Download Latest Version sbom.tar.gz (340.6 kB)
Email in envelope

Get an email when there's a new version of Argo CD

Home / v3.4.1
Name Modified Size InfoDownloads / Week
Parent folder
argocd-sbom.intoto.jsonl 2026-05-06 22.9 kB
sbom.tar.gz 2026-05-06 340.9 kB
argocd-cli.intoto.jsonl 2026-05-06 23.8 kB
argocd-darwin-amd64 2026-05-06 225.1 MB
cli_checksums.txt 2026-05-06 605 Bytes
argocd-darwin-arm64 2026-05-06 214.9 MB
argocd-linux-amd64 2026-05-06 219.4 MB
argocd-linux-arm64 2026-05-06 207.3 MB
argocd-linux-s390x 2026-05-06 223.5 MB
argocd-windows-amd64.exe 2026-05-06 221.6 MB
argocd-linux-ppc64le 2026-05-06 215.9 MB
README.md 2026-05-06 59.7 kB
v3.4.1 source code.tar.gz 2026-05-06 24.0 MB
v3.4.1 source code.zip 2026-05-06 26.9 MB
Totals: 14 Items   1.6 GB 0

[!IMPORTANT] Following Helm 3.19.0 change in how Helm interprets K8s cluster version, this Argo CD release contains a change that aligns how Argo CD interprets K8s cluster version with Helm behavior.

Impact: Application Sets with Cluster Generators, that fetch clusters based on their Kubernetes version and use argocd.argoproj.io/auto-label-cluster-info on the cluster secret, need to be updated to use argocd.argoproj.io/kubernetes-version with the vMajor.Minor.Patch format instead of the previous Major.Minor format.

More details here: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.3-3.4/#cluster-version-format-change

Quick Start

Non-HA:

:::shell
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.1/manifests/install.yaml

HA:

:::shell
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

  • [05504d] feat(appset): add Health field to ApplicationSet status (#25753) (Peter Jiang)
  • [f83906] feat(appset): optimize appset controller performance when grabbing cluster secrets (#25624) (#25577) (rumstead)
  • [ed6d2c] feat(controller): Annotation to pause reconciliation for a specific cluster (#26442) (Drew Bailey, Drew Bailey)
  • [3157fb] feat(helm): support wildcard glob patterns for valueFiles (cherry-pick [#26768] for 3.4) (#26919) (argo-cd-cherry-pick-bot[bot], Nitish Kumar)
  • [507289] feat(hydrator): making configurable authorName/Email used for hydration commit (#22847) (#25746) (Aditya Raj)
  • [8ed52b] feat(notification): add appProject access to notification templates (#26437) (#26470) (Aditya Raj)
  • [e1aeb7] feat(ui): AppSet Slide Out Summary (#26490) (Peter Jiang, reggie-k)
  • [5ab598] feat(ui): add annotation filtering support to applications list (#25590) (Ji Kwan)
  • [1391e2] feat(ui): add appset tree-view details page (#26262) (Peter Jiang, reggie-k, Keith Chong)
  • [720857] feat(ui): appset list page and filters (#25837) (Peter Jiang)
  • [ff4597] feat(ui): enable hydrator support in app create panel (#26485) (jwinters01, Alexandre Gaudreault)
  • [121494] feat(ui): support hydrator properties in summary tab (#26152) (jwinters01, Michael Crenshaw)
  • [b41443] feat: Add application filter for operation status to UI (#25636) (Dylan Schlager)
  • [408e99] feat: Allow custom User-Agent headers for Helm repository requests (#25473) (Yugan)
  • [19b41b] feat: ApplicationSet watch API (#26409) (Peter Jiang, nitishfy)
  • [b44216] feat: Document and expose K8S API client environment variables(#8527) (#25145) (gami, Alexandre Gaudreault)
  • [7a3d6f] feat: Implement nmstate health checks (#26506) (#26507) (Sander Tervoert)
  • [585906] feat: add ApplicationSet listResourceEvents API (#25537) (Peter Jiang, Alexy Mantha)
  • [279309] feat: add OTEL instrumentation for authentication and handlers (#25296) (Mike Cutsail, Alexandre Gaudreault)
  • [b7e202] feat: add Prune and Delete as application level sync option (#23370) (Arthur Outhenin-Chalandre)
  • [73b4d9] feat: add --no-install-recommends in argocd-base [#25841] (#25852) (Jakub Rudnik, Nitish Kumar)
  • [13bc5a] feat: add argocd account session-token command (#15277) (#24638) (Alex Eftimie, Alexandre Gaudreault, Peter Jiang)
  • [d8635c] feat: add clear-all button to applications list filters (#26007) (Jaewoo Choi)
  • [c2e594] feat: disable gRPC service config DNS TXT lookups by default (#26077) (Valentin Stoican, Valentin Stoican)
  • [3cb495] feat: expose notifications controller processors count via cmd params (#26798) (Kirill Bilchenko)
  • [c0a2a5] feat: implement application cache synchronization in appset controller (#26578) (Alexander Matyushentsev)
  • [ef75a2] feat: limit max certificates and known hosts in stream parsing (#25777) (Ankit Pramanik)
  • [f85ad1] feat: remove unused reposFilter from Applications list (#24667) (Jaewoo Choi)
  • [6f0de8] feat: update health checks for Numaflow resources (#25698) (Dillen Padhiar)

