump actions/cache from 3.2.5 to 3.2.6 ([#&#8203;12567](https://github.com/argoproj/argo-cd/issues/12567)) - chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 ([#&#8203;12689](https://github.com/argoproj/argo-cd/issues/12689)) - chore: upgrade redis to 7.0.8 to avoid several CVEs ([#&#8203;12627](https://github.com/argoproj/argo-cd/issues/12627)) - chore: upgrade haproxy to 2.6.9 to avoid multiple CVEs ([#&#8203;12628](https://github.com/argoproj/argo-cd/issues/12628)) ([#&#8203;12659](https://github.com/argoproj/argo-cd/issues/12659)) ### [`v2.5.12`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.12) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.11...v2.5.12) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.12/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.12/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 14 contributions from 12 contributors (6 of them new) with 0 features and 5 bug fixes. A special thanks goes to the 6 new contributors: - atusy - Dmitriy Mann - Michael Chen - Vaibhav Bhembre - Wojtek Cichoń - Zadkiel Aharonian ##### Bug fixes (5) - fix: traverse generator tree when getting requeue time ([#&#8203;12407](https://github.com/argoproj/argo-cd/issues/12407)) ([#&#8203;12409](https://github.com/argoproj/argo-cd/issues/12409)) ([#&#8203;12611](https://github.com/argoproj/argo-cd/issues/12611)) - fix: valid username in webhook URL matching regex ([#&#8203;9055](https://github.com/argoproj/argo-cd/issues/9055)) ([#&#8203;12203](https://github.com/argoproj/argo-cd/issues/12203)) - fix: setting spec.SyncPolicy crashes 'argocd appset get' output ([#&#8203;12424](https://github.com/argoproj/argo-cd/issues/12424)) ([#&#8203;12425](https://github.com/argoproj/argo-cd/issues/12425)) - fix(security): add url validation for help chat ([#&#8203;9956](https://github.com/argoproj/argo-cd/issues/9956)) ([#&#8203;10417](https://github.com/argoproj/argo-cd/issues/10417)) - fix: show full event message in pod event view ([#&#8203;12104](https://github.com/argoproj/argo-cd/issues/12104)) ([#&#8203;12267](https://github.com/argoproj/argo-cd/issues/12267)) ##### Documentation (5) - docs: FAQ improvements ([#&#8203;12146](https://github.com/argoproj/argo-cd/issues/12146)) - docs: fix typo ([#&#8203;12389](https://github.com/argoproj/argo-cd/issues/12389)) - docs: Updated link to Jenkins and added GitHub Actions link ([#&#8203;12465](https://github.com/argoproj/argo-cd/issues/12465)) - docs: fix typo in health documentation ([#&#8203;12497](https://github.com/argoproj/argo-cd/issues/12497)) - docs: Clarify cascade delete of resource and finalizer ([#&#8203;11064](https://github.com/argoproj/argo-cd/issues/11064)) ##### Other (4) - chore: use registry.k8s.io instead of k8s.gcr.io ([#&#8203;12362](https://github.com/argoproj/argo-cd/issues/12362)) - chore(deps): bump imjasonh/setup-crane from 0.2 to 0.3 ([#&#8203;12504](https://github.com/argoproj/argo-cd/issues/12504)) - chore(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 ([#&#8203;12308](https://github.com/argoproj/argo-cd/issues/12308)) - chore(deps): bump actions/cache from 3.2.4 to 3.2.5 ([#&#8203;12433](https://github.com/argoproj/argo-cd/issues/12433)) ### [`v2.5.11`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.11) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.10...v2.5.11) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.11/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.11/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 6 contributions from 5 contributors with 0 features and 2 bug fixes. ##### Security (1) - CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j) ##### Bug fixes (2) - fix: don't dump SSG to server logs, change deprecation notice to v2.7 ([#&#8203;12285](https://github.com/argoproj/argo-cd/issues/12285)) - fix: return nil if reading application set was successful ([#&#8203;12261](https://github.com/argoproj/argo-cd/issues/12261)) ##### Documentation (2) - docs: Fix heading to not include a v for the second version ([#&#8203;12218](https://github.com/argoproj/argo-cd/issues/12218)) - docs: add destination.name example ([#&#8203;12242](https://github.com/argoproj/argo-cd/issues/12242)) ##### Other (1) - chore: add dist to path to use our kustomize version ([#&#8203;12352](https://github.com/argoproj/argo-cd/issues/12352)) ### [`v2.5.10`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.10) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.9...v2.5.10) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.10/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.10/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 10 contributions from 9 contributors (3 of them new) with 0 features and 3 bug fixes. A special thanks goes to the 3 new contributors: - Adam Jensen - James Brady - Nobuo Takizawa ##### Bug fixes (3) - fix: Upgrade gopkg.in/yaml.v2 to v2.2.4 ([#&#8203;12246](https://github.com/argoproj/argo-cd/issues/12246)) - fix: Upgrade goutils to v1.1.1 \[release-2.5] ([#&#8203;12219](https://github.com/argoproj/argo-cd/issues/12219)) ([#&#8203;12220](https://github.com/argoproj/argo-cd/issues/12220)) - fix: backport values should always be visible on 2.5 ([#&#8203;11681](https://github.com/argoproj/argo-cd/issues/11681)) ([#&#8203;12139](https://github.com/argoproj/argo-cd/issues/12139)) ##### Documentation (3) - docs: Fix copy that refers to a different CLI flag ([#&#8203;12236](https://github.com/argoproj/argo-cd/issues/12236)) - docs: Clarify directory recursion ([#&#8203;12037](https://github.com/argoproj/argo-cd/issues/12037)) - docs: Fix list formatting in "Resource Actions" docs page ([#&#8203;12061](https://github.com/argoproj/argo-cd/issues/12061)) ##### Other (4) - chore: remove unnecessary whitespace - chore(deps): bump docker/setup-buildx-action from 2.2.1 to 2.4.0 ([#&#8203;12227](https://github.com/argoproj/argo-cd/issues/12227)) - chore(deps): bump actions/cache from 3.2.3 to 3.2.4 ([#&#8203;12228](https://github.com/argoproj/argo-cd/issues/12228)) - chore: Update dex's image tag that is forgotten to be updated ([#&#8203;12234](https://github.com/argoproj/argo-cd/issues/12234)) ### [`v2.5.9`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.9) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.8...v2.5.9) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.9/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.9/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 4 contributions from 4 contributors (2 of them new) with 0 features and 3 bug fixes. A special thanks goes to the 2 new contributors: - Eugen Friedland - Ian Delahorne ##### Bug fixes (3) - fix(health): Handling SparkApplication CRD health status if dynamic allocation is enabled ([#&#8203;7557](https://github.com/argoproj/argo-cd/issues/7557)) ([#&#8203;11522](https://github.com/argoproj/argo-cd/issues/11522)) - fix: add CLI client IDs to default OIDC allowed audiences ([#&#8203;12170](https://github.com/argoproj/argo-cd/issues/12170)) ([#&#8203;12179](https://github.com/argoproj/argo-cd/issues/12179)) - fix: Add namespace to sub-application link URLs ([#&#8203;11946](https://github.com/argoproj/argo-cd/issues/11946)) ##### Other (1) - chore: Refactor terminal handler to use auth-middleware ([#&#8203;12052](https://github.com/argoproj/argo-cd/issues/12052)) ### [`v2.5.8`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.8) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.7...v2.5.8) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.8/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.8/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Known Issues If you use the bundled Dex instance for SSO, a bug in 2.5.8 will prevent CLI clients from successfully authenticating with the Argo CD API. A [patch](https://github.com/argoproj/argo-cd/issues/12170) for the bug is being tested as of Friday, Jan 27, and a fix will be released shortly. #### Changes This release includes 5 contributions from 4 contributors (1 of them new) with 0 features and 1 bug fixes. A special thanks goes to the 1 new contributors: - Mike Bryant ##### Security (2) - CRITICAL: JWT audience claim is not verified ([GHSA-q9hr-j4rf-8fjc](https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc)) - HIGH: Controller reconciles apps outside configured namespaces when sharding is enabled ([GHSA-6p4m-hw2h-6gmw](https://github.com/argoproj/argo-cd/security/advisories/GHSA-6p4m-hw2h-6gmw)) ##### Bug fixes (1) - fix: Support resource actions for apps in different Namespace ([#&#8203;12115](https://github.com/argoproj/argo-cd/issues/12115)) ##### Documentation (1) - docs: clarify value for disabling tools ([#&#8203;11395](https://github.com/argoproj/argo-cd/issues/11395)) ##### Other (1) - chore: disable docker sbom and attestations ([#&#8203;12059](https://github.com/argoproj/argo-cd/issues/12059)) ### [`v2.5.7`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.7) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.6...v2.5.7) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.7/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.7/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 6 contributions from 3 contributors with 0 features and 2 bug fixes. ##### Bug fixes (2) - fix: Fixed matrix requeueAfterSeconds for PR ([#&#8203;10914](https://github.com/argoproj/argo-cd/issues/10914)) ([#&#8203;10915](https://github.com/argoproj/argo-cd/issues/10915)) - fix: Argo CD doesn't detect the repo type when repository is scoped ([#&#8203;11959](https://github.com/argoproj/argo-cd/issues/11959)) ##### Other (4) - chore(deps): bump actions/cache from 3.2.2 to 3.2.3 ([#&#8203;11928](https://github.com/argoproj/argo-cd/issues/11928)) - chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 ([#&#8203;11895](https://github.com/argoproj/argo-cd/issues/11895)) - chore(deps): bump actions/setup-node from 3.5.1 to 3.6.0 ([#&#8203;11896](https://github.com/argoproj/argo-cd/issues/11896)) - chore(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 ([#&#8203;11929](https://github.com/argoproj/argo-cd/issues/11929)) ### [`v2.5.6`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.6) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.5...v2.5.6) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.6/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.6/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 21 contributions from 11 contributors (4 of them new) with 0 features and 6 bug fixes. A special thanks goes to the 4 new contributors: - Gaël Jourdan-Weil - Matt Clegg - Ryan Umstead - yanyx ##### Bug fixes (6) - fix(redis): explicit bind to redis and sentinel for IPv4 clusters ([#&#8203;11388](https://github.com/argoproj/argo-cd/issues/11388)) ([#&#8203;11862](https://github.com/argoproj/argo-cd/issues/11862)) - fix: upgrade qs to avoid CVE-2022-24999 - fix: web terminal namespace handler ([#&#8203;11891](https://github.com/argoproj/argo-cd/issues/11891)) - fix: web terminal outside argocd namespace ([#&#8203;11166](https://github.com/argoproj/argo-cd/issues/11166)) ([#&#8203;11400](https://github.com/argoproj/argo-cd/issues/11400)) - fix: ssa e2e tests failing after updating to kubectl 1.26 ([#&#8203;11753](https://github.com/argoproj/argo-cd/issues/11753)) - fix: sign container images by digest ([#&#8203;11151](https://github.com/argoproj/argo-cd/issues/11151)) ##### Documentation (7) - docs: note risks of secret-injection plugins ([#&#8203;11617](https://github.com/argoproj/argo-cd/issues/11617)) - docs: clarify project destination possibilities ([#&#8203;11706](https://github.com/argoproj/argo-cd/issues/11706)) - docs: correct SSO configuration URL in example configmap ([#&#8203;11720](https://github.com/argoproj/argo-cd/issues/11720)) - docs: Update example dockerfile ([#&#8203;11721](https://github.com/argoproj/argo-cd/issues/11721)) - docs: clarify that all labels must exist ([#&#8203;11693](https://github.com/argoproj/argo-cd/issues/11693)) - docs: update cosign docs ([#&#8203;11749](https://github.com/argoproj/argo-cd/issues/11749)) - docs: Document applications in any namespace ([#&#8203;10678](https://github.com/argoproj/argo-cd/issues/10678)) ##### Other (8) - chore: upgrade redis to 7.0.7 to avoid CVE-2022-3996 ([#&#8203;11925](https://github.com/argoproj/argo-cd/issues/11925)) - chore(deps): bump actions/cache from 3.2.0 to 3.2.2 ([#&#8203;11839](https://github.com/argoproj/argo-cd/issues/11839)) - chore(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 ([#&#8203;11894](https://github.com/argoproj/argo-cd/issues/11894)) - chore(deps): bump actions/cache from 3.0.11 to 3.2.0 ([#&#8203;11809](https://github.com/argoproj/argo-cd/issues/11809)) - chore: fix lint error ([#&#8203;11788](https://github.com/argoproj/argo-cd/issues/11788)) - chore: get image digest in seperate step ([#&#8203;11778](https://github.com/argoproj/argo-cd/issues/11778)) - chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 ([#&#8203;11697](https://github.com/argoproj/argo-cd/issues/11697)) - doc: correct kustomize demo path ([#&#8203;11762](https://github.com/argoproj/argo-cd/issues/11762)) ### [`v2.5.5`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.5) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.4...v2.5.5) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.5/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.5/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 14 contributions from 9 contributors (1 of them new) with 0 features and 6 bug fixes. A special thanks goes to the 1 new contributor: - schakrad ##### Bug fixes (6) - fix: Unbreak termination of operation with apps in other namespaces ([#&#8203;11239](https://github.com/argoproj/argo-cd/issues/11239)) ([#&#8203;11724](https://github.com/argoproj/argo-cd/issues/11724)) - fix: pin kubectl version ([#&#8203;11726](https://github.com/argoproj/argo-cd/issues/11726)) - fix: add pod age icon details in tooltip ([#&#8203;10290](https://github.com/argoproj/argo-cd/issues/10290)) ([#&#8203;11170](https://github.com/argoproj/argo-cd/issues/11170)) - fix: appname in searchbar ([#&#8203;11493](https://github.com/argoproj/argo-cd/issues/11493)) - fix(helm): login OCI Helm dependencies correctly ([#&#8203;8563](https://github.com/argoproj/argo-cd/issues/8563)) ([#&#8203;11327](https://github.com/argoproj/argo-cd/issues/11327)) - fix(helm): helm v3 doesn't have these flags ([#&#8203;11100](https://github.com/argoproj/argo-cd/issues/11100)) ([#&#8203;11540](https://github.com/argoproj/argo-cd/issues/11540)) ##### Documentation (3) - docs: Clarification of the create namespace feature ([#&#8203;11723](https://github.com/argoproj/argo-cd/issues/11723)) - docs: kustomize has access to build environment ([#&#8203;11643](https://github.com/argoproj/argo-cd/issues/11643)) - docs: add warning for user when using replace sync option ([#&#8203;11566](https://github.com/argoproj/argo-cd/issues/11566)) ##### Other (5) - chore: upgrade helm to most recent version (v3.10.3) ([#&#8203;11725](https://github.com/argoproj/argo-cd/issues/11725)) - chore: fix flaky e2e test for immutable fields ([#&#8203;11685](https://github.com/argoproj/argo-cd/issues/11685)) - chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 ([#&#8203;11679](https://github.com/argoproj/argo-cd/issues/11679)) - chore: fix flaky e2e test ([#&#8203;11670](https://github.com/argoproj/argo-cd/issues/11670)) - chore: fix flaky e2e test ([#&#8203;11509](https://github.com/argoproj/argo-cd/issues/11509)) ([#&#8203;11654](https://github.com/argoproj/argo-cd/issues/11654)) ### [`v2.5.4`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.4) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.3...v2.5.4) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.4/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.4/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 20 contributions from 16 contributors (10 of them new) with 0 features and 6 bug fixes. A special thanks goes to the 10 new contributors: - Antoine Pultier - Artur Rodrigues - Cedar - Dieter Bocklandt - Duncan - Gerald Spencer - Michael Merrill - Michael Vittrup Larsen - Nathanael Liechti - Philip Haberkern ##### Bug fixes - fix: sidebar css ([#&#8203;11531](https://github.com/argoproj/argo-cd/issues/11531)) - fix: use repository GithubAppCreds proxy if set ([#&#8203;11422](https://github.com/argoproj/argo-cd/issues/11422)) - fix(ui): fix sorting of parameters. Make the Remove override button clickable again ([#&#8203;11316](https://github.com/argoproj/argo-cd/issues/11316)) - fix: add missing changes for bitbucket cloud SCM provider ([#&#8203;10143](https://github.com/argoproj/argo-cd/issues/10143)) ([#&#8203;11150](https://github.com/argoproj/argo-cd/issues/11150)) - fix: expose missing ReactDOM to enable extensions implementation ([#&#8203;11495](https://github.com/argoproj/argo-cd/issues/11495)) - fix: sonarlint issue ([#&#8203;11472](https://github.com/argoproj/argo-cd/issues/11472)) ##### Documentation - docs: Add skipCrds and ignoreMissingValueFiles to application.yaml example ([#&#8203;11565](https://github.com/argoproj/argo-cd/issues/11565)) - docs: update how to access arrays in Go templates ([#&#8203;11562](https://github.com/argoproj/argo-cd/issues/11562)) - docs: Added ARGOCD_ENV\_ prefix to FOO ([#&#8203;11545](https://github.com/argoproj/argo-cd/issues/11545)) - docs: Add CSI secret driver to the secret management options ([#&#8203;10900](https://github.com/argoproj/argo-cd/issues/10900)) - docs: Improve Keycloak documentation for command line sign-in ([#&#8203;8758](https://github.com/argoproj/argo-cd/issues/8758)) - docs: Update operator manual installation helm available url ([#&#8203;11120](https://github.com/argoproj/argo-cd/issues/11120)) - docs: Update Pull Request generator documentation to include application lifecycle ([#&#8203;11274](https://github.com/argoproj/argo-cd/issues/11274)) - docs: fix markdown formatting ([#&#8203;11460](https://github.com/argoproj/argo-cd/issues/11460)) ##### Other - chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 in /ui ([#&#8203;11533](https://github.com/argoproj/argo-cd/issues/11533)) - chore: add debug logs around CMP manifest generation ([#&#8203;11185](https://github.com/argoproj/argo-cd/issues/11185)) - chore(deps): bump actions/setup-go from 3.3.1 to 3.4.0 ([#&#8203;11535](https://github.com/argoproj/argo-cd/issues/11535)) - chore(deps): bump softprops/action-gh-release from 0.1.14 to 0.1.15 ([#&#8203;11534](https://github.com/argoproj/argo-cd/issues/11534)) - chore: pin actions ([#&#8203;11360](https://github.com/argoproj/argo-cd/issues/11360)) - chore: use set-output environment file ([#&#8203;10999](https://github.com/argoproj/argo-cd/issues/10999)) ### [`v2.5.3`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.3) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.2...v2.5.3) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.3/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.3/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 21 contributions from 15 contributors (6 of them new) with 0 features and 11 bug fixes. A special thanks goes to the 6 new contributors: - Edmund Rhudy - F1ko - Nicholas Morey - Nick Mohoric - Patrice Chalin - Shuai Zhang ##### Bug fixes - fix: hide app namespace on the ui ([#&#8203;11111](https://github.com/argoproj/argo-cd/issues/11111)) ([#&#8203;11247](https://github.com/argoproj/argo-cd/issues/11247)) - fix: ui banner covering sidebar ([#&#8203;11101](https://github.com/argoproj/argo-cd/issues/11101)) - fix: Add support for /api/v1/applicationsets\* via HTTP ([#&#8203;11409](https://github.com/argoproj/argo-cd/issues/11409)) - fix: application stuck in infinite reconciliation loop if using wrong project ([#&#8203;11246](https://github.com/argoproj/argo-cd/issues/11246)) - fix: remove 0.0.0.0/0 ipblock from network policies ([#&#8203;11321](https://github.com/argoproj/argo-cd/issues/11321)) ([#&#8203;11322](https://github.com/argoproj/argo-cd/issues/11322)) - fix: set HELM_CONFIG_HOME dir for oci registry authentication; fixes: [#&#8203;11284](https://github.com/argoproj/argo-cd/issues/11284) ([#&#8203;11285](https://github.com/argoproj/argo-cd/issues/11285)) - fix: UI can now get clusters with slashes in name ([#&#8203;9812](https://github.com/argoproj/argo-cd/issues/9812)) ([#&#8203;9813](https://github.com/argoproj/argo-cd/issues/9813)) - fix: allow resolving repo root as jsonnet lib path ([#&#8203;11119](https://github.com/argoproj/argo-cd/issues/11119)) - fix: retry token creation/deletion upon project conflict errors ([#&#8203;11199](https://github.com/argoproj/argo-cd/issues/11199)) - fix: Retry IsConflict for settings update. Map kube API errors to retryable HTTP status codes ([#&#8203;10817](https://github.com/argoproj/argo-cd/issues/10817)) - fix: use non distroless image for dex ([#&#8203;11219](https://github.com/argoproj/argo-cd/issues/11219)) ##### Documentation - docs: improve build env variable list formatting ([#&#8203;11429](https://github.com/argoproj/argo-cd/issues/11429)) - docs: fix references to cli tools moved under argocd admin ([#&#8203;11181](https://github.com/argoproj/argo-cd/issues/11181)) - docs: Enable Google Analytics 4 for 2.5 (stable) ([#&#8203;11323](https://github.com/argoproj/argo-cd/issues/11323)) - docs: add example for config management plugins exclusion ([#&#8203;11187](https://github.com/argoproj/argo-cd/issues/11187)) ##### Other - chore(deps): bump actions/upload-artifact from 2 to 3 ([#&#8203;11365](https://github.com/argoproj/argo-cd/issues/11365)) - chore(deps): bump actions/setup-node from 1 to 3 ([#&#8203;11364](https://github.com/argoproj/argo-cd/issues/11364)) - chore(deps): bump actions/cache from 1 to 3 ([#&#8203;11363](https://github.com/argoproj/argo-cd/issues/11363)) - chore(deps): bump codecov/codecov-action from 1 to 3 ([#&#8203;11362](https://github.com/argoproj/argo-cd/issues/11362)) - chore(deps): bump actions/download-artifact from 2 to 3 ([#&#8203;11361](https://github.com/argoproj/argo-cd/issues/11361)) - chore: use --password-stdin for docker login ([#&#8203;11331](https://github.com/argoproj/argo-cd/issues/11331)) ### [`v2.5.2`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.2) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.1...v2.5.2) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.2/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.2/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 8 contributions from 5 contributors (2 of them new) with 0 features and 3 bug fixes. A special thanks goes to the 2 new contributors: - balajisa - Chris Lewis ##### Bug fixes - fix: templating keys in ApplicationSet ([#&#8203;11076](https://github.com/argoproj/argo-cd/issues/11076)) ([#&#8203;11163](https://github.com/argoproj/argo-cd/issues/11163)) - fix: handle apiGroup updates in resource-tracking ([#&#8203;11012](https://github.com/argoproj/argo-cd/issues/11012)) - fix: upgrade redis-ha chart to 4.22.3, redis regression ([#&#8203;11176](https://github.com/argoproj/argo-cd/issues/11176)) ##### Documentation - docs: Add Contributor's Quickstart Page ([#&#8203;11108](https://github.com/argoproj/argo-cd/issues/11108)) - docs: debugging CMPs ([#&#8203;11142](https://github.com/argoproj/argo-cd/issues/11142)) - docs: add Dockerfile example for plugin ([#&#8203;11130](https://github.com/argoproj/argo-cd/issues/11130)) - docs: document metadata access for go-templated cluster generator ([#&#8203;10929](https://github.com/argoproj/argo-cd/issues/10929)) - docs(user-guide): Add doc for import argocd packages ([#&#8203;11041](https://github.com/argoproj/argo-cd/issues/11041)) ([#&#8203;11096](https://github.com/argoproj/argo-cd/issues/11096)) ### [`v2.5.1`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.1) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.5.0...v2.5.1) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.1/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.1/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes ##### Security fixes This release includes openssl version [3.0.2-0ubuntu1.7](https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.7), which patches [high-severity vulnerabilities](https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/). ### [`v2.5.0`](https://github.com/argoproj/argo-cd/releases/tag/v2.5.0) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.27...v2.5.0) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.0/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.0/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets.md/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 301 contributions from 136 contributors (89 of them new) with 59 features and 62 bug fixes. ##### Features - feat(ui): notification subscriptions edit field [#&#8203;10310](https://github.com/argoproj/argo-cd/issues/10310) ([#&#8203;10839](https://github.com/argoproj/argo-cd/issues/10839)) - feat: system level extensions ([#&#8203;10758](https://github.com/argoproj/argo-cd/issues/10758)) - feat: equality-based and set-based filtering by label keys and values for list, sync, delete and wait App commands ([#&#8203;10548](https://github.com/argoproj/argo-cd/issues/10548)) - feat: add health checks for storage.cnrm.cloud.google.com/StorageBucketAccessControl ([#&#8203;10727](https://github.com/argoproj/argo-cd/issues/10727)) - feat: add the ability to filter apps based on clusters ([#&#8203;10465](https://github.com/argoproj/argo-cd/issues/10465)) - feat: argocd app delete apps by label ([#&#8203;10091](https://github.com/argoproj/argo-cd/issues/10091)) ([#&#8203;10118](https://github.com/argoproj/argo-cd/issues/10118)) - feat: add health checks for iam.cnrm.cloud.google.com/IAMPolicy ([#&#8203;10725](https://github.com/argoproj/argo-cd/issues/10725)) - feat: add Prometheus health check ([#&#8203;10508](https://github.com/argoproj/argo-cd/issues/10508)) - feat: add health check for cloudscheduler.cnrm.cloud.google.com/CloudSchedulerJob ([#&#8203;10606](https://github.com/argoproj/argo-cd/issues/10606)) - feat: add health check for cloudscheduler.cnrm.cloud.google.com/CloudFunctionsFunction ([#&#8203;10607](https://github.com/argoproj/argo-cd/issues/10607)) - feat: health check for compute.cnrm.cloud.google.com/ComputeDisk ([#&#8203;10608](https://github.com/argoproj/argo-cd/issues/10608)) - feat: health check for OnePasswordItem ([#&#8203;10690](https://github.com/argoproj/argo-cd/issues/10690)) - feat: health check storage.cnrm.cloud.google.com/StorageDefaultObjectAccessControl ([#&#8203;10726](https://github.com/argoproj/argo-cd/issues/10726)) - feat(ui): Collapsable sidebar with filters ([#&#8203;10626](https://github.com/argoproj/argo-cd/issues/10626)) - feat: dark mode ([#&#8203;4722](https://github.com/argoproj/argo-cd/issues/4722)) ([#&#8203;9703](https://github.com/argoproj/argo-cd/issues/9703)) - feat: create cli commands for ApplicationSet ([#&#8203;9584](https://github.com/argoproj/argo-cd/issues/9584)) - feat: add permitOnlyProjectScopedClusters flag ([#&#8203;10237](https://github.com/argoproj/argo-cd/issues/10237)) - feat: add scrollbar to live manifest ([#&#8203;10379](https://github.com/argoproj/argo-cd/issues/10379)) - feat: add notifications API ([#&#8203;10279](https://github.com/argoproj/argo-cd/issues/10279)) - feat(applicationset): reuse repo-creds for an existing GitHub App ([#&#8203;10092](https://github.com/argoproj/argo-cd/issues/10092)) - feat: Support Custom Application Actions in CLI [#&#8203;7577](https://github.com/argoproj/argo-cd/issues/7577) ([#&#8203;10015](https://github.com/argoproj/argo-cd/issues/10015)) - feat: make https repo credentials editable in the UI ([#&#8203;9108](https://github.com/argoproj/argo-cd/issues/9108)) ([#&#8203;9782](https://github.com/argoproj/argo-cd/issues/9782)) - feat!(cli): add confirm for cluster remove ([#&#8203;10319](https://github.com/argoproj/argo-cd/issues/10319)) - feat: server-side manifest generation for local diff ([#&#8203;8145](https://github.com/argoproj/argo-cd/issues/8145)) ([#&#8203;10019](https://github.com/argoproj/argo-cd/issues/10019)) - feat: support gzip compression for data stored in redis ([#&#8203;10190](https://github.com/argoproj/argo-cd/issues/10190)) - feat: Make additional namespaces configurable via environment ([#&#8203;10270](https://github.com/argoproj/argo-cd/issues/10270)) - feat: Applications in any namespace ([#&#8203;9755](https://github.com/argoproj/argo-cd/issues/9755)) - feat: add support for default container annotation ([#&#8203;8015](https://github.com/argoproj/argo-cd/issues/8015)) ([#&#8203;9769](https://github.com/argoproj/argo-cd/issues/9769)) - feat: add projects filter to app sync command ([#&#8203;8320](https://github.com/argoproj/argo-cd/issues/8320)) ([#&#8203;10133](https://github.com/argoproj/argo-cd/issues/10133)) - feat: add Gitlab PR generator webhooks support ([#&#8203;10235](https://github.com/argoproj/argo-cd/issues/10235)) - feat: refactor redis-ha NetworkPolicy to include egress rules ([#&#8203;10226](https://github.com/argoproj/argo-cd/issues/10226)) - feat: restrict egress onredis ([#&#8203;10227](https://github.com/argoproj/argo-cd/issues/10227)) - feat: Added health check for spot.io SpotDeployment ([#&#8203;10152](https://github.com/argoproj/argo-cd/issues/10152)) - feat: Added Google Project health check ([#&#8203;10230](https://github.com/argoproj/argo-cd/issues/10230)) - feat: Added Google PubSub Topic and Subscription health checks ([#&#8203;10229](https://github.com/argoproj/argo-cd/issues/10229)) - feat: ApplicationSet Go template ([#&#8203;10026](https://github.com/argoproj/argo-cd/issues/10026)) - feat: Introduces Server-Side Apply as sync option ([#&#8203;9711](https://github.com/argoproj/argo-cd/issues/9711)) - feat: app wait with --degraded ([#&#8203;10139](https://github.com/argoproj/argo-cd/issues/10139)) - feat: Expose the Argo CD ID through an ENV in the Dockerfile ([#&#8203;10113](https://github.com/argoproj/argo-cd/issues/10113)) ([#&#8203;10115](https://github.com/argoproj/argo-cd/issues/10115)) - feat: Support environment variables in Helm value file paths ([#&#8203;10213](https://github.com/argoproj/argo-cd/issues/10213)) - feat: Add labelSelector style to filter all generators ([#&#8203;9312](https://github.com/argoproj/argo-cd/issues/9312)) - feat: add deny destinations for projects ([#&#8203;9464](https://github.com/argoproj/argo-cd/issues/9464)) ([#&#8203;9652](https://github.com/argoproj/argo-cd/issues/9652)) - feat: argocd app manifests --local ([#&#8203;5525](https://github.com/argoproj/argo-cd/issues/5525)) ([#&#8203;10061](https://github.com/argoproj/argo-cd/issues/10061)) - feat: add ingress network policies for applicationset and notifications controller ([#&#8203;10053](https://github.com/argoproj/argo-cd/issues/10053)) - feat: add HTTPS to dex server ([#&#8203;9424](https://github.com/argoproj/argo-cd/issues/9424)) ([#&#8203;9883](https://github.com/argoproj/argo-cd/issues/9883)) - feat: allow argocd cluster rotate-auth to accept cluster name ([#&#8203;9838](https://github.com/argoproj/argo-cd/issues/9838)) - feat(applicationset): add short sha to PR generator ([#&#8203;9668](https://github.com/argoproj/argo-cd/issues/9668)) ([#&#8203;9669](https://github.com/argoproj/argo-cd/issues/9669)) - feat: implement consistent startup messages for all components ([#&#8203;9800](https://github.com/argoproj/argo-cd/issues/9800)) - feat: allow interpolation of cluster generator values ([#&#8203;9254](https://github.com/argoproj/argo-cd/issues/9254)) - feat: add initiatedBy info to App status field when performing a rollback ([#&#8203;9713](https://github.com/argoproj/argo-cd/issues/9713)) - feat: Add Azure DevOps SCM Provider Generator; add branchNormalized to SCM Generator template fields. ([#&#8203;9283](https://github.com/argoproj/argo-cd/issues/9283)) - feat: Added the ability to filter MRs by 'state' to Gitlab PR Generator ([#&#8203;9540](https://github.com/argoproj/argo-cd/issues/9540)) - feat: support health check on FlinkDeployment ([#&#8203;9300](https://github.com/argoproj/argo-cd/issues/9300)) ([#&#8203;9300](https://github.com/argoproj/argo-cd/issues/9300)) - feat: Slugified the branch name in PR generators ([#&#8203;9462](https://github.com/argoproj/argo-cd/issues/9462)) - feat: combine form repo settings page [#&#8203;9167](https://github.com/argoproj/argo-cd/issues/9167) ([#&#8203;9374](https://github.com/argoproj/argo-cd/issues/9374)) - feat: Matrix generator where a generator can reference items of another one ([#&#8203;9080](https://github.com/argoproj/argo-cd/issues/9080)) - feat: Expansion support and line relayout ([#&#8203;8661](https://github.com/argoproj/argo-cd/issues/8661)) - feat: Network view should group pods into higher level workload ([#&#8203;5468](https://github.com/argoproj/argo-cd/issues/5468)) ([#&#8203;8996](https://github.com/argoproj/argo-cd/issues/8996)) - feat: Move app resources commands to dedicated command file ([#&#8203;9306](https://github.com/argoproj/argo-cd/issues/9306)) ##### Bug fixes - fix: Update custom health check for kiali.io/Kiali ([#&#8203;10995](https://github.com/argoproj/argo-cd/issues/10995)) - fix: Resource list in sync page msg [style#&#8203;10887](https://github.com/style/argo-cd/issues/10887) ([#&#8203;10970](https://github.com/argoproj/argo-cd/issues/10970)) - fix: upgrade Helm to avoid disk use issue ([#&#8203;8773](https://github.com/argoproj/argo-cd/issues/8773)) ([#&#8203;10937](https://github.com/argoproj/argo-cd/issues/10937)) - fix: Resource list loading slowly due to Sync Wave sorting ([#&#8203;10932](https://github.com/argoproj/argo-cd/issues/10932)) - fix: add applicationsets to RBAC policy ([#&#8203;10810](https://github.com/argoproj/argo-cd/issues/10810)) ([#&#8203;10891](https://github.com/argoproj/argo-cd/issues/10891)) - fix: duplicate source namespace validation ([#&#8203;10853](https://github.com/argoproj/argo-cd/issues/10853)) - fix: applicationset controller should respect logging flags ([#&#8203;10513](https://github.com/argoproj/argo-cd/issues/10513)) - fix: show revision in badge when param is true ([#&#8203;10545](https://github.com/argoproj/argo-cd/issues/10545)) - fix: Unbreak app refresh from panel list ([#&#8203;10825](https://github.com/argoproj/argo-cd/issues/10825)) - fix: Add filter icon to help users find filters ([#&#8203;10809](https://github.com/argoproj/argo-cd/issues/10809)) - fix: reduce noise in logs ([#&#8203;10369](https://github.com/argoproj/argo-cd/issues/10369)) ([#&#8203;10765](https://github.com/argoproj/argo-cd/issues/10765)) - fix: New sidebar icons are missing margin ([#&#8203;10794](https://github.com/argoproj/argo-cd/issues/10794)) - fix: incorrect filters placement on resource list ([#&#8203;10781](https://github.com/argoproj/argo-cd/issues/10781)) - fix: add theme to version panel in ui ([#&#8203;10762](https://github.com/argoproj/argo-cd/issues/10762)) - fix: always prune on git fetch ([#&#8203;10664](https://github.com/argoproj/argo-cd/issues/10664)) - fix: duplicate z-index ([#&#8203;10760](https://github.com/argoproj/argo-cd/issues/10760)) - fix: ui add tooltips on repository url links and names ([#&#8203;9868](https://github.com/argoproj/argo-cd/issues/9868)) ([#&#8203;10108](https://github.com/argoproj/argo-cd/issues/10108)) - fix: add tooltip for long title in list view ui ([#&#8203;9792](https://github.com/argoproj/argo-cd/issues/9792)) - fix: button consistency in logs panel [#&#8203;9945](https://github.com/argoproj/argo-cd/issues/9945) ([#&#8203;10016](https://github.com/argoproj/argo-cd/issues/10016)) - fix: Provide better error message when application source is missing some settings ([#&#8203;10694](https://github.com/argoproj/argo-cd/issues/10694)) - fix: Application details page crashes with JS error ([#&#8203;10640](https://github.com/argoproj/argo-cd/issues/10640)) - fix: snyk report bugs ([#&#8203;10544](https://github.com/argoproj/argo-cd/issues/10544)) - fix: add more info to creationtime format ([#&#8203;10286](https://github.com/argoproj/argo-cd/issues/10286)) ([#&#8203;10493](https://github.com/argoproj/argo-cd/issues/10493)) - fix: invalid error handling ([#&#8203;10384](https://github.com/argoproj/argo-cd/issues/10384)) ([#&#8203;10385](https://github.com/argoproj/argo-cd/issues/10385)) - fix: Remove quotes from delete dialog [#&#8203;10008](https://github.com/argoproj/argo-cd/issues/10008) ([#&#8203;10471](https://github.com/argoproj/argo-cd/issues/10471)) - fix(ui): Remove application namespace field in app creation ([#&#8203;10481](https://github.com/argoproj/argo-cd/issues/10481)) - fix(ui): Fix multi-app refresh and sync in the UI ([#&#8203;10421](https://github.com/argoproj/argo-cd/issues/10421)) - fix: add space before prompt in CLI ([#&#8203;10362](https://github.com/argoproj/argo-cd/issues/10362)) - fix: Add logic to handle for fileHandle.Close() ([#&#8203;9963](https://github.com/argoproj/argo-cd/issues/9963)) ([#&#8203;10361](https://github.com/argoproj/argo-cd/issues/10361)) - fix: Replace dangerous use of xargs ([#&#8203;10331](https://github.com/argoproj/argo-cd/issues/10331)) - fix: Trim white space from string slice retrieved from environment ([#&#8203;10275](https://github.com/argoproj/argo-cd/issues/10275)) - fix(applicationset): support webhook with matrix interpolation ([#&#8203;9931](https://github.com/argoproj/argo-cd/issues/9931)) ([#&#8203;10236](https://github.com/argoproj/argo-cd/issues/10236)) - fix: consistent example