chore(deps): update dependency argoproj/argo-cd to v3

This MR contains the following updates:

Package	Type	Update	Change
argoproj/argo-cd	Kustomization	major	v2.14.11 -> v3.0.9

---

️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v3.0.9

Compare Source

v3.0.8

Compare Source

v3.0.7

Compare Source

v3.0.6

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.6/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• fc271d4: fix(metrics): populate dest_server label (#​23246) (#​23269) (#​23308) (@​crenshaw-dev)
• 5c24b6b: fix(server): avoid unecessary claims restrictions (#​22973) (3.0) (#​23207) (@​crenshaw-dev)
• 59d4519: fix(tls): validate RSA keys before marshaling (cherry-pick #​23295) (#​23300) (@​gcp-cherry-pick-bot[bot])
• f72ac78: fix: Change workloadidentity token cache expiry based on token expiry (#​23100) (#​23264) (@​agaudreault)
• a31d5c9: fix: parse project with applicationset resource (cherry-pick #​23252) (#​23267) (@​gcp-cherry-pick-bot[bot])

Other work

• d98a0ca: chore(repo-server): unify semver resolution in new versions subpackage (#​20216) (#​23310) (@​rouke-broersma)
• 001848e: chore: replace heptio-images with argocd-e2e-container (cherry-pick #​23040) (#​23058) (@​nitishfy)
• 0ef49b6: chore: upgrade Go from 1.24.1 to 1.24.4 (release-3.0) (#​23293) (@​thevilledev)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.5...v3.0.6

v3.0.5

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• fe5869d: fix(hydrator): increase max msg size (cherry-pick #​23190) (#​23191) (@​gcp-cherry-pick-bot[bot])
• 0e20cb6: fix: add cooldown to prevent resetting autoheal exp backoff preemptively (cherry-pick #​23057) (#​23189) (@​gdsoumya)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.4...v3.0.5

v3.0.4

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

This release fixes a critical security issue: GHSA-2hj5-g64g-fp6p

Other work

• 040ed44: Merge commit from fork (@​crenshaw-dev)
• c27a9d3: fix(commit-server): apply image override (cherry-pick #​22916) (#​22917) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.3...v3.0.4

v3.0.3

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• af3d926: fix: Account for batch event processing in e2e tests (cherry-pick #​22356) (#​23070) (@​gcp-cherry-pick-bot[bot])
• ddd6df5: fix: infinite reconciliation loop when app is in error (#​23067) (@​agaudreault)
• 927ed35: fix: remove default spec.preserveUnknownFields ignoreDifference for CRD (cherry-pick #​22948) (#​23044) (@​gcp-cherry-pick-bot[bot])

Documentation

• b1cafa9: docs: fix jsonpath in 2.14-3.0 upgrade doc (cherry-pick #​23045) (#​23046) (@​gcp-cherry-pick-bot[bot])

Other work

• 866db14: chore: bump gitops-engine ssd fix (#​23071) (@​pjiang-dev)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.2...v3.0.3

v3.0.2

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 3fb34b9: fix(haproxy): setting maxconn in haproxy config cherry-pick (#​15319) (#​18283) (#​23037) (@​reggie-k)
• cca991a: fix(test): broken e2e test (cherry-pick #​22975) (#​23017) (@​gcp-cherry-pick-bot[bot])
• 90e9d1a: fix: settings request doesn't return default tracking method (#​22965) (cherry-pick) (#​23034) (@​oleksandr-codefresh)

Documentation

• 3d37cfa: docs(server): no resource health when using the list api (cherry-pick #​22954) (#​22972) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.1...v3.0.2

v3.0.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• edd2358: fix(docs): upgrading 3.0 docs (cherry-pick #​22891) (#​22894) (@​gcp-cherry-pick-bot[bot])
• cb5d6f5: fix(health): handle nil lastTransitionTime (#​22897) (cherry-pick #​22900) (#​22908) (@​gcp-cherry-pick-bot[bot])
• 2913d5f: fix: Race condition in nativeGitClient.LsFiles (issue #​21754) (cherry-pick #​22878) (#​22906) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.0...v3.0.1