Bug fixes

  • [9fd02a] Revert "fix: prevent automatic refreshes from informer resync and status updates (cherry-pick [#25290] for 3.4)" (#27402) (Michael Crenshaw)
  • [f4e7a6] [release-3.4] fix: improve perf: switch parentUIDToChildren to map of sets, remove cache rebuild (#26863) (#27110) (Jonathan Ogilvie)
  • [21e13a] fix(UI): show RollingSync step clearly when labels match no step (cherry-pick [#26877] for 3.4) (#26882) (argo-cd-cherry-pick-bot[bot], Atif Ali)
  • [ede922] fix(actions): Use correct annotation for CNPG suspend/resume (#26711) (Rouke Broersma)
  • [6665f9] fix(appcontroller): application controller in core mode fails to sync when server.secretkey is missing (#26793) (#27476) (Anand Francis Joseph)
  • [f45ee2] fix(appset): change appset resource status count to 5000 by default (#26249) (Peter Jiang)
  • [bb894e] fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (#25622) (OpenGuidou)
  • [330077] fix(appset): fix post-generator selector ignoring labels in GoTemplate mode (#26717) (Josef Kolář)
  • [bdc344] fix(appset): update appset resources after creation (#26511) (Peter Jiang)
  • [59f229] fix(ci): Add missing git-lfs installer checksum for ppc64le (#26835) (Oliver Gondža)
  • [cbc7ec] fix(ci): Inconsistent use of IMAGE_REGISTRY and IMAGE_NAMESPACE Makefile variables (#25846) (#25860) (dudinea)
  • [225348] fix(ci): Remove stale label when Issue/PR is updated (#26452) (S Kevin Joe Harris)
  • [e70034] fix(ci): add .gitkeep to images dir (cherry-pick [#26892] for 3.4) (#26912) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
  • [4a5d3a] fix(ci): add gitops-engine unit tests to CI (#25863) (Peter Jiang)
  • [92c538] fix(ci): ensure cherry-pick commits include DCO sign-off (#26124) (Anagha S Devan)
  • [aadf2a] fix(ci): fix deleting files on linux in make build-ui (#26134) (#26135) (dudinea)
  • [946a3a] fix(ci): fix make image DEV_IMAGE=true on non-amd64 architecture (#25897) (#25898) (dudinea, Nitish Kumar)
  • [b7f9f6] fix(ci): run yarn install with --frozen-lockfile (cherry-pick [#27099] for 3.4) (#27350) (dudinea)
  • [a19a83] fix(cli): uses DrySource revision for app diff/manifests with sourceHydrator (#23817) (cherry-pick [#24670] for 3.4) (#27483) (argo-cd-cherry-pick-bot[bot], Aditya Raj)
  • [956a6a] fix(controller): handle comma-separated hook annotations for PreDelete/PostDelete hooks (#26420) (Linghao Su)
  • [f50abb] fix(controller): reduce secret deepcopies and deserialization (#27049) (cherry-pick release-3.4) (#27132) (rumstead)
  • [af05c5] fix(dashboards): Correct job label for the Controller Telemetry Panel (#26548) (Daniel Barnes)
  • [986cdf] fix(dev): skip Tilt rebuild on test file changes (#26624) (Nitish Kumar)
  • [63698b] fix(dex): run as user 1001 (#26726) (#26757) (Michael Crenshaw)
  • [8a507b] fix(dex): run as user 1001 (#26726) (#26775) (Michael Crenshaw)
  • [99e29c] fix(docs): Fix manifest path in Source Hydrator docs (cherry-pick [#27123] for 3.4) (#27166) (argo-cd-cherry-pick-bot[bot], Oliver Gondža)
  • [3eeebd] fix(docs): PR title guide from refactor to chore and reformat json (#26450) (Jaewoo Choi)
  • [d66ad4] fix(docs): update other sections of feature maturity to match feature status in overview (#26411) (Kanika Rana)
  • [1dc85e] fix(engine): always preserve sync status for hooks (#25692) (Alexandre Gaudreault, Regina Voloshin, github-actions[bot], reggie-k, dependabot[bot], renovate[bot], Afzal Ansari, Blake Pettersson, Julie Vogelman, Michael Crenshaw)
  • [a1d68c] fix(engine): correctly set prune confirmation message in setRunningPhase (#25915) (Arthur Outhenin-Chalandre)
  • [95d19f] fix(engine): improve operation phase messages (#25668) (Alexandre Gaudreault)
  • [825971] fix(health): app missing health only when all resources are missing (#23995) (#25962) (Alexandre Gaudreault, Peter Jiang)
  • [a22f33] fix(health): configconnectorcontext and configconnector (#26308) (#26309) (Niclas Mietz)
  • [6eea55] fix(health): use note.drySha when available (#26698) (Michael Crenshaw)
  • [afdf99] fix(helm): Improve error message when helm cmd fails (#26159) (Oliver Gondža)
  • [67d12e] fix(hook): Fixed hook code issues that caused stuck applications on "Deleting" state (Issues [#18355] and [#17191]) (cherry-pick [#26724] for 3.4) (#27257) (argo-cd-cherry-pick-bot[bot], Nikolaos Astyrakakis)
  • [228378] fix(hooks): always remove finalizers (#23226) (#25916) (Alexandre Gaudreault, Leonardo Luz Almeida)
  • [67712c] fix(hydrator): .gitattributes include deeply nested files (#25870) (#26011) (Michael Crenshaw)
  • [345336] fix(hydrator): Fix compilation error (#26024) (Oliver Gondža)
  • [ef40ba] fix(hydrator): empty links for failed operation (#25025) (#26014) (Michael Crenshaw)
  • [6f2197] fix(hydrator): git fetch needs creds (#25727) (#25738) (Michael Crenshaw)
  • [a439c6] fix(hydrator): hydrated sha missing on no-ops (#25694) (#25695) (Michael Crenshaw)
  • [6994a4] fix(hydrator): pass destination.namespace to manifest rendering (#25478) (#25699) (Sean Liao)
  • [33247b] fix(hydrator): preserve all source type fields in GetDrySource() (cherry-pick [#27189] for 3.4) (#27196) (argo-cd-cherry-pick-bot[bot], Alexandre Gaudreault)
  • [0a2ae9] fix(hydrator): race when pushing notes (#25700) (Michael Crenshaw)
  • [e5e00d] fix(hydrator): use refresh paths from drySource when source hydration is enabled (#25516) (Codey Jenkins, pbhatnagar-oss, Alexandre Gaudreault)
  • [fee696] fix(makefile): Improve performance of make lint-local and dependent goals (#26025) (Oliver Gondža)
  • [4fabbc] fix(metrics): more consistent oci metrics (#25549) (Blake Pettersson)
  • [de99b7] fix(reposerver): make temp dir cleanup best-effort in TestGenerateManifestsHelmWithRefs_CachedNoLsRemote (#26742) (Nitish Kumar)
  • [8739f9] fix(reposerver): using timeouts in http transport for Github App authentication (#26762) (Anand Francis Joseph)
  • [0a3f63] fix(server): Avoid error when attempting a second delete operation (cherry-pick [#27495] for 3.4) (#27499) (argo-cd-cherry-pick-bot[bot], Taylor Thomas, Blake Pettersson)
  • [a244f7] fix(server): Ensure OIDC config is refreshed at server restart (cherry-pick [#26913] for 3.4) (#27115) (argo-cd-cherry-pick-bot[bot], OpenGuidou)
  • [28b90a] fix(server): OIDC config via secrets fails (#18269) (#26214) (Valéry Fouques)
  • [5ed403] fix(server): fix find container logic for terminal (cherry-pick [#26858] for 3.4) (#26933) (argo-cd-cherry-pick-bot[bot], Linghao Su)
  • [d9c83d] fix(server): invalidate JWT tokens on logout (#26388) (Anand Francis Joseph)
  • [df3be1] fix(server): update resourceVersion on Terminate retry (#25650) (Michael Crenshaw)
  • [24615c] fix(state): fix(controller): display correct SyncWave for hook resources [#26208] (#26240) (Linghao Su)
  • [aced2b] fix(ui): Improve message on self-healing disabling panel (#26977) (cherry-pick [#26978] for 3.4) (#26980) (argo-cd-cherry-pick-bot[bot], Alberto Chiusole)
  • [eecac8] fix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (cherry-pick [#27097] for 3.4) (#27363) (argo-cd-cherry-pick-bot[bot], Karim Farid, Blake Pettersson)
  • [971bf5] fix(ui): Parameters tab should correctly show dry source parameters (#26179) (jwinters01, Alexandre Gaudreault)
  • [8e636b] fix(ui): add previous option to download logs functionality (#26427) (Linghao Su)
  • [96bfc1] fix(ui): convert yaml-editor to functional component (#24921) (Mike, Michael Crenshaw, Alexandre Gaudreault)
  • [58a6f8] fix(ui): handle 401 error in stream (cherry-pick [#26917] for 3.4) (#27228) (argo-cd-cherry-pick-bot[bot], Linghao Su)
  • [ae3430] fix(ui): improve filter autocomplete performance for large app counts (#15087) (#26082) (Rohan K)
  • [5deef6] fix(ui): include _-prefixed dirs in embedded assets (cherry-pick [#26589] for 3.4) (#26909) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)
  • [c9a5a7] fix(ui): make yaml editor outline button opaque (#25748) (Jaewoo Choi)
  • [a903bc] fix(ui): monaco-editor search scroll positioning fix (#26638) (#26639) (Oleksandr Saulyak)
  • [84f944] fix(ui): prevent crash when navigating between Applications and Appli… (#26245) (Peter Jiang)
  • [716339] fix(ui): prevent log viewer crash on malformed stream packets issue [#26023] (#26226) (Luis Baronceli)
  • [cc3b88] fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick [#27553] for 3.4) (#27564) (argo-cd-cherry-pick-bot[bot], Honglian You)
  • [f5de84] fix(ui): relayout Monaco editor on window resize (#25784) (Jaewoo Choi)
  • [fd3c88] fix(ui): remove createApplication option in write repo credential list (#23550) (Linghao Su)
  • [93c736] fix(ui): remove excess dot (#25816) (Josh Soref)
  • [2f4c5b] fix(ui): show filter-empty state on repos list (#26160) (Jaewoo Choi)
  • [91e9b2] fix(ui): show full labels, projects, clusters, and namespaces on hover in sidebar (#7520) (#24723) (Aditya Raj, jwinters01)