indentation in CLI ([#&#8203;10075](https://github.com/argoproj/argo-cd/issues/10075)) - fix: set default value for users.session.duration ([#&#8203;9962](https://github.com/argoproj/argo-cd/issues/9962)) ([#&#8203;10185](https://github.com/argoproj/argo-cd/issues/10185)) - fix: Add logic to handle for file.Close() ([#&#8203;9963](https://github.com/argoproj/argo-cd/issues/9963)) ([#&#8203;10159](https://github.com/argoproj/argo-cd/issues/10159)) - fix: add logic to handle for f.Close() for util/gpg ([#&#8203;9963](https://github.com/argoproj/argo-cd/issues/9963)) ([#&#8203;10130](https://github.com/argoproj/argo-cd/issues/10130)) - fix: Add logic to handle for f.Close() for util/db ([#&#8203;9963](https://github.com/argoproj/argo-cd/issues/9963)) ([#&#8203;10127](https://github.com/argoproj/argo-cd/issues/10127)) - fix: Handle github ping webhook event ([#&#8203;7555](https://github.com/argoproj/argo-cd/issues/7555)) ([#&#8203;10082](https://github.com/argoproj/argo-cd/issues/10082)) - fix: add logic to handle for f.Close() for util/io/files/tar.go ([#&#8203;9963](https://github.com/argoproj/argo-cd/issues/9963)) - fix: off positioned filter icon ([#&#8203;10013](https://github.com/argoproj/argo-cd/issues/10013)) - fix: Add logic to handle for f.Close() in util/localconfig/ ([#&#8203;9963](https://github.com/argoproj/argo-cd/issues/9963)) - fix: copy claims before modifying for logs ([#&#8203;10044](https://github.com/argoproj/argo-cd/issues/10044)) - fix: api server should use ARGOCD_SERVER_LOG_LEVEL instead of ARGOCD_REPO_SERVER_LOGLEVEL ([#&#8203;9970](https://github.com/argoproj/argo-cd/issues/9970)) ([#&#8203;9975](https://github.com/argoproj/argo-cd/issues/9975)) - fix: don't log group claims unless log level is debug ([#&#8203;9549](https://github.com/argoproj/argo-cd/issues/9549)) ([#&#8203;9947](https://github.com/argoproj/argo-cd/issues/9947)) - fix: bad error message ([#&#8203;9967](https://github.com/argoproj/argo-cd/issues/9967)) - fix: validateProject() function in app_project_types.go file has nil dereference bug ([#&#8203;9917](https://github.com/argoproj/argo-cd/issues/9917)) - fix: 'unexpected reserved bits' breaking web terminal ([#&#8203;9605](https://github.com/argoproj/argo-cd/issues/9605)) ([#&#8203;9895](https://github.com/argoproj/argo-cd/issues/9895)) - fix: make test-tools-image work on apple silicon ([#&#8203;9808](https://github.com/argoproj/argo-cd/issues/9808)) - fix(applicationset): provide nameNormalized template param for local cluster ([#&#8203;9728](https://github.com/argoproj/argo-cd/issues/9728)) - fix: upgrade superagent from 7.1.3 to 7.1.6 ([#&#8203;9748](https://github.com/argoproj/argo-cd/issues/9748)) - fix: pss restricted securityContext ([#&#8203;9765](https://github.com/argoproj/argo-cd/issues/9765)) - fix: overrides should not appear in the manifest cache key ([#&#8203;9601](https://github.com/argoproj/argo-cd/issues/9601)) - fix: ui add tooltips on cluster urls ([#&#8203;9567](https://github.com/argoproj/argo-cd/issues/9567)) - fix: better error message for invalid repo URL ([#&#8203;9513](https://github.com/argoproj/argo-cd/issues/9513)) - fix: Use the matchMode specified in the rbac configmap ([#&#8203;9419](https://github.com/argoproj/argo-cd/issues/9419)) - fix: New line layout not applied to load balancer; podGroup fix ([#&#8203;9452](https://github.com/argoproj/argo-cd/issues/9452)) ([#&#8203;9523](https://github.com/argoproj/argo-cd/issues/9523)) - fix: added extra protection to syncing app with replace ([#&#8203;9187](https://github.com/argoproj/argo-cd/issues/9187)) - fix: upgrade superagent to resolve potential CVE ([#&#8203;9494](https://github.com/argoproj/argo-cd/issues/9494)) - fix: restore broken source-maps to simplify UI debugging ([#&#8203;9491](https://github.com/argoproj/argo-cd/issues/9491)) - fix: Pass context to resource tree ([#&#8203;5468](https://github.com/argoproj/argo-cd/issues/5468)) ([#&#8203;9401](https://github.com/argoproj/argo-cd/issues/9401)) - fix spelling ([#&#8203;9372](https://github.com/argoproj/argo-cd/issues/9372)) - fix: http headers contain colons in the field value ([#&#8203;9375](https://github.com/argoproj/argo-cd/issues/9375)) ##### Documentation - docs: fix 'bellow' typos ([#&#8203;11038](https://github.com/argoproj/argo-cd/issues/11038)) - docs: mention that OCI helm does not support version ranges ([#&#8203;11026](https://github.com/argoproj/argo-cd/issues/11026)) - docs: release signature verification ([#&#8203;10967](https://github.com/argoproj/argo-cd/issues/10967)) - docs: more versioned docs fixes ([#&#8203;10342](https://github.com/argoproj/argo-cd/issues/10342)) - docs: fix examples for ArgoCD ApplicationSet Git Generator ([#&#8203;10857](https://github.com/argoproj/argo-cd/issues/10857)) - docs: Add example about how to patch with SSA syncs ([#&#8203;10829](https://github.com/argoproj/argo-cd/issues/10829)) - docs: Add OccMundial to list of users ([#&#8203;10712](https://github.com/argoproj/argo-cd/issues/10712)) - docs: Fix TLS configure link on getting started ([#&#8203;10734](https://github.com/argoproj/argo-cd/issues/10734)) - docs: Default value for server.rootpath is incorrect ([#&#8203;10665](https://github.com/argoproj/argo-cd/issues/10665)) - docs: Add enigmo to list of users ([#&#8203;10603](https://github.com/argoproj/argo-cd/issues/10603)) - docs: decision about logs RBAC enforcement in release notes ([#&#8203;10563](https://github.com/argoproj/argo-cd/issues/10563)) - docs: Include Pandosearch in USERS.md ([#&#8203;10596](https://github.com/argoproj/argo-cd/issues/10596)) - docs: Add Productboard to users ([#&#8203;10528](https://github.com/argoproj/argo-cd/issues/10528)) - docs: Fix typo and rephrase sentence ([#&#8203;10504](https://github.com/argoproj/argo-cd/issues/10504)) - docs: document sync interval setting ([#&#8203;10520](https://github.com/argoproj/argo-cd/issues/10520)) - docs: Remove invalid link to hands-on labs ([#&#8203;10466](https://github.com/argoproj/argo-cd/issues/10466)) - docs: Add CERN as a ArgoCD user ([#&#8203;10470](https://github.com/argoproj/argo-cd/issues/10470)) - docs: add OpsVerse as an official user (USERS.md) ([#&#8203;10436](https://github.com/argoproj/argo-cd/issues/10436)) - docs: add nethopper to users.md ([#&#8203;10402](https://github.com/argoproj/argo-cd/issues/10402)) - docs: Add fully-local developer workflow and traps ([#&#8203;10333](https://github.com/argoproj/argo-cd/issues/10333)) - docs: s/ArgoCD/Argo CD ([#&#8203;10352](https://github.com/argoproj/argo-cd/issues/10352)) - docs: fix indentation of example AppProject in 'Sync Windows' documentation ([#&#8203;10388](https://github.com/argoproj/argo-cd/issues/10388)) - docs: use table instead of list for Snyk scans ([#&#8203;10141](https://github.com/argoproj/argo-cd/issues/10141)) - docs: Note Helm has been upgraded ([#&#8203;10349](https://github.com/argoproj/argo-cd/issues/10349)) - docs: add wemaintain as official user ([#&#8203;10348](https://github.com/argoproj/argo-cd/issues/10348)) - docs: remove version notes - rely on docs versioning ([#&#8203;10338](https://github.com/argoproj/argo-cd/issues/10338)) - docs: fix first sentence in custom style docs ([#&#8203;10322](https://github.com/argoproj/argo-cd/issues/10322)) - docs: grammar fix ([#&#8203;10328](https://github.com/argoproj/argo-cd/issues/10328)) - docs: fixes the YAML codefence for `Slack` notification service ([#&#8203;8776](https://github.com/argoproj/argo-cd/issues/8776)) ([#&#8203;10311](https://github.com/argoproj/argo-cd/issues/10311)) - docs: document revision history limit field ([#&#8203;10302](https://github.com/argoproj/argo-cd/issues/10302)) - docs: add freshop to USERS.md ([#&#8203;10276](https://github.com/argoproj/argo-cd/issues/10276)) - docs: revert appset path.path and path.segments docs ([#&#8203;10254](https://github.com/argoproj/argo-cd/issues/10254)) - docs: add gloat to USERS.md ([#&#8203;10252](https://github.com/argoproj/argo-cd/issues/10252)) - docs: update changelog for 2.1.x through 2.4.x ([#&#8203;10241](https://github.com/argoproj/argo-cd/issues/10241)) ([#&#8203;10242](https://github.com/argoproj/argo-cd/issues/10242)) - docs: recommend offline bcrypt ([#&#8203;10050](https://github.com/argoproj/argo-cd/issues/10050)) ([#&#8203;10056](https://github.com/argoproj/argo-cd/issues/10056)) - docs: use `install` instead of curling directly to /usr/local/bin ([#&#8203;9944](https://github.com/argoproj/argo-cd/issues/9944)) - docs: add Lian Chu Securities to Users ([#&#8203;10080](https://github.com/argoproj/argo-cd/issues/10080)) - docs: add Techcombank to users ([#&#8203;10085](https://github.com/argoproj/argo-cd/issues/10085)) - docs: add kurly to Argo CD Users ([#&#8203;10069](https://github.com/argoproj/argo-cd/issues/10069)) - docs: fix typo - user->use ([#&#8203;10078](https://github.com/argoproj/argo-cd/issues/10078)) - docs: improve docs/user-guide/kustomize.md ([#&#8203;10025](https://github.com/argoproj/argo-cd/issues/10025)) - docs: add GLOBIS to users ([#&#8203;9987](https://github.com/argoproj/argo-cd/issues/9987)) - docs: fix Ingress documentation for AWS ALBs ([#&#8203;9926](https://github.com/argoproj/argo-cd/issues/9926)) - docs: Add application.resourceTrackingMethod to example CM ([#&#8203;9892](https://github.com/argoproj/argo-cd/issues/9892)) - docs: fix outdated example in helm.md ([#&#8203;8506](https://github.com/argoproj/argo-cd/issues/8506)) - docs correction on how to override azure devops URL. ([#&#8203;9699](https://github.com/argoproj/argo-cd/issues/9699)) - docs: clarify microsoft.md OIDC setup ([#&#8203;8329](https://github.com/argoproj/argo-cd/issues/8329)) - docs: Add server-side apply proposal ([#&#8203;8812](https://github.com/argoproj/argo-cd/issues/8812)) - docs: fix PR generators list ([#&#8203;9387](https://github.com/argoproj/argo-cd/issues/9387)) - docs: add Meican to users ([#&#8203;9377](https://github.com/argoproj/argo-cd/issues/9377)) - docs: add Coralogix to users ([#&#8203;9361](https://github.com/argoproj/argo-cd/issues/9361)) - docs: Reword SSO Client Secrets doc ([#&#8203;8666](https://github.com/argoproj/argo-cd/issues/8666)) - docs: fix local apiserver host name ([#&#8203;9313](https://github.com/argoproj/argo-cd/issues/9313)) ##### Other - chore: fix CI ([#&#8203;11022](https://github.com/argoproj/argo-cd/issues/11022)) - chore: fix e2e ([#&#8203;11005](https://github.com/argoproj/argo-cd/issues/11005)) - chore: upgrade actions/checkout to v3, i.e. Node.js 16 ([#&#8203;10947](https://github.com/argoproj/argo-cd/issues/10947)) - chore: release signature of sbom ([#&#8203;10969](https://github.com/argoproj/argo-cd/issues/10969)) - Bump version to 2.5.0-rc3 - Bump version to 2.5.0-rc3 - Bump version to 2.5.0-rc2 - Bump version to 2.5.0-rc2 - chore: update Server-Side Apply docs for patching of existing rresources ([#&#8203;10822](https://github.com/argoproj/argo-cd/issues/10822)) - Bump version to 2.5.0-rc1 - Bump version to 2.5.0-rc1 - chore: remove unused import ([#&#8203;10773](https://github.com/argoproj/argo-cd/issues/10773)) - chore: Add support for apple sillicon build machines ([#&#8203;10777](https://github.com/argoproj/argo-cd/issues/10777)) - chore: update to gitops engine [`98ccd3d`](https://github.com/argoproj/argo-cd/commit/98ccd3d43fd9) ([#&#8203;10787](https://github.com/argoproj/argo-cd/issues/10787)) - chore: Add Gridfuse to USERS.md ([#&#8203;10750](https://github.com/argoproj/argo-cd/issues/10750)) - chore: fix incorrect cluster delete description ([#&#8203;10631](https://github.com/argoproj/argo-cd/issues/10631)) - chore: Add security logging for Dex errors ([#&#8203;10455](https://github.com/argoproj/argo-cd/issues/10455)) - chore: Upgrade shipped version of Redis to 7.0.5 to fix CVE-2022-35951 ([#&#8203;10702](https://github.com/argoproj/argo-cd/issues/10702)) - chore: Added Hetki to USERS.md ([#&#8203;10586](https://github.com/argoproj/argo-cd/issues/10586)) - chore: add Adfinis to USERS.md ([#&#8203;10741](https://github.com/argoproj/argo-cd/issues/10741)) - test: read appset ([#&#8203;10743](https://github.com/argoproj/argo-cd/issues/10743)) - chore: typo for SyncStatusCodeOutOfSync comment ([#&#8203;10748](https://github.com/argoproj/argo-cd/issues/10748)) - chore: upgrade dex to v2.32.1-distroless ([#&#8203;10746](https://github.com/argoproj/argo-cd/issues/10746)) - Add Splunk as ArgoCD user ([#&#8203;10718](https://github.com/argoproj/argo-cd/issues/10718)) - tests: cmd unit test version ([#&#8203;10689](https://github.com/argoproj/argo-cd/issues/10689)) - chore: upgrade k8s.io/kube-openapi to avoid CVE-2022-1996 ([#&#8203;10691](https://github.com/argoproj/argo-cd/issues/10691)) - chore: update install-codegen-tools.sh and upgrade docs ([#&#8203;10692](https://github.com/argoproj/argo-cd/issues/10692)) - chore: update Helm and Kustomize versions ([#&#8203;10273](https://github.com/argoproj/argo-cd/issues/10273)) ([#&#8203;10599](https://github.com/argoproj/argo-cd/issues/10599)) - test: Add logic to handle for fileHandle.Close() ([#&#8203;10632](https://github.com/argoproj/argo-cd/issues/10632)) - Add Kandji to users list ([#&#8203;10650](https://github.com/argoproj/argo-cd/issues/10650)) - Adding Elastic as an ArgoCD User ([#&#8203;10649](https://github.com/argoproj/argo-cd/issues/10649)) - added ./ for broken url link ([#&#8203;10623](https://github.com/argoproj/argo-cd/issues/10623)) - chore: update gitops-engine ([`3951079`](https://github.com/argoproj/argo-cd/commit/3951079)) ([#&#8203;10616](https://github.com/argoproj/argo-cd/issues/10616)) - chore: remove incompatible miniredis dependency ([#&#8203;10566](https://github.com/argoproj/argo-cd/issues/10566)) - chore: Remove bad symlink used for tests ([#&#8203;10527](https://github.com/argoproj/argo-cd/issues/10527)) - chore: add security log issue template ([#&#8203;10368](https://github.com/argoproj/argo-cd/issues/10368)) - Adding Magic Leap as argocd user ([#&#8203;10509](https://github.com/argoproj/argo-cd/issues/10509)) - chore: update gitops-engine to [`c036d3f`](https://github.com/argoproj/argo-cd/commit/c036d3f6b0e2) ([#&#8203;10423](https://github.com/argoproj/argo-cd/issues/10423)) - chore: drop hardcoded processors from HA manifests ([#&#8203;10458](https://github.com/argoproj/argo-cd/issues/10458)) - chore: remove duplicate word in comments ([#&#8203;10479](https://github.com/argoproj/argo-cd/issues/10479)) - chore: Add security logging in util/app ([#&#8203;10416](https://github.com/argoproj/argo-cd/issues/10416)) - chore: Add security logging in util/git|helm ([#&#8203;10410](https://github.com/argoproj/argo-cd/issues/10410)) - Add a newline character to fix the render ([#&#8203;10431](https://github.com/argoproj/argo-cd/issues/10431)) - chore: sort users.md ([#&#8203;10387](https://github.com/argoproj/argo-cd/issues/10387)) - chore: infer managed resources health from redis instead of storing it in CRD ([#&#8203;10191](https://github.com/argoproj/argo-cd/issues/10191)) - chore: deprecate argocd-cm plugins ([#&#8203;8117](https://github.com/argoproj/argo-cd/issues/8117)) ([#&#8203;10341](https://github.com/argoproj/argo-cd/issues/10341)) - chore: add security logging and cwe fields ([#&#8203;10256](https://github.com/argoproj/argo-cd/issues/10256)) - chore: Ignore VERSION file for Snyk scan ([#&#8203;10363](https://github.com/argoproj/argo-cd/issues/10363)) - chore: downgrade go version to v1.18 ([#&#8203;10351](https://github.com/argoproj/argo-cd/issues/10351)) - chore: Don't run snyk report in clones ([#&#8203;10323](https://github.com/argoproj/argo-cd/issues/10323)) - ci: Update K3s version matrix in e2e tests ([#&#8203;10313](https://github.com/argoproj/argo-cd/issues/10313)) - chore: upgrade helm to most recent version (v3.9.3) ([#&#8203;10296](https://github.com/argoproj/argo-cd/issues/10296)) - chore: upgrade redis-ha chart to 4.17.8, HAProxy v2.6.2 ([#&#8203;10032](https://github.com/argoproj/argo-cd/issues/10032)) ([#&#8203;10297](https://github.com/argoproj/argo-cd/issues/10297)) - chore: improve logs in util/argo/argo.go ([#&#8203;10271](https://github.com/argoproj/argo-cd/issues/10271)) - chore: Bump version in master to 2.5.0 ([#&#8203;10266](https://github.com/argoproj/argo-cd/issues/10266)) - chore(deps): bump terser from 5.12.1 to 5.14.2 in /ui ([#&#8203;10064](https://github.com/argoproj/argo-cd/issues/10064)) - chore: improve argocd app delete ([#&#8203;10160](https://github.com/argoproj/argo-cd/issues/10160)) - proposal: Applications outside argocd namespace ([#&#8203;6409](https://github.com/argoproj/argo-cd/issues/6409)) - chore: cleanup remnants of snyk scan removal ([#&#8203;10225](https://github.com/argoproj/argo-cd/issues/10225)) - chore: no non-container scans in workflow (scan limit hit) ([#&#8203;10222](https://github.com/argoproj/argo-cd/issues/10222)) - chore: Upgrade Golang to 1.19 ([#&#8203;10176](https://github.com/argoproj/argo-cd/issues/10176)) ([#&#8203;10186](https://github.com/argoproj/argo-cd/issues/10186)) - chore: fix some typos ([#&#8203;10217](https://github.com/argoproj/argo-cd/issues/10217)) - chore: upgrade dex to distroless avoid CVE-2022-2097/CVE-2022-30065 ([#&#8203;10203](https://github.com/argoproj/argo-cd/issues/10203)) - chore: fix codegen ([#&#8203;10202](https://github.com/argoproj/argo-cd/issues/10202)) - chore: update redis-ha manifests ([#&#8203;10032](https://github.com/argoproj/argo-cd/issues/10032)) - build: Enable optional skipping of building test-tools-image ([#&#8203;10199](https://github.com/argoproj/argo-cd/issues/10199)) - chore: install snyk before generating report ([#&#8203;10158](https://github.com/argoproj/argo-cd/issues/10158)) - chore: upgrade codeql action to v2 ([#&#8203;10165](https://github.com/argoproj/argo-cd/issues/10165)) - chore: no colons in filenames ([#&#8203;10183](https://github.com/argoproj/argo-cd/issues/10183)) - chore: fix sarif upload categories ([#&#8203;10171](https://github.com/argoproj/argo-cd/issues/10171)) - chore: fix typo in image workflow (again) ([#&#8203;10164](https://github.com/argoproj/argo-cd/issues/10164)) - chore: fix typo in image workflow ([#&#8203;10161](https://github.com/argoproj/argo-cd/issues/10161)) - chore: fix codeql category error ([#&#8203;10137](https://github.com/argoproj/argo-cd/issues/10137)) - chore: exclude docs from Sonar check completely ([#&#8203;10142](https://github.com/argoproj/argo-cd/issues/10142)) - chore: exclude docs from Sonar check ([#&#8203;10136](https://github.com/argoproj/argo-cd/issues/10136)) - chore: ignore CVE-2022-0624 - not exploitable in Argo CD ([#&#8203;10128](https://github.com/argoproj/argo-cd/issues/10128)) - test: Add logic to handle for f.Close() for cmd/argocd/commands/admin ([#&#8203;9963](https://github.com/argoproj/argo-cd/issues/9963)) ([#&#8203;10074](https://github.com/argoproj/argo-cd/issues/10074)) - chore: add Snyk scans to docs ([#&#8203;9856](https://github.com/argoproj/argo-cd/issues/9856)) - chore: argocd app create output states whether app exists ([#&#8203;9984](https://github.com/argoproj/argo-cd/issues/9984)) - add securityContext to redis-ha containers ([#&#8203;9930](https://github.com/argoproj/argo-cd/issues/9930)) - chore: spelling: retrieve ([#&#8203;10051](https://github.com/argoproj/argo-cd/issues/10051)) - add logic to handle for f.Close() ([#&#8203;10004](https://github.com/argoproj/argo-cd/issues/10004)) - chore: use manifest version for redis+dex in E2E tests ([#&#8203;9955](https://github.com/argoproj/argo-cd/issues/9955)) ([#&#8203;9959](https://github.com/argoproj/argo-cd/issues/9959)) - chore: upgrade k8s client to v0.24.2 ([#&#8203;9932](https://github.com/argoproj/argo-cd/issues/9932)) - test: check for error messages from CI env ([#&#8203;9953](https://github.com/argoproj/argo-cd/issues/9953)) - block out of bounds symlinks ([#&#8203;9738](https://github.com/argoproj/argo-cd/issues/9738)) ([#&#8203;9843](https://github.com/argoproj/argo-cd/issues/9843)) - chore: Replace deprecated ioutil in CLI code ([#&#8203;9846](https://github.com/argoproj/argo-cd/issues/9846)) - Added health checks for Config Connector resources. ([#&#8203;9878](https://github.com/argoproj/argo-cd/issues/9878)) - chore: Replace deprecated ioutil in util packages ([#&#8203;9848](https://github.com/argoproj/argo-cd/issues/9848)) - chore: Replace deprecated ioutil in hacks ([#&#8203;9851](https://github.com/argoproj/argo-cd/issues/9851)) - refactor: improve context handling in cmd/ ([#&#8203;9860](https://github.com/argoproj/argo-cd/issues/9860)) - chore: Fix import of context package across codebase ([#&#8203;9852](https://github.com/argoproj/argo-cd/issues/9852)) - chore: remove semicolon from end of statement ([#&#8203;9837](https://github.com/argoproj/argo-cd/issues/9837)) - chore: adjust docs ([#&#8203;9829](https://github.com/argoproj/argo-cd/issues/9829)) - Add scmp.com to argo-cd users ([#&#8203;9823](https://github.com/argoproj/argo-cd/issues/9823)) - chore: add k8s v1.24.1 to test matrix ([#&#8203;9714](https://github.com/argoproj/argo-cd/issues/9714)) - chore: upgrade kustomize to 4.5.5 ([#&#8203;9650](https://github.com/argoproj/argo-cd/issues/9650)) - log: debug manifest cache ([#&#8203;9602](https://github.com/argoproj/argo-cd/issues/9602)) - chore: revert adding k8s 1.24.1 to test matrix ([#&#8203;9657](https://github.com/argoproj/argo-cd/issues/9657)) - chore: add k8s v1.24.1 release to test matrix ([#&#8203;9636](https://github.com/argoproj/argo-cd/issues/9636)) - chore: fix typo in godoc string ([#&#8203;9644](https://github.com/argoproj/argo-cd/issues/9644)) - chore: use Ubuntu 22.04 in CI ([#&#8203;9587](https://github.com/argoproj/argo-cd/issues/9587)) - Grupo MasMovil Spain added to users list ([#&#8203;9585](https://github.com/argoproj/argo-cd/issues/9585)) - chore: remove controller liveness probe ([#&#8203;9557](https://github.com/argoproj/argo-cd/issues/9557)) - ci: remove cache from image build ([#&#8203;9564](https://github.com/argoproj/argo-cd/issues/9564)) - Add elementor ([#&#8203;9544](https://github.com/argoproj/argo-cd/issues/9544)) - chore: ignore irrelevant formidable vulnerability ([#&#8203;9470](https://github.com/argoproj/argo-cd/issues/9470)) - add pismo on users ([#&#8203;9532](https://github.com/argoproj/argo-cd/issues/9532)) - Fix radio button click experience problem ([#&#8203;9520](https://github.com/argoproj/argo-cd/issues/9520)) - bump helm version to 3.9.0 ([#&#8203;9486](https://github.com/argoproj/argo-cd/issues/9486)) - chore: Simplified GetRepoHTTPClient function ([#&#8203;9396](https://github.com/argoproj/argo-cd/issues/9396)) - chore: add argocd binary to argocd-test-tool docker image ([#&#8203;9459](https://github.com/argoproj/argo-cd/issues/9459)) ([#&#8203;9467](https://github.com/argoproj/argo-cd/issues/9467)) - bug(gitpod): change Kubebuilder curl ([#&#8203;9097](https://github.com/argoproj/argo-cd/issues/9097)) ([#&#8203;9197](https://github.com/argoproj/argo-cd/issues/9197)) - chore: add GOPKGINYAMLV2-2840885 to snyk ignore list ([#&#8203;9495](https://github.com/argoproj/argo-cd/issues/9495)) - Add GitLab PR generator for applicationset ([#&#8203;9264](https://github.com/argoproj/argo-cd/issues/9264)) - chore: upgrade golangci-lint to v1.46.2 ([#&#8203;9448](https://github.com/argoproj/argo-cd/issues/9448)) - some optimizations for cert.go ([#&#8203;9404](https://github.com/argoproj/argo-cd/issues/9404)) - chore: add labels to notifications controller serviceaccount ([#&#8203;9373](https://github.com/argoproj/argo-cd/issues/9373)) - add reev.com ([#&#8203;9409](https://github.com/argoproj/argo-cd/issues/9409)) - chore: use filepath.Join to get sock path ([#&#8203;9395](https://github.com/argoproj/argo-cd/issues/9395)) - chore: ignore irrelevant go-restful vulnerability ([#&#8203;9347](https://github.com/argoproj/argo-cd/issues/9347)) - use filepath to combire dirs ([#&#8203;9358](https://github.com/argoproj/argo-cd/issues/9358)) - Remove Kubernetes External Secret from docs ([#&#8203;9251](https://github.com/argoproj/argo-cd/issues/9251)) - improved pr generator doc ([#&#8203;9350](https://github.com/argoproj/argo-cd/issues/9350)) - chore: resource state tests ([#&#8203;9307](https://github.com/argoproj/argo-cd/issues/9307)) - chore: Set GITHUB_TOKEN in the test container ([#&#8203;9317](https://github.com/argoproj/argo-cd/issues/9317)) - chore: Pull in recent kubectl to test container ([#&#8203;9316](https://github.com/argoproj/argo-cd/issues/9316)) ### [`v2.4.27`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.27) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.26...v2.4.27) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.27/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.27/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 10 contributions from 4 contributors with 0 features and 3 bug fixes. ##### Bug fixes (3) - fix codegen - fix: log plugin commands in a better format ([#&#8203;12260](https://github.com/argoproj/argo-cd/issues/12260)) - fix: support 'project' filter field for backwards-compatibility ([#&#8203;12594](https://github.com/argoproj/argo-cd/issues/12594)) ##### Documentation (2) - docs: fix version numbers in upgrade notes ([#&#8203;12896](https://github.com/argoproj/argo-cd/issues/12896)) - docs: cleanup HA operator manual ([#&#8203;10409](https://github.com/argoproj/argo-cd/issues/10409)) ([#&#8203;12865](https://github.com/argoproj/argo-cd/issues/12865)) ##### Other (5) - chore(deps): bump actions/setup-go from 3.5.0 to 4.0.0 ([#&#8203;12888](https://github.com/argoproj/argo-cd/issues/12888)) - chore(deps): bump actions/checkout from 3.3.0 to 3.4.0 ([#&#8203;12889](https://github.com/argoproj/argo-cd/issues/12889)) - build: Enable CI checks on PRs to release branches ([#&#8203;12887](https://github.com/argoproj/argo-cd/issues/12887)) - test: wait longer after repo server restarted to avoid errors on s390x ([#&#8203;12839](https://github.com/argoproj/argo-cd/issues/12839)) ([#&#8203;12884](https://github.com/argoproj/argo-cd/issues/12884)) - chore(deps): bump actions/cache from 3.2.6 to 3.3.1 ([#&#8203;12845](https://github.com/argoproj/argo-cd/issues/12845)) ### [`v2.4.26`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.26) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.25...v2.4.26) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.26/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.26/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 3 contributions from 3 contributors (1 of them new) with 0 features and 1 bug fixes. A special thanks goes to the 1 new contributor: - Shaw Ho ##### Bug fixes (1) - fix: Fix the applicationset kind typo ([#&#8203;12690](https://github.com/argoproj/argo-cd/issues/12690)) ##### Documentation (1) - docs: Fix Jenkins guide link in understand_the_basics.md ([#&#8203;12814](https://github.com/argoproj/argo-cd/issues/12814)) ([#&#8203;12816](https://github.com/argoproj/argo-cd/issues/12816)) ##### Other (1) - chore: upgrade https lib to avoid CVE-2022-41723 ### [`v2.4.25`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.25) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.24...v2.4.25) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.25/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.25/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 11 contributions from 5 contributors with 0 features and 3 bug fixes. ##### Bug fixes (3) - fix: Validate chat button url only when chatUrl is set ([#&#8203;12655](https://github.com/argoproj/argo-cd/issues/12655)) ([#&#8203;12749](https://github.com/argoproj/argo-cd/issues/12749)) ([#&#8203;12759](https://github.com/argoproj/argo-cd/issues/12759)) - fix: suppress Kubernetes API deprecation warnings from application controller ([#&#8203;12067](https://github.com/argoproj/argo-cd/issues/12067)) - fix: ensure certificate gets updated on reload ([#&#8203;12076](https://github.com/argoproj/argo-cd/issues/12076)) ([#&#8203;12694](https://github.com/argoproj/argo-cd/issues/12694)) ##### Documentation (3) - docs: Update kustomization example ([#&#8203;12555](https://github.com/argoproj/argo-cd/issues/12555)) ([#&#8203;12740](https://github.com/argoproj/argo-cd/issues/12740)) - docs: unset finalizer before deleting an app non-cascadingly ([#&#8203;10949](https://github.com/argoproj/argo-cd/issues/10949)) ([#&#8203;12735](https://github.com/argoproj/argo-cd/issues/12735)) - docs: link directly to HA manifests ([#&#8203;11970](https://github.com/argoproj/argo-cd/issues/11970)) ([#&#8203;12684](https://github.com/argoproj/argo-cd/issues/12684)) ##### Other (5) - chore: fix whitespace for codegen - chore(deps): bump actions/cache from 3.2.5 to 3.2.6 ([#&#8203;12567](https://github.com/argoproj/argo-cd/issues/12567)) - chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 ([#&#8203;12689](https://github.com/argoproj/argo-cd/issues/12689)) - chore: upgrade redis to 7.0.8 to avoid several CVEs ([#&#8203;12627](https://github.com/argoproj/argo-cd/issues/12627)) - chore: upgrade haproxy to 2.0.31 to avoid multiple CVEs ([#&#8203;12629](https://github.com/argoproj/argo-cd/issues/12629)) ### [`v2.4.24`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.24) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.23...v2.4.24) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.24/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.24/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 13 contributions from 11 contributors (6 of them new) with 0 features and 4 bug fixes. A special thanks goes to the 6 new contributors: - atusy - Dmitriy Mann - Michael Chen - schakrad - Wojtek Cichoń - Zadkiel Aharonian ##### Bug fixes (4) - fix: traverse generator tree when getting requeue time ([#&#8203;12407](https://github.com/argoproj/argo-cd/issues/12407)) ([#&#8203;12409](https://github.com/argoproj/argo-cd/issues/12409)) - fix: valid username in webhook URL matching regex ([#&#8203;9055](https://github.com/argoproj/argo-cd/issues/9055)) ([#&#8203;12203](https://github.com/argoproj/argo-cd/issues/12203)) - fix(security): add url validation for help chat ([#&#8203;9956](https://github.com/argoproj/argo-cd/issues/9956)) ([#&#8203;10417](https://github.com/argoproj/argo-cd/issues/10417)) - fix: show full event message in pod event view ([#&#8203;12104](https://github.com/argoproj/argo-cd/issues/12104)) ([#&#8203;12267](https://github.com/argoproj/argo-cd/issues/12267)) ##### Documentation (5) - docs: FAQ improvements ([#&#8203;12146](https://github.com/argoproj/argo-cd/issues/12146)) - docs: fix typo ([#&#8203;12389](https://github.com/argoproj/argo-cd/issues/12389)) - docs: Updated link to Jenkins and added GitHub Actions link ([#&#8203;12465](https://github.com/argoproj/argo-cd/issues/12465)) - docs: fix typo in health documentation ([#&#8203;12497](https://github.com/argoproj/argo-cd/issues/12497)) - docs: Clarify cascade delete of resource and finalizer ([#&#8203;11064](https://github.com/argoproj/argo-cd/issues/11064)) ##### Other (4) - chore: use registry.k8s.io instead of k8s.gcr.io ([#&#8203;12362](https://github.com/argoproj/argo-cd/issues/12362)) - chore(deps): bump imjasonh/setup-crane from 0.2 to 0.3 ([#&#8203;12504](https://github.com/argoproj/argo-cd/issues/12504)) - chore(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 ([#&#8203;12308](https://github.com/argoproj/argo-cd/issues/12308)) - chore(deps): bump actions/cache from 3.2.4 to 3.2.5 ([#&#8203;12433](https://github.com/argoproj/argo-cd/issues/12433)) ### [`v2.4.23`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.23) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.22...v2.4.23) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.23/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.23/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 4 contributions from 3 contributors with 0 features and 0 bug fixes. ##### Security (1) - CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j) ##### Documentation (2) - docs: Fix heading to not include a v for the second version ([#&#8203;12218](https://github.com/argoproj/argo-cd/issues/12218)) - docs: add destination.name example ([#&#8203;12242](https://github.com/argoproj/argo-cd/issues/12242)) ##### Other (1) - chore: add dist to path to use our kustomize version ([#&#8203;12352](https://github.com/argoproj/argo-cd/issues/12352)) ### [`v2.4.22`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.22) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.21...v2.4.22) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.22/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.22/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 8 contributions from 7 contributors (3 of them new) with 0 features and 2 bug fixes. A special thanks goes to the 3 new contributors: - Adam Jensen - James Brady - Nobuo Takizawa ##### Bug fixes (2) - fix: Upgrade gopkg.in/yaml.v2 to v2.2.4 ([#&#8203;12247](https://github.com/argoproj/argo-cd/issues/12247)) - fix: Upgrade `goutils` to `v1.1.1` \[release-2.4] ([#&#8203;12219](https://github.com/argoproj/argo-cd/issues/12219)) ([#&#8203;12222](https://github.com/argoproj/argo-cd/issues/12222)) ##### Documentation (3) - docs: Fix copy that refers to a different CLI flag ([#&#8203;12236](https://github.com/argoproj/argo-cd/issues/12236)) - docs: Clarify directory recursion ([#&#8203;12037](https://github.com/argoproj/argo-cd/issues/12037)) - docs: Fix list formatting in "Resource Actions" docs page ([#&#8203;12061](https://github.com/argoproj/argo-cd/issues/12061)) ##### Other (3) - chore(deps): bump docker/setup-buildx-action from 2.2.1 to 2.4.0 ([#&#8203;12227](https://github.com/argoproj/argo-cd/issues/12227)) - chore(deps): bump actions/cache from 3.2.3 to 3.2.4 ([#&#8203;12228](https://github.com/argoproj/argo-cd/issues/12228)) - chore: Update dex's image tag that is forgotten to be updated ([#&#8203;12234](https://github.com/argoproj/argo-cd/issues/12234)) ### [`v2.4.21`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.21) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.20...v2.4.21) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.21/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.21/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 3 contributions from 3 contributors (1 of them new) with 0 features and 2 bug fixes. A special thanks goes to the 1 new contributors: - Eugen Friedland ##### Bug fixes (2) - fix(health): Handling SparkApplication CRD health status if dynamic allocation is enabled ([#&#8203;7557](https://github.com/argoproj/argo-cd/issues/7557)) ([#&#8203;11522](https://github.com/argoproj/argo-cd/issues/11522)) - fix: add CLI client IDs to default OIDC allowed audiences ([#&#8203;12170](https://github.com/argoproj/argo-cd/issues/12170)) ([#&#8203;12179](https://github.com/argoproj/argo-cd/issues/12179)) ##### Other (1) - chore: Refactor terminal handler to use auth-middleware ([#&#8203;12052](https://github.com/argoproj/argo-cd/issues/12052)) ### [`v2.4.20`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.20) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.19...v2.4.20) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.20/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.20/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Known Issues If you use the bundled Dex instance for SSO, a bug in 2.4.20 will prevent CLI clients from successfully authenticating with the Argo CD API. A [patch](https://github.com/argoproj/argo-cd/issues/12170) for the bug is being tested as of Friday, Jan 27, and a fix will be released shortly. #### Changes This release includes 2 contributions from 2 contributors with 0 features and 0 bug fixes. ##### Security (1) - CRITICAL: JWT audience claim is not verified ([GHSA-q9hr-j4rf-8fjc](https://github.com/argoproj/argo-cd/security/advisories/GHSA-q9hr-j4rf-8fjc)) ##### Other (1) - chore: disable docker sbom and attestations ([#&#8203;12059](https://github.com/argoproj/argo-cd/issues/12059)) ### [`v2.4.19`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.19) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.18...v2.4.19) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.19/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.19/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 28 contributions from 12 contributors (4 of them new) with 0 features and 5 bug fixes. A special thanks goes to the 4 new contributors: - Aymen Ben Tanfous - Gaël Jourdan-Weil - Matt Clegg - yanyx ##### Bug fixes (5) - fix: Fixed matrix requeueAfterSeconds for PR ([#&#8203;10914](https://github.com/argoproj/argo-cd/issues/10914)) ([#&#8203;10915](https://github.com/argoproj/argo-cd/issues/10915)) - fix: upgrade qs to avoid CVE-2022-24999 - fix: upgrade superagent to resolve potential CVE ([#&#8203;9494](https://github.com/argoproj/argo-cd/issues/9494)) - fix: ssa e2e tests failing after updating to kubectl 1.26 ([#&#8203;11753](https://github.com/argoproj/argo-cd/issues/11753)) - fix: sign container images by digest ([#&#8203;11151](https://github.com/argoproj/argo-cd/issues/11151)) ##### Documentation (5) - docs: note risks of secret-injection plugins ([#&#8203;11617](https://github.com/argoproj/argo-cd/issues/11617)) - docs: clarify project destination possibilities ([#&#8203;11706](https://github.com/argoproj/argo-cd/issues/11706)) - docs: correct SSO configuration URL in example configmap ([#&#8203;11720](https://github.com/argoproj/argo-cd/issues/11720)) - docs: Update example dockerfile ([#&#8203;11721](https://github.com/argoproj/argo-cd/issues/11721)) - docs: clarify that all labels must exist ([#&#8203;11693](https://github.com/argoproj/argo-cd/issues/11693)) ##### Other (18) - chore: upgrade github.com/prometheus/client_golang to v1.11.1 to avoid CVE-2022-21698 ([#&#8203;12015](https://github.com/argoproj/argo-cd/issues/12015)) - chore: fix bad merge - chore(deps): bump actions/cache from 3.2.2 to 3.2.3 ([#&#8203;11928](https://github.com/argoproj/argo-cd/issues/11928)) - chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 ([#&#8203;11895](https://github.com/argoproj/argo-cd/issues/11895)) - chore: fix codegen - chore: fix codegen - chore(deps): bump actions/setup-node from 3.5.1 to 3.6.0 ([#&#8203;11896](https://github.com/argoproj/argo-cd/issues/11896)) - chore(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 ([#&#8203;11929](https://github.com/argoproj/argo-cd/issues/11929)) - Revert "fix: ssa e2e tests failing after updating to kubectl 1.26 ([#&#8203;11753](https://github.com/argoproj/argo-cd/issues/11753))" - chore: upgrade redis to 7.0.7 to avoid CVE-2022-3996 ([#&#8203;11925](https://github.com/argoproj/argo-cd/issues/11925)) - chore: Upgrade shipped version of Redis to 7.0.5 to fix CVE-2022-35951 ([#&#8203;10702](https://github.com/argoproj/argo-cd/issues/10702)) - chore(deps): bump actions/cache from 3.2.0 to 3.2.2 ([#&#8203;11839](https://github.com/argoproj/argo-cd/issues/11839)) - chore(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 ([#&#8203;11894](https://github.com/argoproj/argo-cd/issues/11894)) - chore(deps): bump actions/cache from 3.0.11 to 3.2.0 ([#&#8203;11809](https://github.com/argoproj/argo-cd/issues/11809)) - chore: fix lint error ([#&#8203;11788](https://github.com/argoproj/argo-cd/issues/11788)) - chore: get image digest in seperate step ([#&#8203;11778](https://github.com/argoproj/argo-cd/issues/11778)) - chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 ([#&#8203;11697](https://github.com/argoproj/argo-cd/issues/11697)) - doc: correct kustomize demo path ([#&#8203;11762](https://github.com/argoproj/argo-cd/issues/11762)) ### [`v2.4.18`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.18) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.17...v2.4.18) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.18/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.18/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 29 contributions from 12 contributors (6 of them new) with 0 features and 10 bug fixes. A special thanks goes to the 6 new contributors: - Edmund Rhudy - Justin Marquis - Michael Merrill - Michael Vittrup Larsen - Nicholas Morey - Shuai Zhang ##### Bug fixes (10) - fix: pin kubectl version ([#&#8203;11726](https://github.com/argoproj/argo-cd/issues/11726)) - fix(helm): login OCI Helm dependencies correctly ([#&#8203;8563](https://github.com/argoproj/argo-cd/issues/8563)) ([#&#8203;11327](https://github.com/argoproj/argo-cd/issues/11327)) - fix(helm): helm v3 doesn't have these flags ([#&#8203;11100](https://github.com/argoproj/argo-cd/issues/11100)) ([#&#8203;11540](https://github.com/argoproj/argo-cd/issues/11540)) - fix: add missing changes for bitbucket cloud SCM provider ([#&#8203;10143](https://github.com/argoproj/argo-cd/issues/10143)) ([#&#8203;11150](https://github.com/argoproj/argo-cd/issues/11150)) - fix: expose missing ReactDOM to enable extensions implementation ([#&#8203;11495](https://github.com/argoproj/argo-cd/issues/11495)) - fix: application stuck in infinite reconciliation loop if using wrong project ([#&#8203;11246](https://github.com/argoproj/argo-cd/issues/11246)) - fix: set HELM_CONFIG_HOME dir for oci registry authentication; fixes: [#&#8203;11284](https://github.com/argoproj/argo-cd/issues/11284) ([#&#8203;11285](https://github.com/argoproj/argo-cd/issues/11285)) - fix: UI can now get clusters with slashes in name ([#&#8203;9812](https://github.com/argoproj/argo-cd/issues/9812)) ([#&#8203;9813](https://github.com/argoproj/argo-cd/issues/9813)) - fix: allow resolving repo root as jsonnet lib path ([#&#8203;11119](https://github.com/argoproj/argo-cd/issues/11119)) - fix: use non distroless image for dex ([#&#8203;11219](https://github.com/argoproj/argo-cd/issues/11219)) ##### Documentation (4) - docs: Clarification of the create namespace feature ([#&#8203;11723](https://github.com/argoproj/argo-cd/issues/11723)) - docs: kustomize has access to build environment ([#&#8203;11643](https://github.com/argoproj/argo-cd/issues/11643)) - docs: add warning for user when using replace sync option ([#&#8203;11566](https://github.com/argoproj/argo-cd/issues/11566)) - docs: Add skipCrds and ignoreMissingValueFiles to application.yaml example ([#&#8203;11565](https://github.com/argoproj/argo-cd/issues/11565)) ##### Other (15) - chore: fix flaky e2e test for immutable fields ([#&#8203;11685](https://github.com/argoproj/argo-cd/issues/11685)) - chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 ([#&#8203;11679](https://github.com/argoproj/argo-cd/issues/11679)) - chore: fix flaky e2e test ([#&#8203;11670](https://github.com/argoproj/argo-cd/issues/11670)) - chore: fix flaky e2e test ([#&#8203;11509](https://github.com/argoproj/argo-cd/issues/11509)) ([#&#8203;11654](https://github.com/argoproj/argo-cd/issues/11654)) - chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 in /ui ([#&#8203;11533](https://github.com/argoproj/argo-cd/issues/11533)) - Revert "fix: application stuck in infinite reconciliation loop if using wrong project ([#&#8203;11246](https://github.com/argoproj/argo-cd/issues/11246))" - chore(deps): bump actions/setup-go from 3.3.1 to 3.4.0 ([#&#8203;11535](https://github.com/argoproj/argo-cd/issues/11535)) - chore(deps): bump softprops/action-gh-release from 0.1.14 to 0.1.15 ([#&#8203;11534](https://github.com/argoproj/argo-cd/issues/11534)) - chore: pin actions ([#&#8203;11360](https://github.com/argoproj/argo-cd/issues/11360)) - chore: use set-output environment file ([#&#8203;10999](https://github.com/argoproj/argo-cd/issues/10999)) - chore(deps): bump actions/upload-artifact from 2 to 3 ([#&#8203;11365](https://github.com/argoproj/argo-cd/issues/11365)) - chore(deps): bump actions/setup-node from 1 to 3 ([#&#8203;11364](https://github.com/argoproj/argo-cd/issues/11364)) - chore(deps): bump codecov/codecov-action from 1 to 3 ([#&#8203;11362](https://github.com/argoproj/argo-cd/issues/11362)) - chore(deps): bump actions/download-artifact from 2 to 3 ([#&#8203;11361](https://github.com/argoproj/argo-cd/issues/11361)) - chore: use --password-stdin for docker login ([#&#8203;11331](https://github.com/argoproj/argo-cd/issues/11331)) ### [`v2.4.17`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.17) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.16...v2.4.17) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.17/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.17/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 1 contributions from 1 contributors with 0 features and 1 bug fixes. ##### Bug fixes - fix: handle apiGroup updates in resource-tracking ([#&#8203;11012](https://github.com/argoproj/argo-cd/issues/11012)) ### [`v2.4.16`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.16) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.15...v2.4.16) ##### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.16/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.16/manifests/ha/install.yaml ``` ##### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets.md/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` ##### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ##### Changes This release includes 9 contributions from 6 contributors (4 of them new) with 0 features and 2 bug fixes. A special thanks goes to the 4 new contributors: - Alex Eftimie - Allex - Chromo-residuum-opec - Jessie Teng ##### Security fixes This release includes openssl version [3.0.2-0ubuntu1.7](https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.7), which patches [high-severity vulnerabilities](https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/). ##### Bug fixes - fix: Update custom health check for kiali.io/Kiali ([#&#8203;10995](https://github.com/argoproj/argo-cd/issues/10995)) - fix: Resource list in sync page msg [style#&#8203;10887](https://github.com/style/argo-cd/issues/10887) ([#&#8203;10970](https://github.com/argoproj/argo-cd/issues/10970)) ##### Documentation - docs: fix 'bellow' typos ([#&#8203;11038](https://github.com/argoproj/argo-cd/issues/11038)) - docs: mention that OCI helm does not support version ranges ([#&#8203;11026](https://github.com/argoproj/argo-cd/issues/11026)) ##### Other - chore: don't generate release notes ([#&#8203;11141](https://github.com/argoproj/argo-cd/issues/11141)) - chore: fix CI ([#&#8203;11022](https://github.com/argoproj/argo-cd/issues/11022)) - chore: fix e2e ([#&#8203;11005](https://github.com/argoproj/argo-cd/issues/11005)) - chore: upgrade actions/checkout to v3, i.e. Node.js 16 ([#&#8203;10947](https://github.com/argoproj/argo-cd/issues/10947)) - chore: release signature of sbom ([#&#8203;10969](https://github.com/argoproj/argo-cd/issues/10969)) ### [`v2.4.15`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.15) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.14...v2.4.15) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.15/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.15/manifests/ha/install.yaml ``` #### Release signatures All Argo CD container images and CLI binaries are signed by cosign. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets.md/) on how to verify the signatures. ```shell -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw== -----END PUBLIC KEY----- ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes This release includes 24 contributions from 15 contributors (10 of them new) with 9 bug fixes. A special thanks goes to the 10 new contributors: - Aiman Fatima - Chris Davis - Eddie Knight - Lars Kellogg-Stedman - Matt Morrison - Mayursinh Sarvaiya - Nir Shtein - Richard Jennings - rumstead - Sakshi Jain ##### Bug fixes - fix: Display pointer on labels for resource names in sync panel ([#&#8203;10959](https://github.com/argoproj/argo-cd/issues/10959)) - fix: Use os.PathSeparator instead of hard-coded string to resolve local file paths ([#&#8203;10945](https://github.com/argoproj/argo-cd/issues/10945)) ([#&#8203;10946](https://github.com/argoproj/argo-cd/issues/10946)) - fix(ui): sync option label doesn't check corresponding box ([#&#8203;10863](https://github.com/argoproj/argo-cd/issues/10863)) ([#&#8203;10876](https://github.com/argoproj/argo-cd/issues/10876)) - fix: clicking `HEAD` in bitbucket leads to a 404 page ([#&#8203;10862](https://github.com/argoproj/argo-cd/issues/10862)) - fix: added css to change cursor to pointer on hover ([#&#8203;10864](https://github.com/argoproj/argo-cd/issues/10864)) ([#&#8203;10867](https://github.com/argoproj/argo-cd/issues/10867)) - fix: consider destination cluster name when validating destinations ([#&#8203;10594](https://github.com/argoproj/argo-cd/issues/10594)) - fix: Add missing statuses to MinIO Tenant health check ([#&#8203;10815](https://github.com/argoproj/argo-cd/issues/10815)) - fix: add applicationset to crds generated by gen-crd-spec ([#&#8203;10833](https://github.com/argoproj/argo-cd/issues/10833)) - fix(ui): Don't jump back to tiles view on app deletion ([#&#8203;8764](https://github.com/argoproj/argo-cd/issues/8764)) ([#&#8203;10826](https://github.com/argoproj/argo-cd/issues/10826)) ##### Documentation - docs: appset PR generator docs fixes ([#&#8203;10567](https://github.com/argoproj/argo-cd/issues/10567)) - docs: add link to 2.4-2.5 upgrade guide ([#&#8203;10808](https://github.com/argoproj/argo-cd/issues/10808)) - docs: more docs for directory apps ([#&#8203;10879](https://github.com/argoproj/argo-cd/issues/10879)) - docs: clarify how default RBAC policy works ([#&#8203;10896](https://github.com/argoproj/argo-cd/issues/10896)) - docs: fix examples for ArgoCD ApplicationSet Git Generator ([#&#8203;10857](https://github.com/argoproj/argo-cd/issues/10857)) - docs: remove unused plugin config fields ([#&#8203;10304](https://github.com/argoproj/argo-cd/issues/10304)) - docs: fix advice about preferred version in high availability ([#&#8203;10619](https://github.com/argoproj/argo-cd/issues/10619)) - docs: Correct grammar issues in docs on manifest path annotations ([#&#8203;10776](https://github.com/argoproj/argo-cd/issues/10776)) - docs: Update link to resource customizations ([#&#8203;10827](https://github.com/argoproj/argo-cd/issues/10827)) ([#&#8203;10828](https://github.com/argoproj/argo-cd/issues/10828)) ##### Other - chore: add script to generate release notes ([#&#8203;10806](https://github.com/argoproj/argo-cd/issues/10806)) - chore: sign checksums file for release binaries ([#&#8203;10963](https://github.com/argoproj/argo-cd/issues/10963)) - chore: implement signed images ([#&#8203;10925](https://github.com/argoproj/argo-cd/issues/10925)) - chore: upgrade dex to v2.35.3 to avoid CVE-2022-27665 ([#&#8203;10939](https://github.com/argoproj/argo-cd/issues/10939)) - Revert "fix: add applicationset to crds generated by gen-crd-spec ([#&#8203;10833](https://github.com/argoproj/argo-cd/issues/10833))" - chore: Added recommended permissions to github actions workflows ([#&#8203;10812](https://github.com/argoproj/argo-cd/issues/10812)) ### [`v2.4.14`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.14) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.13...v2.4.14) #### Quick Start ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.14/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.14/manifests/ha/install.yaml ``` #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changes ##### Other - chore: upgrade dex to v2.35.1 ([#&#8203;10797](https://github.com/argoproj/argo-cd/issues/10797)) ([#&#8203;10799](https://github.com/argoproj/argo-cd/issues/10799)) ### [`v2.4.13`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.13) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.12...v2.4.13) #### Quick Start ##### Non-HA: ```bash kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.13/manifests/install.yaml ``` ##### HA: ```bash kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.13/manifests/ha/install.yaml ``` ##### Security fixes [CVE-2022-39222](https://github.com/dexidp/dex/security/advisories/GHSA-vh7g-p26c-j2cw) is a backchannel attack against the Dex OIDC provider. If you are impacted Argo CD, an attacker could use the process described in the [vulnerability description](https://github.com/dexidp/dex/security/advisories/GHSA-vh7g-p26c) to steal an Argo CD token from some Argo CD user. The attacker could then impersonate the targeted user and act with the victim's privileges. ##### Am I impacted? This Dex vulnerability impacts Argo CD users who either 1) use the bundled Dex instance for OIDC or 2) use an external Dex instance running Dex <= 2.34.x. If you do not use Dex, then you are not impacted. ##### Bundled Dex To determine if you use the bundled Dex instance, run this command, replacing `argocd` with the namespace where your Argo CD instance is installed: ```shell kubectl get cm -n argocd argocd-cm -ojson | jq '.data["dex.config"] != null' ``` If that command prints `true`, then you use the bundled Dex instance, and you should upgrade. ##### External Dex To determine if you use an external Dex instance, run this command: ```shell kubectl get cm -n argocd argocd-cm -ojson | jq '.data["oidc.config"]' ``` That will print your Argo CD instance's OIDC config. It might be obvious whether the OIDC provider is Dex (for example, the word `dex` might be in the URL). Or you might have to contact whoever manages the configured OIDC provider to ask. You will also have to check with whoever manages the Dex instance to determine if it is still running a vulnerable version (<= 2.34.x). ##### How can I resolve the vulnerability as a user of the bundled Dex instance? Upgrading Dex is the only way to resolve the vulnerability. If you're using the manifests from the argo-cd repository to install Argo CD, the easiest way to resolve the vulnerability is to use the latest release's manifests, which point to the Dex 2.35.0 image. If you do not want to upgrade the full manifest, then you can manually change the Dex image tags in your deployed manifests to use a >= 2.35.0 tag. If you're using the [argo-helm](https://github.com/argoproj/argo-helm) argo-cd chart, you can either upgrade to 5.5.8 which points to the new Dex version, or you can set the `dex.image.tag` parameter to a >= 2.35.0 tag. To confirm that you are using a patched version of Dex, use this command (replacing `argocd` with the namespace where your Argo CD instance is deployed): ```shell kubectl get deployment -n argocd argocd-dex-server -ojson | jq '.spec.template.spec.containers[0].image' ``` The image tag should point to a Dex version >= 2.35.0. ##### Bug fixes - fix: fix subscription health check ([#&#8203;10450](https://github.com/argoproj/argo-cd/issues/10450)) - fix: Fix a nil pointer crash for repo server ([#&#8203;10696](https://github.com/argoproj/argo-cd/issues/10696)) ##### Other changes - docs: add note about multiple sync options on annotation ([#&#8203;10739](https://github.com/argoproj/argo-cd/issues/10739)) - docs: fix broken links in faq.md ([#&#8203;10744](https://github.com/argoproj/argo-cd/issues/10744)) - chore: upgrade Dex to 2.35.0 ([#&#8203;10775](https://github.com/argoproj/argo-cd/issues/10775)) - docs: syncWindows in project.yaml ([#&#8203;10591](https://github.com/argoproj/argo-cd/issues/10591)) - docs: Update Generators-Pull-Request.md ([#&#8203;10643](https://github.com/argoproj/argo-cd/issues/10643)) ([#&#8203;10642](https://github.com/argoproj/argo-cd/issues/10642)) - docs: fix typo in GitHub section ([#&#8203;10723](https://github.com/argoproj/argo-cd/issues/10723)) - chore: upgrade dex to v2.32.1-distroless ([#&#8203;10746](https://github.com/argoproj/argo-cd/issues/10746)) ### [`v2.4.12`](https://github.com/argoproj/argo-cd/releases/tag/v2.4.12) [Compare Source](https://github.com/argoproj/argo-cd/compare/v2.4.11...v2.4.12) #### Quick Start ##### Non-HA: ```bash kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.12/manifests/install.yaml ``` ##### HA: ```bash kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.4.12/manifests/ha/install.yaml ``` ##### Bug fixes - fix: add skip-test-tls flag to optionally skip testing for tls ([#&#8203;9679](https://github.com/argoproj/argo-cd/issues/9679)) (10564) - fix: update deploymentConfig's healthcheck to wait for replicationController to be Available ([#&#8203;10462](https://github.com/argoproj/argo-cd/issues/10462)) - fix: hide terminal on the non-pod resource kind ([#&#8203;9980](https://github.com/argoproj/argo-cd/issues/9980)) ([#&#8203;10556](https://github.com/argoproj/argo-cd/issues/10556)) - fix: appset controller should preserve argocd refresh annotation ([#&#8203;10510](https://github.com/argoproj/argo-cd/issues/10510)) - fix: invalid error handling ([#&#8203;10384](https://github.com/argoproj/argo-cd/issues/10384)) ([#&#8203;10385](https://github.com/argoproj/argo-cd/issues/10385)) ##### Other changes - docs: decision about logs RBAC enforcement in release notes for 2.4 ([#&#8203;10564](https://github.com/argoproj/argo-cd/issues/10564)) - docs: update description of policy.csv example in rbac.md ([#&#8203;10565](https://github.com/argoproj/argo-cd/issues/10565)) - docs: Fix Broken Link in Getting Started Docs ([#&#8203;10585](https://github.com/argoproj/argo-cd/issues/10585)) - docs: remove duplicate word in user-management doc ([#&#8203;10546](https://github.com/argoproj/argo-cd/issues/10546)) - fix: added github and gitlab response mock and replaced external calls ([#&#8203;9305](https://github.com/argoproj/argo-cd/issues/9305)) - test: fix flaky gitea tests ([#&#8203;10354](https://github.com/argoproj/argo-cd/issues/10354)) - fix: Added mock for gitea response in appset PR,SCM generator ([#&#8203;9400](https://github.com/argoproj/argo-cd/issues/9400)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xLjUiLCJ1cGRhdGVkSW5WZXIiOiIzNS4xMC4wIn0=-->
renovate-bot added 1 commit 2022-10-27 16:44:57 +00:00
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build encountered an error Details
9a38152b2b
Update quay.io/argoproj/argocd Docker tag to v2.5.0
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.0 to Update quay.io/argoproj/argocd Docker tag to v2.5.1 2022-11-02 17:45:01 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 9a38152b2b to 7e7d5ea5a2 2022-11-02 17:45:02 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.1 to Update quay.io/argoproj/argocd Docker tag to v2.5.2 2022-11-07 17:43:54 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 7e7d5ea5a2 to 4a5755583c 2022-11-07 17:43:55 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.2 to Update quay.io/argoproj/argocd Docker tag to v2.5.3 2022-11-29 17:43:58 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 4a5755583c to a0b4cf8ca8 2022-11-29 17:43:59 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.3 to Update quay.io/argoproj/argocd Docker tag to v2.5.4 2022-12-09 17:43:41 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from a0b4cf8ca8 to a5c8a6e213 2022-12-09 17:43:43 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.4 to Update quay.io/argoproj/argocd Docker tag to v2.5.5 2022-12-17 17:45:59 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from a5c8a6e213 to 80347bfb03 2022-12-17 17:46:02 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.5 to Update quay.io/argoproj/argocd Docker tag to v2.5.6 2023-01-11 17:44:43 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 80347bfb03 to b4fac457b4 2023-01-11 17:44:45 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.6 to Update quay.io/argoproj/argocd Docker tag to v2.5.7 2023-01-20 17:44:47 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from b4fac457b4 to 73475f81a4 2023-01-20 17:44:49 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.7 to Update quay.io/argoproj/argocd Docker tag to v2.5.8 2023-01-25 17:44:39 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 73475f81a4 to 4720d9c38c 2023-01-25 17:44:42 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.8 to Update quay.io/argoproj/argocd Docker tag to v2.5.9 2023-01-28 17:45:10 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 4720d9c38c to 88f750c0e2 2023-01-28 17:45:12 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.9 to Update quay.io/argoproj/argocd Docker tag to v2.5.10 2023-02-02 17:46:27 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 88f750c0e2 to 54952f1367 2023-02-02 17:46:30 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.5.10 to Update quay.io/argoproj/argocd Docker tag to v2.6.0 2023-02-07 17:46:31 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 54952f1367 to 37aaa2b9af 2023-02-07 17:46:32 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.6.0 to Update quay.io/argoproj/argocd Docker tag to v2.6.1 2023-02-10 17:47:04 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 37aaa2b9af to 518d8b602d 2023-02-10 17:47:06 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.6.1 to Update quay.io/argoproj/argocd Docker tag to v2.6.2 2023-02-16 17:46:42 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 518d8b602d to 81178b6f2b 2023-02-16 17:46:44 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.6.2 to Update quay.io/argoproj/argocd Docker tag to v2.6.3 2023-02-27 17:45:03 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 81178b6f2b to f7da3c3e07 2023-02-27 17:45:05 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.6.3 to Update quay.io/argoproj/argocd Docker tag to v2.6.4 2023-03-08 09:34:12 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from f7da3c3e07 to fc794671dd 2023-03-08 09:34:14 +00:00 Compare
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from fc794671dd to 9f26ee21a9 2023-03-13 18:45:14 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.6.4 to Update quay.io/argoproj/argocd Docker tag to v2.6.5 2023-03-14 18:44:42 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 9f26ee21a9 to ffb9aa9922 2023-03-14 18:44:44 +00:00 Compare
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from ffb9aa9922 to 38255dc0b3 2023-03-16 18:45:18 +00:00 Compare
renovate-bot changed title from Update quay.io/argoproj/argocd Docker tag to v2.6.5 to Update quay.io/argoproj/argocd Docker tag to v2.6.6 2023-03-17 18:44:42 +00:00
renovate-bot force-pushed renovate/quay.io-argoproj-argocd-2.x from 38255dc0b3 to 8d46081068 2023-03-17 18:44:44 +00:00 Compare
tobru closed this pull request 2023-04-02 17:41:07 +00:00
This repo is archived. You cannot comment on pull requests.
No reviewers
No Label
No Milestone
No Assignees
1 Participants
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Reference: tobru/gitops-tbrnt#1157
No description provided.