v3.0.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 402802b: feat!: Logs rbac enforce by default (#​21678) (@​reggie-k)
• cca7485: feat!: update compareoptions default values (#​22230) (@​agaudreault)
• 029927b: feat(appcontroller): store application health status in redis by default (#​10312) (#​21532) (@​rumstead)
• f775e7b: feat(appset): Add values to MR generator (#​21557) (@​dudo)
• b9131c1: feat(cmp): pass empty env vars to plugins (#​18720) (#​22096) (@​crenshaw-dev)
• ac50d8e: feat(config)!: exclude known interim resources by default (#​20013) (#​21635) (@​agaudreault)
• 910b951: feat(controller): enable batch event processing by default (#​22338) (@​crenshaw-dev)
• 7edaef5: feat(helm): upgrading helm to 3.17.0 (#​21722) (@​rumstead)
• 3d2c010: feat(hydrator): handle sourceHydrator fields from webhook (#​19397) (cherry-pick #​22485) (#​22753) (@​gcp-cherry-pick-bot[bot])
• 88e43cb: feat(kubectl): upgrading kubectl to 1.32.1 (#​21724) (@​rumstead)
• c675757: feat(kustomize): support --include-templates for labels (#​15283) (#​22069) (@​crenshaw-dev)
• 6f9389c: feat(log): support match case in pod log search (#​21919) (@​linghaoSu)
• feb7097: feat(metrics): add more kubectl metrics (#​21720) (@​crenshaw-dev)
• 606bd5b: feat(rbac)!: disable fine-grained inheritance by default (#​19988) (#​20671) (@​fffinkel)
• e3bd569: feat(server): make deep copies of objects returned by informers (#​22173) (#​22179) (@​rumstead)
• 7296201: feat(ui): Added link to start page in argo logo (#​21461) (@​surajyadav1108)
• 6d27928: feat(ui): highlight log lines by pod name (#​21001) (@​aali309)
• b8508f2: feat(ui): rename filter message status on SYNC STATUS view (#​21061) (@​aali309)
• 55f8a43: feat(ui): split arrays in yaml to fix ambiguous collapse when array items have nested objects (#​21064) (@​aali309)
• 0fab3cf: feat(ui): support display sync wave (#​20614) (@​linghaoSu)
• 922c9e9: feat(ui): support filter repo when input (#​21451) (@​linghaoSu)
• 89c4817: feat: Add support for Azure workload identity for Git and OCI repositories. (#​21118) (@​jagpreetstamber)
• f9ffb6a: feat: Added env reference objects to manifests for otlp.attrs (#​21563) (@​almoelda)
• 0973409: feat: Kustomize ignore missing components (#​18634) (#​21674) (@​bradkwadsworth)
• 74b3532: feat: Make certain Status panel items look more 'clickable' (#​19698) (#​22232) (@​keithchong)
• c0b2787: feat: Support kube 1.32 (#​21805) (@​sivchari)
• d301b40: feat: Upgrade notifications engine (#​22273) (@​sivchari)
• c9c4068: feat: add AND operator opt-in option for sync windows matches (#​16846) (@​adriananeci)
• f258c45: feat: add ARGOCD_APP_PROJECT_NAME to the build environment (#​15185) (#​21586) (@​MacroPower)
• c71dd1a: feat: add a check for user defined role referential integrity (#​21065) (@​devopsjedi)
• 8044d68: feat: add bearer token auth (#​21462) (@​reggie-k)
• fa0b5f5: feat: add force promote actions for Numaplane rollouts (#​22141) (@​dpadhiar)
• e4311d8: feat: add name and labels in cluster metrics (#​17870) (#​18453) (@​flbla)
• ecb9dba: feat: add support for azure workload identity in Microsoft Entra SSO (#​21433) (@​jagpreetstamber)
• 951d9d3: feat: add the --redis-compress as the global flag to set redis compression. (#​21786) (@​nitishfy)
• 561cbef: feat: checking user defined roles and policies for referential integrity (#​20825) (#​22132) (@​devopsjedi)
• d23e6ac: feat: configurable log timestamp format (#​21478) (@​crenshaw-dev)
• c09e6fa: feat: improve StatefulSet immutable field error messages (#​21209) (@​aali309)
• 1698370: feat: replace spdy with websocket for portforward and pod exec #​21517 (#​21518) (@​maoqide)
• 3e09f94: feat: resource customization for CustomResourceDefinition (#​21416) (@​almoelda)
• 6b002a5: feat: upgrade to v1.32.2 (#​22168) (@​sivchari)
• fbd7f29: feat: use errors.Join for debuggable (#​22235) (@​sivchari)
• dbdc1e7: feat: use log format config for klog (#​5715) (#​21458) (@​crenshaw-dev)