  • [a76a87] fix(ui): standard resource icons are not displayed properly (#26216) (#26228) (Linghao Su)
  • [d11c99] fix(ui): update AppSet UI for watch API and remove unused filters (#26631) (Peter Jiang)
  • [6c043d] fix: Fix excessive ls-remote requests on monorepos with Auto Sync enabled apps (26277) (#26278) (dudinea, Dan Garfield)
  • [61c8ce] fix: [#25313] remove --client from helm version command (#25740) (Jesse Hitch)
  • [054538] fix: AAD Domain Hint Improvement (fixes [#18066]) (#24639) (jhansi, pjmanda, Nitish Kumar, jhansireddy01)
  • [696a18] fix: Add X-Frame-Options and CSP headers to Swagger UI endpoints (cherry-pick [#26521] for 3.4) (#27153) (argo-cd-cherry-pick-bot[bot], Rohan Sood, rohansood10, Blake Pettersson, Copilot)
  • [86e42f] fix: AppProject finalizer should consider apps in all allowed namespaces (#24347) (#26416) (Dhruvang Makadia)
  • [f7b24b] fix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick [#27265] for 3.4) (#27526) (argo-cd-cherry-pick-bot[bot], Xiangjing Li)
  • [b66dea] fix: Hook resources not created at PostSync when configured with PreDelete PostDelete hooks (cherry-pick [#26996] for 3.4) (#26998) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)
  • [f6d00b] fix: Only show please update resource specification message when spec… (#25066) (Josh Soref)
  • [472d50] fix: OpenTelemetryCollector health check shows 0/0 for mode: daemonset (#26391) (tank.500m)
  • [e168d8] fix: Revert "fix(ci): ensure cherry-pick commits include DCO sign-off" (#26124) (#26243) (Kanika Rana)
  • [f3d0c1] fix: Toggle automated.enabled to disable auto-sync for rollbacks (#25719) (Daniel Moran)
  • [08602c] fix: adds the missing source-name flag in app unset command (#26712) (Papapetrou Patroklos)
  • [223270] fix: allow automatedSyncPolicy fields to be changed to false (#26763) (Peter Jiang)
  • [1488a1] fix: allow docker dhi helm charts to be used (#25835) (Blake Pettersson)
  • [bcea79] fix: avoid stale informer cache in RevisionMetadata handler (cherry-pick [#27392] for 3.4) (#27395) (argo-cd-cherry-pick-bot[bot], Soumya Ghosh Dastidar)
  • [c32286] fix: close response body on error paths to prevent connection leak (#25824) (QingHe, chentiewen, Claude Sonnet 4.5)
  • [8f9ee6] fix: compressedLayerExtracterStore+isCompressedLayer - allow tar.gzip suffixes (#26355) (erin)
  • [4d66a2] fix: consider Replace/Force sync option on live resource annotations (#26110) (Alexandre Gaudreault)
  • [ed4c63] fix: controller incorrectly detecting diff during app normalization (cherry-pick [#27002] for 3.4) (#27014) (argo-cd-cherry-pick-bot[bot], Alexander Matyushentsev)
  • [bde6f6] fix: correct typos across codebase (#25959) (Ekene Chris)
  • [e01714] fix: create events with argocd namespace (#26667) (Papapetrou Patroklos)
  • [2c5f73] fix: enable and fix modernize linter (#26352) (Matthieu MOREL)
  • [6a10ff] fix: ensure compatibility of kubeversion.version with what helm reeturns (#26469) (Papapetrou Patroklos)
  • [6cd65b] fix: error sending generate manifest metadata cmp server (#25891) (Papapetrou Patroklos)
  • [067190] fix: fix GetAppdetails to show data from refs to other git repos (#26440) (#26544) (dudinea)
  • [f0c694] fix: fix generator bug with templating of parameters in values (#25342) (#26696) (dudinea)
  • [b32085] fix: fix image functionality breakage caused by --no-install-updates option in Dockerfiles (#25972) (#25999) (dudinea)
  • [2b3eae] fix: fixes output of argocd proj windows list PROJ - USEANDOPERATOR was missing (#26273) (Papapetrou Patroklos)
  • [d099c2] fix: fixes the already exists error when syncing apps with replace (#26791) (Papapetrou Patroklos)
  • [8550f6] fix: force attempt http2 with custom tls config (#26975) (cherry-pick [#26976] for 3.4) (#27073) (argo-cd-cherry-pick-bot[bot], Max Verbeek)
  • [bf1f83] fix: get app resources tree view (#26166) (Papapetrou Patroklos)
  • [5e6449] fix: handle parse errors in ReadLocalConfig properly (#26597) (Takuma Shibuya)
  • [f8c0d7] fix: health check doesn't detect resource deletion during sync operation (#26286) (Christopher Coco, Alexandre Gaudreault)
  • [3a4b0a] fix: helm flaky test (#26805) (Nitish Kumar)
  • [275c5d] fix: improves the Rabbit MQ resouce customization to better handle unknown conditions (#25941) (Papapetrou Patroklos)
  • [4519fd] fix: include Depth field in Repository.Sanitized() response (#26572) (HARSHIL GARG)
  • [c4f3bb] fix: integrate split button (#25993) (#25994) (jwinters01)
  • [4e997f] fix: invalid error message on health check failure (#26040) (#26039) (dudinea)
  • [cbbb19] fix: make config key optional (#26701) (Michael Crenshaw)
  • [57e9e5] fix: manifest-generate-paths for multisource git+helm (#25531) (Artem Vdovin, Alexandre Gaudreault)
  • [3c01ab] fix: missing gpg-agent in argocd image (#25935) (#25937) (dudinea)
  • [f4e667] fix: missing import (cherry-pick [#27491] for 3.4) (#27504) (argo-cd-cherry-pick-bot[bot], Michael Crenshaw)
  • [d2cb56] fix: modernize slice initialization syntax in util/argo/argo.go (#26001) (Ekene Chris)
  • [887736] fix: multi-level cross-namespace hierarchy traversal for cluster-scoped intermediates (#26408, [#24379]) (#26410) (Jonathan Ogilvie, Alexandre Gaudreault)
  • [429fc1] fix: nil and empty ignoredifferences (#25980) (Blake Pettersson)
  • [2d762e] fix: optimize cli server-side diff with parallel dynamic batching (#25550) (afarbos)
  • [ced940] fix: panic during OIDC logout with empty token (#25874) (Papapetrou Patroklos)
  • [401b1a] fix: parent-child httpproxy health checking (#25714) (Greg Barasch)
  • [dfa079] fix: pass repo.insecure flag to helm dependency build (cherry-pick [#27078] for 3.4) (#27082) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
  • [a061d1] fix: prevent automatic refreshes from informer resync and status updates (cherry-pick [#25290] for 3.4) (#27229) (argo-cd-cherry-pick-bot[bot], Atif Ali, Keith Chong)
  • [822a0e] fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick [#27589] for 3.4) (#27594) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
  • [43ea99] fix: register pprof endpoints in repo-server using the params config map (#26237) (Papapetrou Patroklos)
  • [739bc5] fix: remove deprecated --client flag from helm version (Malik Draz)
  • [06310b] fix: remove resourceVersion from ssd (cherry-pick [#27406] for 3.4) (#27461) (argo-cd-cherry-pick-bot[bot], Peter Jiang)
  • [be0869] fix: remove stale reposFilter references (#26310) (Jaewoo Choi)
  • [2f7d36] fix: resolve flaky TestSync_SyncWaveHookError test (#26080) (Aditya Raj)
  • [b85887] fix: return error when cache is unavailable (#26053) (Nitish Kumar)
  • [19a74d] fix: return missing information in cluster get API (#25566) (Papapetrou Patroklos)
  • [d7a817] fix: revert autosync event message format change (cherry-pick [#27387] for 3.4) (#27390) (argo-cd-cherry-pick-bot[bot], Soumya Ghosh Dastidar)
  • [79b098] fix: show pruning button when only Prune=confirm is present (#23326) (Arthur Outhenin-Chalandre, Alexandre Gaudreault)
  • [043544] fix: skip namespace check on cluster scoped rbac resources for auth reconcile (#26403) (Christopher Coco)
  • [6df1a5] fix: skip token refresh threshold parsing in unrelated components (#26803) (Soumya Ghosh Dastidar)
  • [984a29] fix: skip unnecessary git state clean (#26714) (Alexander Matyushentsev)
  • [226178] fix: stack overflow when processing circular ownerrefs in resource graph (#26783) (cherry-pick [#26790] for 3.4) (#26878) (argo-cd-cherry-pick-bot[bot], Jonathan Ogilvie, Copilot)
  • [b64824] fix: trigger app sync on app-set spec change (cherry-pick [#26811] for 3.4) (#27131) (argo-cd-cherry-pick-bot[bot], Papapetrou Patroklos)
  • [18efd0] fix: trim whitespaces when retrieving source refresh paths (#26400) (Nitish Kumar)
  • [fee1c5] fix: update Jsonnet field tag to avoid jsonnet: {} in manifests (#25625) (Shubham Singh, Omar Nasser, shubham singh mahar)
  • [325032] fix: use InstanceName for cache cleanup on Application deletion (#26741) (Takuma Shibuya)
  • [305ecb] fix: use certificate fingerprints to deduplicate TLS certs (#25779) (Nitish Kumar)
  • [7180de] fix: use csapgrade to patch managedFields for client-side apply migration (#26289) (Peter Jiang)
  • [6e89ed] fix: use force flag in copyutil symlink to prevent repo-server crashes (#26613) (ManvithaP, manvitha92)
  • [0a29bf] fix: use unique names for initial commits (cherry-pick [#27171] for 3.4) (#27198) (argo-cd-cherry-pick-bot[bot], Sean Liao)
  • [f44ddc] fix: wrap lines toggle causes log lines to overflow container - Fixes [Issue [#27586]] (cherry-pick [#27627] for 3.4) (#27670) (argo-cd-cherry-pick-bot[bot], Knicholas Kennedy)
  • [249b91] fix: wrong installation id returned from cache (cherry-pick [#26969] for 3.4) (#27028) (argo-cd-cherry-pick-bot[bot], Zach Aller)

Documentation

  • [11ec67] docs(rbac): add note documenting the role requirement for groups (#7952) (#26672) (Mathieu Garstecki)
  • [af6495] docs: Add 'Netease Cloud Music' to USERS.md (#25922) (Ryan Wu)
  • [726b76] docs: Add Bluesky badge to README (#25880) (Yuan Tang)
  • [db8c80] docs: Add CodeQL in docs (#26645) (S Kevin Joe Harris)
  • [b13743] docs: Add GitLab CI integration documentation with Dex configuration (#25413) (Afzal Ansari)
  • [90ce17] docs: Add Imagine Learning to USERS.md (#26111) (Christian Oleson)
  • [9e19a8] docs: Add ci prefixes for PR titles (#26471) (S Kevin Joe Harris)
  • [fb5687] docs: Add release checklist step to reference the release-specific instructions file (#25854) (Revital Barletz, Peter Jiang, Regina Voloshin)
  • [abde22] docs: Change heading for the complete example for argocd progressive rollout (#25878) (Barisa Obradovic, Alex Recuenco, Dan Garfield)
  • [e68255] docs: Complements to the Gateway API ingress guide [#25734] (#25739) (Quentin Ågren)
  • [3e29c4] docs: Fix link (Seonghyeon Cho)
  • [3dd71e] docs: Fix link correctly (Seonghyeon Cho)
  • [d88341] docs: Fix some admonitions in docs (#26213) (Moulick Aggarwal, Moulick Aggarwal)
  • [b91165] docs: Fix typo in Plugin generator description (#26051) (José Maia)
  • [e3f616] docs: Fix wrong default value for applicationsetcontroller.enable.scm.providers (#26162) (Fan Zhang)
  • [b8d421] docs: Fixed broken links (#26083) (S Kevin Joe Harris, Regina Voloshin)
  • [5e974b] docs: Proposal: Source Integrity Policies (#25148) (Oliver Gondža, jannfis)
  • [4edc1a] docs: Revise TLS settings to include argocd-applicationset-controller and argocd-notifications-controller (#25872) (Alex Recuenco)
  • [a6cc7a] docs: Revise web terminal setup instructions for Argo CD (#25992) (Dan Garfield, Nitish Kumar)
  • [feab8b] docs: Set installation to match the quick-start guide in the installation section (#26259) (Alex Recuenco)
  • [bea113] docs: Typo synching -> syncing (#26275) (Gaston Festari)
  • [5cce5f] docs: Update Linux host IP detection in Toolchain guide - to avoid hardcoded eth0 (#25800) (Shubham Singh, shubham singh mahar)
  • [30e30a] docs: Update shallow clone section for clarity (#26697) (Dan Garfield)
  • [312a84] docs: Use udp to find preferred outbound ip address (#25812) (Josh Soref)
  • [e7aa9b] docs: Volunteer FourFifthsCode for v3.4 release champion (#25881) (Codey Jenkins)
  • [7879dc] docs: add SAP Signavio to USERS.md (#26164) (Mo Sahihi Benis)
  • [d9b38a] docs: add faq entry for marshaling error (#25851) (Nitish Kumar)
  • [a66fe2] docs: add information on handling ambiguous revisions (#26052) (Nitish Kumar, Afzal Ansari)
  • [3b24d3] docs: add infos around username for access token with bitbucket (#25588) (Nolan Emirot)
  • [510af5] docs: add missing prefixes for PR titles (#26464) (Nitish Kumar)
  • [faf0b7] docs: added 3.2 to 3.3 upgrade overview section (#25671) (Regina Voloshin)
  • [b8e6a7] docs: added custom health checks section to 3.3-3.4 upgrade guide (#26812) (Regina Voloshin)
  • [088ef9] docs: change manifests master reference to stable reference (#26035) (Regina Voloshin, argoproj-renovate[bot])
  • [3e2659] docs: cherry-pick process (#26109) (Michael Crenshaw)
  • [34e893] docs: clarify that updating customLabels in ArgoCD requires a restart to the Controller to take effect (#25693) (Julie Vogelman, Michael Crenshaw)
  • [912e21] docs: clarify the parent for syncOptions (#25989) (Josh Soref)
  • [458837] docs: clarify v prefix in cluster version related docs for CMP Plugins and CLI (#26852) (Regina Voloshin)
  • [265386] docs: document dependency upgrade policy (#26826) (Michael Crenshaw)
  • [8fb916] docs: fix cluster generator version docs (#26847) (Regina Voloshin)
  • [5d790e] docs: fix description of argocd_oci_request_duration_seconds metric (#25918) (Piyush Khobragade)
  • [43dd71] docs: fix garbled text in cluster bootstrapping helm example (#25940) (Alexander)
  • [b40a44] docs: fix grammar, typos, and improve clarity in documentation (#26498) (Rishabh P, Nitish Kumar)
  • [d8f9ed] docs: fix help-wanted label link (#25839) (Jakub Rudnik)
  • [205241] docs: fix namePrefix/nameSuffix description to reflect override behavior (shibatch, Claude (claude-sonnet-4-5))
  • [0fe5b7] docs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick [#27608] for 3.4) (#27613) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)
  • [774f48] docs: fix typos in documentation (#25844) (Illia Oleksiuk)
  • [69c262] docs: fixing typo in Config Management Plugins docs (#26150) (Aidan O'Gorman)
  • [b92b7a] docs: grafana-org-operator healthcehck to upgrade manual (#25672) (Regina Voloshin)
  • [4832c5] docs: improve managedNamespaceMetadata section with details on tracki… (#25536) (Afzal Ansari, Blake Pettersson)
  • [3d97fc] docs: instruct to enable ClientSideApplyMigration in 3.3.2 (#26547) (Regina Voloshin)
  • [2f9bea] docs: link to source hydrator (#25813) (Josh Soref)
  • [fc6379] docs: recommend cluster generator in cluster boostrapping page (#26084) (Kostis (Octopus Deploy))
  • [d655bf] docs: rewrite [here] links (#26282) (Matt Warren, Papapetrou Patroklos)
  • [653507] docs: small fixes for mkdocs warnings (#26112) (Michael Crenshaw, Nitish Kumar)
  • [03556d] docs: update MAINTAINERS.md (#26496) (Jaewoo Choi)
  • [f7dbfb] docs: updated upgrade guide 3.3-3.4 and cluster generator doc with the changed cluster version format (#26837) (Regina Voloshin)
  • [6a3a54] docs: vscode settings recommendation is outdated (#25925) (Alex Recuenco)