Bug fixes

• 46bfc10: Revert "fix: Graceful shutdown for the API server (#​18642) (#​20981)" (#​21221) (@​pasha-codefresh)
• c6b0000: fix(actions): don't run empty Lua scripts (#​22084) (#​22161) (@​crenshaw-dev)
• e6f94f2: fix(appcontroller): selfhealattemptscount needs to be reset at times (#​22095) (@​blakepettersson)
• 079341c: fix(applicationset): ApplicationSets with rolling sync stuck in Pending (#​20230) (@​Fsero)
• f6a84a4: fix(appset): Reconcile appset only once when appset is refreshed (fix 21171) (#​21172) (@​dacofr)
• f3509d2: fix(appset): dont requeue appsets on status change (#​21364) (@​rumstead)
• e852142: fix(appset): events not honouring configured namespaces (#​21219) (#​21241) (@​eadred)
• e44ae96: fix(appset): generated app errors should use the default requeue (#​21887) (#​21936) (@​rumstead)
• 922dd77: fix(appset): improve git generator repo credential fallback (#​21167) (@​blakepettersson)
• 55aab6e: fix(appset): reverted Gitlab SCM HasPath search and consider 404 errors as file not found (#​16253) (#​21597) (@​prune998)
• 37a7231: fix(appset): update gitlab SCM provider to search on parent folder (#​16253) (#​21491) (@​prune998)
• 06bd2ad: fix(ci): all version bump changes go in the MR (#​21409) (@​crenshaw-dev)
• 2933154: fix(ci): get correct previous version, fail workflow if not (cherry-pick #​22376) (#​22377) (@​gcp-cherry-pick-bot[bot])
• 15046b9: fix(ci): handle major versions in compatibility table generator (cherry-pick #​22370) (#​22371) (@​gcp-cherry-pick-bot[bot])
• 43d2a3d: fix(ci): proto references bump (#​21391) (@​crenshaw-dev)
• 05c7625: fix(ci): updating action-gh-release after upstream fix (#​21407) (@​rumstead)
• eb6732e: fix(ci): use pinned Helm version for init-release (#​22164) (#​22165) (@​crenshaw-dev)
• 6e4c8fd: fix(ci): use tags instead of branches (cherry-pick #​22372) (#​22373) (@​gcp-cherry-pick-bot[bot])
• 99cd3c7: fix(cli): add flags to admin import for retrying updates on conflicts and skipping resources with specific labels. (#​21694) (@​ashutosh16)
• 85684a8: fix(cli): application cannot be refreshed when invalid and hangs (#​21615) (@​agaudreault)
• eb6dd46: fix(cli): ignored resources should not be pruned during restore (#​21894) (@​agaudreault)
• 9c443b6: fix(cli): improve performance for admin export/import cmd (#​22322) (@​agaudreault)
• 546383a: fix(cli): log correct error message when updating a cluster that is not present (#​22190) (@​nitishfy)
• 613d06d: fix(cli): use correct CA when adding kube-public clusters (#​21326) (#​21327) (@​aminarefzadeh)
• f2ee9a6: fix(cli): wrong variable to store --no-proxy value (#​21226) (@​the-technat)
• a8ce677: fix(controller): always set health.status.lastTransitionTime (#​22665) (cherry-pick #​22666) (#​22667) (@​gcp-cherry-pick-bot[bot])
• 1a9f226: fix(controller): rename cluster batch param and add to argocd-cmd-params-cm (#​21402) (@​crenshaw-dev)
• d54ae98: fix(controller): wrong tracking annotation for malformed resources (#​22325) (@​crenshaw-dev)
• b4a63ae: fix(dex): always request federated:id scope (#​17908) (#​21726) (@​agaudreault)
• ad09b9c: fix(docs): 2.14 upgrading docs (#​21756) (@​rumstead)
• 4382281: fix(docs): Fix syntax in e2e test docs (#​21796) (@​pjiang-dev)
• 8545d21: fix(docs): update --auth-token description in argocd_appset_update.md to account for environment variable (#​22350) (@​chengfang)
• 68d60cd: fix(docs): update mkdocs for upgrade guide (#​21768) (@​rumstead)
• 7c7dda0: fix(grafanadashboard): add memory units to panels showing memory usage (#​22078) (@​BWagenerGenerali)
• 9429275: fix(hydrator): UI nil checks (#​21598) (@​crenshaw-dev)