Dependency updates

  • [66835b] chore(deps): Upgrade Kustomize to 5.8.1 (#26367) (Regina Voloshin)
  • [11567f] chore(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 8.0.0 (cherry-pick 27602 to 3.4) (#27606) (dudinea)
  • [2de45e] chore(deps): bump actions/cache from 5.0.0 to 5.0.1 (#25678) (dependabot[bot])
  • [914755] chore(deps): bump actions/cache from 5.0.1 to 5.0.2 (#26042) (dependabot[bot])
  • [8c3073] chore(deps): bump actions/cache from 5.0.2 to 5.0.3 (#26183) (dependabot[bot])
  • [4e827c] chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#26123) (dependabot[bot])
  • [4bfd62] chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#25726) (dependabot[bot])
  • [796b72] chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 (#26635) (dependabot[bot])
  • [f1c520] chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 (#26801) (dependabot[bot])
  • [667b7d] chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 (#25950) (dependabot[bot])
  • [d77f8d] chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#26620) (dependabot[bot])
  • [f76046] chore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#25997) (dependabot[bot])
  • [6baa4b] chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#26675) (dependabot[bot])
  • [3db8a4] chore(deps): bump actions/stale from 10.1.1 to 10.2.0 (#26474) (dependabot[bot])
  • [8d24a9] chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#25679) (dependabot[bot])
  • [38345d] chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#26633) (dependabot[bot])
  • [2615be] chore(deps): bump axios from 1.12.2 to 1.13.5 in /ui-test (#26353) (dependabot[bot])
  • [4e71de] chore(deps): bump basic-ftp from 5.0.5 to 5.2.0 in /ui-test (#26617) (dependabot[bot])
  • [01629c] chore(deps): bump code.gitea.io/sdk/gitea from 0.22.1 to 0.23.2 (#26231) (dependabot[bot])
  • [67d425] chore(deps): bump codecov/test-results-action from 1.1.1 to 1.2.1 (#25703) (dependabot[bot])
  • [40412a] chore(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 (#26414) (dependabot[bot])
  • [c13ba1] chore(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 (#26433) (dependabot[bot])
  • [560d42] chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#26706) (dependabot[bot])
  • [d064ce] chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#26172) (dependabot[bot])
  • [332149] chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#26689) (dependabot[bot])
  • [dd9799] chore(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#25771) (dependabot[bot])
  • [d8d700] chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#26705) (dependabot[bot])
  • [063d3b] chore(deps): bump docker/setup-qemu-action from 3.6.0 to 4.0.0 (#26688) (dependabot[bot])
  • [c212bb] chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.20.0 to 1.21.0 (#25975) (dependabot[bot])
  • [040cc3] chore(deps): bump github.com/Azure/kubelogin from 0.2.13 to 0.2.14 (#25883) (dependabot[bot])
  • [a8676a] chore(deps): bump github.com/Azure/kubelogin from 0.2.14 to 0.2.15 (#26560) (dependabot[bot])
  • [6041e8] chore(deps): bump github.com/Azure/kubelogin from 0.2.15 to 0.2.16 (#26781) (dependabot[bot])
  • [9182e6] chore(deps): bump github.com/alicebob/miniredis/v2 from 2.35.0 to 2.36.0 (#26103) (dependabot[bot])
  • [e10a39] chore(deps): bump github.com/alicebob/miniredis/v2 from 2.36.0 to 2.36.1 (#26146) (dependabot[bot])
  • [adf88c] chore(deps): bump github.com/alicebob/miniredis/v2 from 2.36.1 to 2.37.0 (#26621) (dependabot[bot])
  • [05620c] chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.29.9 to 1.32.7 (#26254) (dependabot[bot])
  • [1f1249] chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.10 to 1.32.11 (#26679) (dependabot[bot])
  • [47eb7e] chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.8 (#26492) (dependabot[bot])
  • [9851b8] chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.8 to 1.32.9 (#26514) (dependabot[bot])
  • [2ae64b] chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.9 to 1.32.10 (#26581) (dependabot[bot])
  • [cd65bc] chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.62 to 1.19.7 (#26251) (dependabot[bot])
  • [abb60a] chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.10 to 1.19.11 (#26680) (dependabot[bot])
  • [f4852f] chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.7 to 1.19.8 (#26495) (dependabot[bot])
  • [f2fdc6] chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.8 to 1.19.9 (#26515) (dependabot[bot])
  • [63ddc3] chore(deps): bump github.com/aws/aws-sdk-go-v2/service/codecommit from 1.33.10 to 1.33.11 (#26842) (dependabot[bot])
  • [09fac7] chore(deps): bump github.com/aws/smithy-go from 1.24.0 to 1.24.1 (#26564) (dependabot[bot])
  • [f50f88] chore(deps): bump github.com/aws/smithy-go from 1.24.1 to 1.24.2 (#26657) (dependabot[bot])
  • [b4a52f] chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.9.2 (#25932) (dependabot[bot])
  • [3811a3] chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.2 to 4.10.0 (#26144) (dependabot[bot])
  • [d1089f] chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 (#26782) (dependabot[bot])
  • [acc4bb] chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#26616) (dependabot[bot])
  • [96f126] chore(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 (#25677) (dependabot[bot])
  • [f1ce19] chore(deps): bump github.com/expr-lang/expr from 1.17.7 to 1.17.8 (#26459) (dependabot[bot])
  • [60fed8] chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (cherry-pick [#27101] for 3.4) (#27207) (argo-cd-cherry-pick-bot[bot], dependabot[bot])
  • [fd1307] chore(deps): bump github.com/go-openapi/runtime from 0.29.2 to 0.29.3 (#26736) (dependabot[bot])
  • [fe9373] chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 (#26171) (dependabot[bot])
  • [9b10fe] chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.88 to 0.9.89 (#26333) (dependabot[bot])
  • [b33785] chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.89 to 0.9.91 (#26360) (dependabot[bot])
  • [8aea56] chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.91 to 0.9.93 (#26563) (dependabot[bot])
  • [564d17] chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.93 to 0.9.94 (#26656) (dependabot[bot])
  • [a9da44] chore(deps): bump github.com/olekukonko/tablewriter from 1.1.2 to 1.1.3 (#26043) (dependabot[bot])
  • [bd9c12] chore(deps): bump github.com/olekukonko/tablewriter from 1.1.3 to 1.1.4 (#26820) (dependabot[bot])
  • [928543] chore(deps): bump github.com/redis/go-redis/v9 from 9.17.2 to 9.17.3 (#26145) (dependabot[bot])
  • [0c2fa1] chore(deps): bump github.com/redis/go-redis/v9 from 9.17.3 to 9.18.0 (#26475) (dependabot[bot])
  • [b18d57] chore(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#26021) (dependabot[bot])
  • [ca82ee] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.10.0 to 1.11.0 (#25867) (dependabot[bot])
  • [3ac7a0] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.11.0 to 1.12.0 (#25934) (dependabot[bot])
  • [2322cd] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.12.0 to 1.13.0 (#25946) (dependabot[bot])
  • [0da603] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.13.0 to 1.14.0 (#25973) (dependabot[bot])
  • [c626b2] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.14.0 to 1.16.0 (#26081) (dependabot[bot])
  • [c75749] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.16.0 to 1.18.0 (#26143) (dependabot[bot])
  • [9c108c] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.18.0 to 1.19.0 (#26155) (dependabot[bot])
  • [9d459c] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.19.0 to 1.21.0 (#26165) (dependabot[bot])
  • [e548ec] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.21.0 to 1.23.0 (#26170) (dependabot[bot])
  • [0a7088] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.23.0 to 1.25.0 (#26202) (dependabot[bot])
  • [f255ce] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.25.0 to 1.26.0 (#26250) (dependabot[bot])
  • [9cc0c7] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.26.0 to 1.27.0 (#26267) (dependabot[bot])
  • [257ebc] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.27.0 to 1.28.0 (#26292) (dependabot[bot])
  • [7ccc6f] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.28.0 to 1.28.1 (#26334) (dependabot[bot])
  • [ad186c] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.28.1 to 1.29.0 (#26358) (dependabot[bot])
  • [e8539b] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.29.0 to 1.30.0 (#26384) (dependabot[bot])
  • [a544bc] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.30.0 to 1.31.0 (#26413) (dependabot[bot])
  • [dcf0a1] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.31.0 to 1.34.0 (#26461) (dependabot[bot])
  • [67c5fe] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.34.0 to 1.35.0 (#26476) (dependabot[bot])
  • [adbf9c] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.35.0 to 1.36.0 (#26493) (dependabot[bot])
  • [7db8ab] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.36.0 to 1.39.0 (#26533) (dependabot[bot])
  • [a4f9f5] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.39.0 to 1.41.0 (#26561) (dependabot[bot])
  • [4ffad6] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.41.0 to 1.42.0 (#26605) (dependabot[bot])
  • [984306] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.42.0 to 1.43.0 (#26622) (dependabot[bot])
  • [858f15] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.43.0 to 1.44.0 (#26634) (dependabot[bot])
  • [91253d] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.44.0 to 1.46.0 (#26655) (dependabot[bot])
  • [89cd59] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.1 to 1.8.2 (#25676) (dependabot[bot])
  • [106acd] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.2 to 1.9.0 (#25701) (dependabot[bot])
  • [b5a91a] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.9.0 to 1.9.1 (#25725) (dependabot[bot])
  • [abf223] chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.9.1 to 1.10.0 (#25770) (dependabot[bot])
  • [7825b4] chore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#26649) (dependabot[bot])
  • [6be8ac] chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#26362) (dependabot[bot])
  • [a19550] chore(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 (#25947) (dependabot[bot])
  • [89fe75] chore(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 (#26361) (dependabot[bot])
  • [5fff3b] chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#26623) (dependabot[bot])
  • [4524dc] chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#26799) (dependabot[bot])
  • [92e4b2] chore(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 (#26733) (dependabot[bot])
  • [b3c5f4] chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 (#26734) (dependabot[bot])
  • [93a771] chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 (#25933) (dependabot[bot])
  • [235bf2] chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 (#26357) (dependabot[bot])
  • [d8b33b] chore(deps): bump golang.org/x/time from 0.14.0 to 0.15.0 (#26737) (dependabot[bot])
  • [bac8c4] chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 (#25789) (dependabot[bot])
  • [09b385] chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 (#26432) (dependabot[bot])
  • [8dfbde] chore(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 (#26458) (dependabot[bot])
  • [37f29e] chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 (#26735) (dependabot[bot])
  • [ea71ad] chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 (cherry-pick [#26886] for 3.4) (#26952) (argo-cd-cherry-pick-bot[bot], dependabot[bot], Blake Pettersson)
  • [a21fcf] chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#26565) (dependabot[bot])
  • [f46c38] chore(deps): bump immutable from 4.0.0 to 4.3.8 in /ui (#26690) (dependabot[bot])
  • [5b8ce5] chore(deps): bump k8s.io/kubernetes from 1.34.0 to 1.34.2 in /gitops-engine (#25675) (dependabot[bot], reggie-k)
  • [1a1b14] chore(deps): bump library/busybox from 2383baa to b86c79d in /test/e2e/multiarch-container (#26101) (dependabot[bot])
  • [82ee09] chore(deps): bump library/busybox from b86c79d to e226d63 in /test/e2e/multiarch-container (#26122) (dependabot[bot])
  • [b35706] chore(deps): bump library/busybox from d80cd69 to 2383baa in /test/e2e/multiarch-container (#25884) (dependabot[bot])
  • [8ef0fd] chore(deps): bump library/busybox from e226d63 to b3255e7 in /test/e2e/multiarch-container (#26229) (dependabot[bot])
  • [0ee21a] chore(deps): bump library/golang from 1.26.0 to 1.26.1 in /test/container (#26708) (dependabot[bot])
  • [e4a28f] chore(deps): bump library/golang from 31c1e53 to 6cc2338 in /test/remote (#25847) (dependabot[bot])
  • [23b387] chore(deps): bump library/golang from 36b4f45 to 31c1e53 in /test/remote (#25829) (dependabot[bot])
  • [8866fc] chore(deps): bump library/golang from 6cc2338 to 8bbd140 in /test/remote (#25974) (dependabot[bot])
  • [474d90] chore(deps): bump library/golang from a22b2e6 to 36b4f45 in /test/remote (#25680) (dependabot[bot])
  • [79a11c] chore(deps): bump library/golang from e2ddb15 to c7e98cc in /test/container (#26780) (dependabot[bot])
  • [21acbb] chore(deps): bump library/redis from 8.2.1 to 8.2.2 in /test/container (#24859) (dependabot[bot])
  • [6ab942] chore(deps): bump library/redis from 8.6.0 to 8.6.1 in /test/container (#26579) (dependabot[bot])
  • [2c6d97] chore(deps): bump library/redis from 5cb00b0 to 1c054d5 in /test/container (#26654) (dependabot[bot])
  • [8c1a81] chore(deps): bump library/redis from dc123d5 to 5cb00b0 in /test/container (#26606) (dependabot[bot])
  • [8b2ad9] chore(deps): bump library/ubuntu from 25.10 to 26.04 in /test/container (#26431) (dependabot[bot])
  • [6a9020] chore(deps): bump library/ubuntu from 4095ef6 to fed6ddb in /test/container (#26494) (dependabot[bot])
  • [559dc1] chore(deps): bump lodash from 4.17.21 to 4.17.23 in /ui (#26100) (dependabot[bot])