• 3baca9b: fix(hydrator): don't get cluster or API versions for hydrator (#​21985) (@​crenshaw-dev)
• 35009a7: fix(hydrator): don't use manifest-generate-paths (#​22039) (#​22015) (@​crenshaw-dev)
• 8a97c1d: fix(hydrator): refresh by annotation instead of work queue (#​22016) (@​crenshaw-dev)
• d1574c2: fix(rbac): Add rights on applicationsets for the application controller (#​20352) (@​OpenGuidou)
• 13b7b09: fix(settings): race condition on settings configMap (#​21225) (@​agaudreault)
• 416b7d0: fix(test): Use t.Fatal instead of os.Exit in tests (part 1) (#​21003) (#​22114) (@​andrii-korotkov-verkada)
• 2afcb6f: fix(test): delete CRD between tests, install CRD before syncing CRs (#​22299) (@​crenshaw-dev)
• fa747f9: fix(tests): Improved the e2e tests for app sync with impersonation feature (#​21792) (@​anandf)
• b88ad57: fix(ui): Added SSV option to helm type repos (#​22006) (@​surajyadav1108)
• 544aea1: fix(ui): Cannot add an app that has both name and server destination (#​21440) (@​rpelczar)
• 1ce0123: fix(ui): Group Nodes breaks Kinds counts / views (#​21337) (@​surajyadav1108)
• 71c7700: fix(ui): Show error message when max pods to view logs are reached (#​21725) (@​pjiang-dev)
• 854c62f: fix(ui): Solve issue with navigating with dropdown from an application's page (#​21737) (@​amit-o)
• b6e6104: fix(ui): avoid spurious error on hydration (#​22506) (cherry-pick #​22711) (#​22715) (@​gcp-cherry-pick-bot[bot])
• 38b0fd5: fix(ui): columns-adjusted for kind and Namespace in sync details. (#​21038) (@​surajyadav1108)
• ebeae20: fix(ui): fix bearerToken validate in helm connect page (cherry-pick #​22791) (#​22798) (@​gcp-cherry-pick-bot[bot])
• bfb04dd: fix(ui): parameter tab null ref w/ hydrator (#​22097) (#​22131) (@​crenshaw-dev)
• e2e6faa: fix(ui): prevent parameter editor from resetting when props update (fixes #​14351) (#​21625) (@​k4r1)
• 4202168: fix(ui): reduce rerender in pod log view (#​22241) (@​linghaoSu)
• 0d34340: fix: 21062 Support GitLab "System Hook" webhooks for ApplicationSets (#​21243) (@​eadred)
• 911a9c6: fix: Add proxy registry key by dest server + name (#​21791) (@​leoluz)
• a444a05: fix: AppSet PullRequest and SCM generators get 401 from GitHub without tokenRef (cherry-pick #​22737) (#​22744) (@​gcp-cherry-pick-bot[bot])
• ffbf9d5: fix: AppSet PullRequest and SCM generators get 401 from GitHub without tokenRef (manually signed off cherry-pick #​22737) (#​22763) (@​reggie-k)
• f39b425: fix: CVE-2024-21538 upgrading the indirect dep cross-spawn to greater than 7.0.5 (#​21259) (@​nmirasch)
• 644315a: fix: Change applicationset generate HTTP method to avoid route conflicts (#​20758) (@​amit-o)
• d6a04a3: fix: Check for semver constraint matching in application webhook handler (cherry-pick #​21648) (#​22507) (@​gcp-cherry-pick-bot[bot])
• 1905d12: fix: Check placement exists before length check (#​22060) (#​22057) (@​dhaiducek)
• 0d2471b: fix: Enable service account token automount for haproxy (#​22226) (cherry-pick #​22353) (#​22406) (@​gcp-cherry-pick-bot[bot])
• 8841b0d: fix: Fix calculating SelfHealBackOff delay when exceeding maximum (#​20976) (#​20978) (@​mrysavy)
• 4dcabb9: fix: Fix link about http middlewear and add adopter hetao101 (#​21802) (@​wanghonglei5181)
• e3b333a: fix: JSON format (#​22237) (@​sivchari)
• 5b79c34: fix: New kube applier for server side diff dry run with refactoring (#​21488) (#​21749) (@​andrii-korotkov-verkada)
• a8f646e: fix: Notifications on-deployed would now be delivered if sync didn't change the health status of the app in a process (#​22203) (#​22204) (@​andrii-korotkov-verkada)
• 7b1ed52: fix: On deployed trigger must consider race between last transition time and sync finished time (#​9070) (#​21944) (@​andrii-korotkov-verkada)
• f075c5a: fix: Only port-forward to ready pods (#​10610) (cherry-pick #​22794) (#​22825) (@​gcp-cherry-pick-bot[bot])
• ed3cc48: fix: Policy/policy.open-cluster-management.io stuck in progressing status when no clusters match the policy (#​21296) (#​21297) (@​mbaldessari)
• 43e5941: fix: Race condition occurs during initial sharding (#​22264) (@​kahou82)
• 7424432: fix: Rephrased sentence to a meaningfull one (#​22113) (@​babugeet)
• bfd72b4: fix: Revert "fix: Race condition occurs during initial sharding (#​22264)" (#​22354) (@​andrii-korotkov-verkada)
• f542ae5: fix: Revert "split arrays in yaml to fix ambiguous collapse when array items have nested objects (#​21064)" (#​22099) (#​22128) (@​andrii-korotkov-verkada)
• 4a1d0f3: fix: Switch default logging to JSON (issue: 20897) (#​21656) (@​teddy-wahle)
• 0ed7c56: fix: Unable to edit http repo credentials from ArgoCD UI (#​22065) (@​aali309)
• e8a3f7a: fix: Update argo-ui dependency to pull in OCI icon (#​18646) (#​21698) (@​keithchong)
• 376e8d5: fix: Update haproxy version to match the chart (#​22226) (#​22236) (@​andrii-korotkov-verkada)
• 9f81cd4: fix: Use ARGOCD_SERVER for default value (#​21930) (@​sivchari)
• 62ec9fe: fix: Use t.Fatal instead of os.Exit in tests (part 2) (#​21003) (#​22187) (@​andrii-korotkov-verkada)
• c93924b: fix: Wait for Subscription resources to reach AtLatestKnown (#​21425) (@​vinzent)
• e6e9255: fix: correct lookup for the kustomization file when applying patches (#​22024) (@​nitishfy)
• f548fd7: fix: correctly set compareWith when requesting app refresh with delay (fixes #​18998) (#​21298) (@​shenxn)
• 5d131c5: fix: do not exclude APIService resources (cherry-pick #​22586) (#​22587) (@​gcp-cherry-pick-bot[bot])
• b2e8753: fix: do not normalize resource tracking on live crds (cherry-pick #​22722) - cherry-pick 3.0 (#​22735) (@​gcp-cherry-pick-bot[bot])
• d183d9c: fix: dynamic cluster distribution issue 20965, update the shard… (#​21042) (@​ivan-cai)
• 49a4b7f: fix: fetch syncedRevision in UpdateRevisionForPaths (#​21014) (#​21015) (@​toyamagu-2021)
• 563ccb2: fix: fix KustomizeImage Match function to pass added unit tests (#​21872) (@​chengfang)
• 6959e54: fix: have argocd server pass the appLabelKey for proper caching (#​22186) (@​gdsoumya)
• 87671f5: fix: ignore prune=false resources from PruningRequired count (#​21941) (@​gdsoumya)
• 75cb7fc: fix: issue 22206 - fixes overlapping lines in logs by increasing line height (#​22207) (@​GP3-RS)
• eed70ee: fix: login return_url doesn't work with custom server paths (#​21588) (@​alexmt)
• b600c5e: fix: make codegen permissions (#​21667) (@​dudo)
• c7e02ee: fix: make test fails with exec format error (#​21630) (@​reggie-k)
• 85c6d26: fix: override sub with federated_claims.user_id when dex is used (#​20683) (@​aali309)
• 11b8665: fix: remove kustomize binary from git (#​21526) (@​rumstead)
• 6fea008: fix: remove project from cache key for project scoped credentials (cherry-pick #​22712) (#​22817) (@​gcp-cherry-pick-bot[bot])
• 686964d: fix: removed null security context from redis-ha values.yaml to placate helm 3.17.1 (#​22035) (@​reggie-k)
• 6f38327: fix: resolve the failing e2e appset tests for ksonnet applications (#​21580) (@​reggie-k)
• 806c5f6: fix: return cluster URL in error message, not full cluster object (#​22094) (@​crenshaw-dev)
• 94b34f8: fix: upgrade x/crypto to v0.35.0 to solve CVE-2025-22869 (#​22048) (@​gergelyfabian)