  • [b70d14] chore(deps): bump minimatch from 3.1.2 to 3.1.3 in /ui (#26604) (dependabot[bot])
  • [5c2a41] chore(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#26102) (dependabot[bot])
  • [d11d02] chore(deps): bump qs from 6.11.0 to 6.14.1 in /ui (#25828) (dependabot[bot])
  • [5cfcd0] chore(deps): bump qs from 6.14.1 to 6.14.2 in /ui (#26444) (dependabot[bot])
  • [43a952] chore(deps): bump renovatebot/github-action from 44.0.5 to 44.2.0 (#25702) (dependabot[bot])
  • [28beb3] chore(deps): bump renovatebot/github-action from 44.2.0 to 44.2.1 (#25781) (dependabot[bot])
  • [fa6f5c] chore(deps): bump renovatebot/github-action from 44.2.1 to 44.2.2 (#25818) (dependabot[bot])
  • [93205a] chore(deps): bump renovatebot/github-action from 44.2.2 to 44.2.3 (#25868) (dependabot[bot])
  • [d08a87] chore(deps): bump renovatebot/github-action from 44.2.3 to 44.2.4 (#25949) (dependabot[bot])
  • [8b1415] chore(deps): bump renovatebot/github-action from 44.2.4 to 44.2.5 (#26059) (dependabot[bot])
  • [e42727] chore(deps): bump renovatebot/github-action from 44.2.5 to 44.2.6 (#26156) (dependabot[bot])
  • [a7c771] chore(deps): bump renovatebot/github-action from 44.2.6 to 46.0.1 (#26203) (dependabot[bot])
  • [39fcff] chore(deps): bump renovatebot/github-action from 46.0.1 to 46.0.2 (#26336) (dependabot[bot])
  • [53a5cd] chore(deps): bump renovatebot/github-action from 46.0.2 to 46.1.0 (#26434) (dependabot[bot])
  • [139ecf] chore(deps): bump renovatebot/github-action from 46.1.0 to 46.1.1 (#26460) (dependabot[bot])
  • [296100] chore(deps): bump renovatebot/github-action from 46.1.1 to 46.1.2 (#26562) (dependabot[bot])
  • [5e3feb] chore(deps): bump renovatebot/github-action from 46.1.2 to 46.1.3 (#26658) (dependabot[bot])
  • [60ee21] chore(deps): bump renovatebot/github-action from 46.1.3 to 46.1.4 (#26730) (dependabot[bot])
  • [b5a08f] chore(deps): bump renovatebot/github-action from 46.1.4 to 46.1.5 (#26839) (dependabot[bot])
  • [cc302b] chore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.3.1-0.20251003215857-446d8398e19c to 6.3.2 (#26332) (dependabot[bot])
  • [36e8c5] chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 (#26761) (dependabot[bot])
  • [0af9b6] chore(deps): bump the otel group across 1 directory with 6 updates (#26668) (dependabot[bot])
  • [20bf53] chore(deps): bump the otel group with 4 updates (#25553) (dependabot[bot])
  • [1762a5] chore(deps): bump the otel group with 6 updates (#26731) (dependabot[bot], reggie-k)
  • [49d0b4] chore(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.2 (#26359) (dependabot[bot])
  • [0f069e] chore(deps): bump tj-actions/changed-files from 47.0.2 to 47.0.4 (#26491) (dependabot[bot])
  • [14e69b] chore(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5 (#26676) (dependabot[bot])
  • [3b34d2] chore(deps): bump tmp from 0.2.3 to 0.2.4 in /ui-test (#24058) (dependabot[bot], Blake Pettersson)
  • [c34d44] chore(deps): bump ubuntu in gh actions to 24.04 and ubuntu in test/remote/Dockerfile to 25.10 (#25763) (Regina Voloshin)
  • [7925bf] chore(deps): migrated aws sdk v1 to v2 for EKS with argocd-k8s-auth (#26200) (Regina Voloshin, Papapetrou Patroklos)
  • [3ddf72] chore(deps): update dependency @codecov/webpack-plugin to v0.0.1-beta.12 (#25385) (renovate[bot])
  • [81d109] chore(deps): update dependency @types/deepmerge to v2.2.3 (#25609) (renovate[bot])
  • [7f34ee] chore(deps): update dependency @types/minimatch to v3.0.5 (#26139) (renovate[bot])
  • [807ff5] chore(deps): update dependency @types/prop-types to v15.7.15 (#26140) (renovate[bot])
  • [1b85a6] chore(deps): update dependency lodash-es to v4.17.23 [security] (#26099) (renovate[bot])
  • [c19d04] chore(deps): update docker.io/library/golang:1.25.5 docker digest to 0f406d3 (#25951) (argoproj-renovate[bot])
  • [4409ec] chore(deps): update docker.io/library/golang:1.25.5 docker digest to 31c1e53 (#25831) (argoproj-renovate[bot])
  • [ef2176] chore(deps): update docker.io/library/golang:1.25.5 docker digest to 581c059 (#25966) (argoproj-renovate[bot])
  • [5598f8] chore(deps): update docker.io/library/golang:1.25.5 docker digest to 6cc2338 (#25838) (argoproj-renovate[bot])
  • [5113f8] chore(deps): update docker.io/library/golang:1.25.5 docker digest to 97be073 (#25820) (argoproj-renovate[bot])
  • [f8cab4] chore(deps): update docker.io/library/golang:1.25.6 docker digest to 06d1251 (#26256) (argoproj-renovate[bot])
  • [46e902] chore(deps): update docker.io/library/golang:1.25.6 docker digest to 0c87ea6 (#26235) (argoproj-renovate[bot])
  • [1d6659] chore(deps): update docker.io/library/golang:1.25.6 docker digest to 4c973c7 (#26232) (argoproj-renovate[bot])
  • [acb30b] chore(deps): update docker.io/library/golang:1.25.6 docker digest to ce63a16 (#26056) (argoproj-renovate[bot])
  • [f6b0c8] chore(deps): update docker.io/library/golang:1.26.0 docker digest to b39810f (#26603) (argoproj-renovate[bot])
  • [58993e] chore(deps): update docker.io/library/golang:1.26.0 docker digest to fb612b7 (#26779) (renovate[bot])
  • [82be81] chore(deps): update docker.io/library/redis:8.2.3 docker digest to c4316c4 (#26130) (renovate[bot])
  • [d35a25] chore(deps): update docker.io/library/registry:3.0 docker digest to 6c5666b (#26217) (renovate[bot])
  • [988e4f] chore(deps): update docker.io/library/ubuntu:25.10 docker digest to 4a9232c (#26131) (renovate[bot])
  • [cc0752] chore(deps): update group golang to v1.25.5 (#25723) (argoproj-renovate[bot])
  • [23c021] chore(deps): update group golang to v1.25.6 (#26034) (argoproj-renovate[bot])
  • [51327c] chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.10.1 (#26382) (argoproj-renovate[bot], Blake Pettersson)
  • [1f6d54] chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (#26713) (argoproj-renovate[bot], reggie-k)
  • [ffeaca] chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (#26728) (argoproj-renovate[bot])
  • [845d1c] chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (#26771) (argoproj-renovate[bot])
  • [38363f] chore(deps): update module github.com/vektra/mockery/v3 to v3.6.2 (#25995) (argoproj-renovate[bot], Regina Voloshin)
  • [42f09f] chore(deps): update module github.com/vektra/mockery/v3 to v3.6.3 (#26029) (argoproj-renovate[bot])
  • [630c6e] chore(deps): update module github.com/vektra/mockery/v3 to v3.6.4 (#26445) (argoproj-renovate[bot])
  • [0d22f3] chore(deps): update module github.com/vektra/mockery/v3 to v3.7.0 (#26716) (argoproj-renovate[bot], Regina Voloshin)
  • [eedf6c] chore(deps): update module k8s.io/kubernetes to v1.34.2 [security] (#25682) (renovate[bot], reggie-k)
  • [c879b6] chore(deps): update notifications-engine to fix GitHub PR comments nil panic (#26065) (John Soutar)
  • [da042b] chore(deps): update notifications-engine to v0.5.1-0.20251223091026-8c0c96d8d530 (#25785) (Pasha Kostohrys, pasha)
  • [5ec311] chore(deps): update to helm 3.19.4 due to cve : https://github.com/helm/helm/releases/tag/v3.19.4 (#25769) (Bryan Stenson)