Documentation

• e3caeba: docs(hydrator): document signature verification limitation (#​21504) (@​crenshaw-dev)
• 04a1608: docs: 3.0 release date on May 06 (#​22189) (@​reggie-k)
• fdf9a30: docs: 3.0 upgrade guide (#​21457) (@​crenshaw-dev)
• c687247: docs: Add LY Corporation to list of users (#​21592) (@​Asuforce)
• 898a126: docs: Add section on how to lock down/restrict the default project (#​21757) (@​dag-andersen)
• 3f74b24: docs: Adding Argo CD CLI plugin support proposal (#​19624) (@​christianh814)
• 7ba7fc0: docs: Auto Sync toggle does not work for Applications created with an ApplicationSet (#​21577) (@​revitalbarletz)
• f275157: docs: Document Helm 3.17.1 breaking changes (#​22283) (@​reggie-k)
• c4183aa: docs: Document askpass socket sharing between reposerver and cmp sidecar (#​22083) (@​peschmae)
• d19b02d: docs: Ensure Argo CD Hydrator branch prefix consistency (#​21836) (@​dag-andersen)
• 167e122: docs: Fix typo code-gen/codegen contributors-quickstart.md (#​21922) (@​fe-ax)
• dc32867: docs: Fix typos and grammar in tls.md (#​22229) (@​todaywasawesome)
• 87539aa: docs: Surface blog with (actual) release notes better (#​21572) (@​revitalbarletz)
• 499f74d: docs: Update USERS.md (#​22093) (@​mreparaz)
• 961147d: docs: Update sync-kubectl.md - Correct kubectl command for a sample (#​22030) (@​taeyeopkim1)
• 1823d8f: docs: add applicationset controller doc to preserve annotations and labels (#​22008) (@​leoluz)
• 77ff8f0: docs: add missing word (#​21428) (@​nitishfy)
• 2d10d4e: docs: add mkdocs configuration stanza to .readthedocs.yaml (#​21475) (@​reggie-k)
• 975e966: docs: add more info on what login --core does (#​21487) (@​nitishfy)
• db8d2f0: docs: add note about comments in policy.csv files (#​21339) (@​morremeyer)
• 9fd6bee: docs: add statusbadge.url override information (#​21529) (@​tobiasehlert)
• 1645d57: docs: add wildcard globbing example to docs (#​21429) (@​LRost)
• 65664ce: docs: clarify wording on cluster secrets (#​21865) (@​todaywasawesome)
• 7327093: docs: custom resource action UI tweaks (#​22202) (@​crenshaw-dev)
• 8a752a5: docs: document bearerToken in repo example doc (#​22195) (@​crenshaw-dev)
• 8d12e35: docs: document logs RBAC enforcement remediation (#​22285) (@​reggie-k)
• f63f5f9: docs: document source hydrator maturity (#​21969) (@​crenshaw-dev)
• c32afb4: docs: endorse secrets operators, caution against plugins (#​21629) (#​21631) (@​crenshaw-dev)
• 05cde71: docs: fix aws sso documentation (#​20681) (@​chansuke)
• 40d86e7: docs: fix broken link in notifications overview (#​21684) (@​jeanmorais)
• ce81912: docs: fix project role docs (#​21832) (@​klemmster)
• bd1018a: docs: fix tmp path and document Rancher caveat (#​22252) (@​crenshaw-dev)
• 3c3410c: docs: fix typo in declarative-setup.md (#​22256) (@​muffl0n)
• 846503b: docs: note idle connections issue for cluster namespaces (#​21978) (@​crenshaw-dev)
• 1a56ea7: docs: remove branch var outdated from the cluster param (#​21549) (@​afzal442)
• 070287c: docs: update contributors guide with repo clone and make targets (#​21473) (@​reggie-k)
• 9f8d68f: docs: various wording fixes for 3.0 migration guide (#​22343) (@​todaywasawesome)