Other work

  • [bbb13d] Change to make codegen-local (Kevin Joe Harris)
  • [e4a97b] Clarify database initialization/migration section (jcjveraa)
  • [d60b41] Fixed broken links in USERS.md (Kevin Joe Harris)
  • [ccdcf6] Merge branch 'master' into Fix-broken-links-in-users (S Kevin Joe Harris)
  • [5e4a4c] Merge commit from fork (Alexander Matyushentsev)
  • [987768] Merge pull request [#26133] from Kevinjoeharris/Fix-broken-links-in-users (Papapetrou Patroklos)
  • [650fa6] Merge pull request [#26295] from jcjveraa/patch-2 (Papapetrou Patroklos)
  • [ae08a3] Merge pull request [#26519] from hokatabi/fix/kustomize-nameprefix-suffix-docs (Papapetrou Patroklos)
  • [46ff85] Merge pull request [#26546] from Kevinjoeharris/codegen-local (Papapetrou Patroklos)
  • [973c3f] Merge pull request [#26569] from sh-cho/fix-docs-link (Papapetrou Patroklos)
  • [1d50c4] Merge pull request [#26590] from sh-cho/fix-docs-link-correctly (Papapetrou Patroklos)
  • [9e9a49] Merge pull request [#26643] from malikdraz/fix/helm-version-deprecated-flag (Papapetrou Patroklos)
  • [bd284b] [docs] Add database initialization instructions example-header (jcjveraa)
  • [849815] chore(applicationset): Fix modernize linter (#26299) (Matthieu MOREL)
  • [34ccf8] chore(applicationset): Fix modernize linter (#26320) (Matthieu MOREL)
  • [274339] chore(applicationset): Fix modernize linter (#26326) (Matthieu MOREL)
  • [989fa6] chore(appset): basic progressive sync e2e tests (#26092) (Kanika Rana, krana limaDocker)
  • [216611] chore(ci): migrate from deprecated codecov action (#25704) (Michael Crenshaw)
  • [286c6b] chore(cmd): Fix modernize linter (#26298) (Matthieu MOREL)
  • [76162a] chore(cmd): Fix modernize linter (#26321) (Matthieu MOREL)
  • [b48ed4] chore(cmd): unify CLI names via common constants and simplify main dispatch (#24486) (jaehanbyun)
  • [6b2b06] chore(cmpserver): Fix modernize linter (#26317) (Matthieu MOREL, Blake Pettersson)
  • [ac83f1] chore(commitserver): Fix modernize linter (#26327) (Matthieu MOREL)
  • [88223b] chore(common): Fix modernize linter (#26312) (Matthieu MOREL, Blake Pettersson)
  • [e2f7e7] chore(controller): Fix modernize linter (#26303) (Matthieu MOREL)
  • [0c9039] chore(controller): Fix modernize linter (#26313) (Matthieu MOREL, Blake Pettersson)
  • [326831] chore(docs): add 3.4 release approver and checklist (#26528) (Codey Jenkins)
  • [6e0c94] chore(hack): Fix modernize linter (#26304) (Matthieu MOREL)
  • [2e6388] chore(hydrator): improve error message (#25737) (Michael Crenshaw)
  • [7ccb6c] chore(migration): migrate to aws-sdk-go-v2 (#26439) (Nitish Kumar)
  • [2bea8c] chore(pkg): Fix modernize linter (#26314) (Matthieu MOREL, Blake Pettersson)
  • [ac0c63] chore(refactor): bump notifications-engine to include Teams adaptive card fix (#26449) (Jaewoo Choi)
  • [342aea] chore(reposerver): Fix modernize linter (#26315) (Matthieu MOREL, Blake Pettersson)
  • [0cff63] chore(server): Fix modernize linter (#26324) (Matthieu MOREL)
  • [a108a8] chore(server): Fix modernize linter (#26328) (Matthieu MOREL)
  • [2e1d81] chore(test): Fix modernize linter (#26301) (Matthieu MOREL)
  • [28ca82] chore(tilt): use manifest image name instead of kustomize override (#26190) (Codey Jenkins)
  • [b91240] chore(ui): add qeId to paginate dropdown menus (#25929) (Jaewoo Choi)
  • [a369ae] chore(util): Fix modernize linter (#26300) (Matthieu MOREL)
  • [1a62c8] chore(util): Fix modernize linter (#26316) (Matthieu MOREL, Blake Pettersson)
  • [1d65d8] chore(util): Fix modernize linter (#26323) (Matthieu MOREL)
  • [34eeed] chore(util): Fix modernize linter (#26329) (Matthieu MOREL)
  • [1b4398] chore(util): Fix modernize linter (#26342) (Matthieu MOREL)
  • [847b8b] chore(util): Fix modernize linter (#26344) (Matthieu MOREL)
  • [e20803] chore: Add C.H. Robinson to USERS.md (#26825) (Anudeep Reddy)
  • [76a141] chore: Make links accessible + friendly (#26815) (Josh Soref)
  • [91a131] chore: Remove unnecessary "CD" suffix in MAINTAINERS.md (#25778) (Yuan Tang)
  • [4c77f0] chore: add maintainers name in the MAINTAINERS.md file (#25685) (Nitish Kumar)
  • [1049d4] chore: add tests to validate ConfigMap/Secret key removal in server-side diff (#25216) (pedro-cs-ribeiro, Pedro Ribeiro, Leonardo Luz Almeida)
  • [674028] chore: adds Pat and Reggie as release champion and approver for 3.5 (#26748) (Papapetrou Patroklos)
  • [251c36] chore: bump argo-ui version (#26629) (jwinters01)
  • [e8eebd] chore: bump gitops-engine with force+replace test (#24508) (Alexandre Gaudreault)
  • [7f877a] chore: bumps dex version to 2.45.0 (#26609) (Papapetrou Patroklos)
  • [b2df60] chore: bumps go redis client 9.17.2 (#25643) (Papapetrou Patroklos, dependabot[bot])
  • [b1a93b] chore: bumps golang version everywhere to the latest 1.25.5 (#25716) (Papapetrou Patroklos)
  • [a2e0b6] chore: bumps golang version to 1.26 in all places (#26393) (Papapetrou Patroklos, Nitish Kumar)
  • [08390e] chore: bumps notification engine to the latest (#25887) (Papapetrou Patroklos)
  • [b543e1] chore: bumps ubuntu base docker image to 25.10 (#25758) (Papapetrou Patroklos)
  • [6a597c] chore: fix make test running all the gitops-engine tests when requested to test specific ArgoCD module (#26089) (#26090) (dudinea)
  • [0cdd44] chore: fix gitops-engine mod name so it can be referenced by external repos (#26407) (Leonardo Luz Almeida)
  • [851535] chore: improve app install ID error (#26178) (Michael Crenshaw)
  • [7acd93] chore: install git-lfs 3.7.1 version using an install script (#26465) (Papapetrou Patroklos, Nitish Kumar)
  • [d875c6] chore: make getRepositorySecret more readable (#26827) (Michael Crenshaw)
  • [921360] chore: migrate k8s.gcr.io to registry.k8s.io in install manifests (#25802) (Aya Hosni, Nitish Kumar)
  • [9cfcd2] chore: placate Sonar by ignoring tetsdata files (#26371) (Regina Voloshin)
  • [595969] chore: stop using the deprecated fields of the cluster structure (#25745) (Papapetrou Patroklos)
  • [4c59c3] chore: unify clientOpts usage in command parameters (#24251) (jaehanbyun, Nitish Kumar, Blake Pettersson)
  • [b5e092] chore: update generated files from codegen (shibatch)
  • [c86e32] chore: update go-oidc to v3.17.0 (#26822) (Mike Cutsail)
  • [5345a2] chore: update golangci-lint to v2.8.0 (#26354) (Matthieu MOREL)
  • [a3b4c8] chore: update redis-ha chart to 4.35.10 (#26453) (Tuxthepirate, Blake Pettersson)
  • [5e7bb3] chore: use base ref for cherry-pick prs (#26551) (Blake Pettersson)
  • [18fe8c] chore: use server-side apply for CRDs in Tiltfile to fix annotation size limit (#26419) (Linghao Su)
  • [d63aa8] ci: Make codecov steps conditional on codecov secret existence and enable running them on forks (#25765) (Regina Voloshin)
  • [b0488f] ci: Revive CodeCov steps (#26350) (Regina Voloshin)
  • [cf53ed] ci: Skip CodeQL for documentation-only changes (#26602) (S Kevin Joe Harris, rumstead)
  • [7477ec] ci: exclude gitops engine bumps from renovate (#26787) (Regina Voloshin)
  • [1418e8] ci: exclude testdata from sonar.exclusions (#26398) (Regina Voloshin)
  • [fdbe19] ci: label stale issues and PRs without auto-closing (#26318) (S Kevin Joe Harris)
  • [a46baf] ci: make Upload code coverage information to codecov.io step always run (#26379) (Regina Voloshin)
  • [c85d65] ci: run pr-title-check on pull-request (#26662) (Regina Voloshin)
  • [884b63] ci: test against k8s 1.34.2 (#25856) (Regina Voloshin)
  • [e8895b] ci: test against k8s 1.35.0 (#26062) (Regina Voloshin)
  • [fb6a46] ci: upgrade codeql for go 1.26 support and give renovate post upgrade commands (#26446) (rumstead)
  • [6facaf] crate changelog with git instead of github (reggie-k)
  • [afdb3f] docs(operator-manual): fix typos and improve clarity (#26542) (Rishabh Pandey)
  • [ff8305] fix(repo-server): optimize repoLock on checkout for manifest-generate-paths (#26468) (Artem Vdovin)
  • [b61b08] fix(repo-server): optimize short ref resolution in revision comparison (#26456) (Rodrigo Fior Kuntzer)
  • [3ce6f1] refactor: remove helper pointer functions in pull_request tests (#26598) (Takuma Shibuya)
  • [6795b8] refactor: replace ptr.To with new(expr) (#26534) (Takuma Shibuya)
  • [499ba4] test only goreleaser and a dd an author template (reggie-k)
  • [7ed8a8] test only goreleaser and a dd an author template (reggie-k)
  • [2d19fa] test(e2e): CMP test fails locally on Mac (#25901) (Alexandre Gaudreault)
  • [95c17b] test(e2e): ExpectConsistency was not consistent (#26778) (Alexandre Gaudreault)
  • [b9c4c2] test(e2e): add e2e tests for reverse deletionOrder when progressive sync enabled (cherry-pick [#26673] for 3.4) (#27263) (argo-cd-cherry-pick-bot[bot], Kanika Rana)
  • [dab6f3] test(e2e): add isolation by ensuring unique name (#25724) (Alexandre Gaudreault)
  • [b0e4e8] test(e2e): configurable tmp dir locally (#25780) (Alexandre Gaudreault, dependabot[bot], Pasha Kostohrys, pasha, Regina Voloshin, Shubham Singh, shubham singh mahar, github-actions[bot], CI, Josh Soref, argoproj-renovate[bot], Jakub Rudnik, Illia Oleksiuk, Aya Hosni, Nitish Kumar)
  • [ee1bf8] test(e2e): fix TestDeletionConfirmation flakiness (#25902) (Alexandre Gaudreault)
  • [e988c5] test(e2e): fix invalid AppSet test on master (#25939) (Alexandre Gaudreault)
  • [011463] test(e2e): oras binary not found locally if not installed in path (#25751) (Alexandre Gaudreault)
  • [f8899e] test(e2e): unstable CMP e2e test when running locally (#25752) (Alexandre Gaudreault)
  • [4aa2ba] test(e2e): update local certs so they are valid on MacOS (#25864) (Alexandre Gaudreault)
  • [9a777c] test(engine): cleanup hook tests (#25673) (Alexandre Gaudreault)
  • [48f01b] test(engine): refactor engine tests to ignore dry-run results (#25674) (Alexandre Gaudreault)
  • [9728b6] ci: replace goreleaser github api calls with git commands (cherry-pick [#27706] for 3.4) (#27710) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.1...v3.3.9

Source: README.md, updated 2026-05-06