Dependency updates

• f2c5093: chore(deps): bump @​types/selenium-webdriver from 4.1.27 to 4.1.28 in /ui-test (#​21414) (@​dependabot[bot])
• e6b110d: chore(deps): bump SonarSource/sonarqube-scan-action from 4.1.0 to 4.2.1 (#​21230) (@​dependabot[bot])
• cb135fd: chore(deps): bump axios from 1.7.4 to 1.8.2 in /ui-test (#​22247) (@​dependabot[bot])
• 5e30858: chore(deps): bump bitnami/kubectl from 1.31 to 1.32 in /test/container (#​21234) (@​dependabot[bot])
• 812a9da: chore(deps): bump chromedriver from 131.0.3 to 131.0.4 in /ui-test (#​21268) (@​dependabot[bot])
• c3600d2: chore(deps): bump chromedriver from 131.0.4 to 131.0.5 in /ui-test (#​21415) (@​dependabot[bot])
• 742d45a: chore(deps): bump chromedriver from 131.0.5 to 132.0.0 in /ui-test (#​21512) (@​dependabot[bot])
• cdb7995: chore(deps): bump chromedriver from 132.0.0 to 132.0.1 in /ui-test (#​21646) (@​dependabot[bot])
• 6c64d5f: chore(deps): bump chromedriver from 132.0.1 to 133.0.2 in /ui-test (#​21916) (@​dependabot[bot])
• c47152d: chore(deps): bump chromedriver from 133.0.2 to 133.0.3 in /ui-test (#​22018) (@​dependabot[bot])
• 2cefcc5: chore(deps): bump chromedriver from 133.0.3 to 134.0.0 in /ui-test (#​22218) (@​dependabot[bot])
• a45f715: chore(deps): bump chromedriver from 134.0.0 to 134.0.2 in /ui-test (#​22307) (@​dependabot[bot])
• 5207508: chore(deps): bump code.gitea.io/sdk/gitea from 0.19.0 to 0.20.0 (#​21464) (@​dependabot[bot])
• 8ce1c33: chore(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0 (#​21210) (@​dependabot[bot])
• 1d47e1c: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.0 to 1.8.1 (#​21566) (@​dependabot[bot])
• b3bf182: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.1 to 1.8.2 (#​21867) (@​dependabot[bot])
• 627da11: chore(deps): bump github.com/Azure/kubelogin from 0.1.6 to 0.1.8 (#​22271) (@​dependabot[bot])
• c8e1de6: chore(deps): bump github.com/Azure/kubelogin from 0.1.8 to 0.1.9 (#​22308) (@​dependabot[bot])
• 2a760e1: chore(deps): bump github.com/alicebob/miniredis/v2 from 2.33.0 to 2.34.0 (#​21232) (@​dependabot[bot])
• 2194443: chore(deps): bump github.com/aws/aws-sdk-go from 1.55.5 to 1.55.6 (#​21514) (@​dependabot[bot])
• 5d84eb4: chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.7.1 to 4.8.0 (#​21483) (@​dependabot[bot])
• 5e5ec1b: chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.8.0 to 4.8.1 (#​21677) (@​dependabot[bot])
• 4723abd: chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 (#​21353) (@​dependabot[bot])
• ecee599: chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.13.0 to 2.14.0 (#​21955) (@​dependabot[bot])
• 635e592: chore(deps): bump github.com/casbin/casbin/v2 from 2.102.0 to 2.103.0 (#​21330) (@​dependabot[bot])
• 84f2ab8: chore(deps): bump github.com/casbin/govaluate from 1.2.0 to 1.3.0 (#​21331) (@​dependabot[bot])
• b3e31ed: chore(deps): bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#​21383) (@​dependabot[bot])
• de40dc2: chore(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0 (#​22347) (@​dependabot[bot])
• d29124f: chore(deps): bump github.com/cyphar/filepath-securejoin (#​21233) (@​dependabot[bot])
• 9a51757: chore(deps): bump github.com/cyphar/filepath-securejoin from 0.3.6 to 0.4.0 (#​21484) (@​dependabot[bot])
• eb8f05a: chore(deps): bump github.com/cyphar/filepath-securejoin from 0.4.0 to 0.4.1 (#​21700) (@​dependabot[bot])
• ab05f35: chore(deps): bump github.com/dlclark/regexp2 from 1.11.4 to 1.11.5 (#​21853) (@​dependabot[bot])
• b9f49df: chore(deps): bump github.com/evanphx/json-patch from 5.9.0+incompatible to 5.9.11+incompatible (#​21699) (@​dependabot[bot])
• dd366f5: chore(deps): bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 (#​21329) (@​dependabot[bot])
• 8200e3d: chore(deps): bump github.com/go-git/go-git/v5 from 5.13.0 to 5.13.1 (#​21352) (@​dependabot[bot])
• bcf2143: chore(deps): bump github.com/go-git/go-git/v5 from 5.13.1 to 5.13.2 (#​21641) (@​dependabot[bot])
• cbef55e: chore(deps): bump github.com/go-git/go-git/v5 from 5.13.2 to 5.14.0 (#​22076) (@​dependabot[bot])
• 0b0c737: chore(deps): bump github.com/go-jose/go-jose/v3 to v4 (#​22154) (@​nitishfy)
• c897e94: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 (#​21989) (@​dependabot[bot])
• 20f0fc6: chore(deps): bump github.com/golang-jwt/jwt to 4.5.2/5.2.2 (#​22464) (@​crenshaw-dev)
• 1b1735f: chore(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#​21693) (@​dependabot[bot])
• f32f69f: chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#​21956) (@​dependabot[bot])
• f429352: chore(deps): bump github.com/gosimple/slug from 1.14.0 to 1.15.0 (#​21304) (@​dependabot[bot])
• 7870200: chore(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 (#​21915) (@​dependabot[bot])
• 0444fcd: chore(deps): bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 (#​22180) (@​dependabot[bot])
• 562fa06: chore(deps): bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.1 (#​21957) (@​dependabot[bot])
• ca9da79: chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#​21889) (@​dependabot[bot])
• b17c5e4: chore(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 (#​21717) (@​dependabot[bot])
• edbce2a: chore(deps): bump gitops-engine to latest (#​22071) (@​pjiang-dev)
• d46f224: chore(deps): bump gitpod/workspace-full from 230285e to bec45eb (#​20980) (@​dependabot[bot])
• 84b49c8: chore(deps): bump gitpod/workspace-full from bec45eb to a47a68e (#​21843) (@​dependabot[bot])
• e784c47: chore(deps): bump go 1.23.5 & tools (#​21748) (@​agaudreault)
• 21ea59d: chore(deps): bump go.opentelemetry.io/otel from 1.33.0 to 1.34.0 (#​21569) (@​dependabot[bot])
• 64569e6: chore(deps): bump go.opentelemetry.io/otel from 1.34.0 to 1.35.0 (#​22217) (@​dependabot[bot])
• f2490fc: chore(deps): bump go.opentelemetry.io/otel/sdk from 1.33.0 to 1.34.0 (#​21570) (@​dependabot[bot])
• cce74a3: chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#​21397) (@​dependabot[bot])
• 50fb7bc: chore(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 (#​21827) (@​dependabot[bot])
• bf2c4e8: chore(deps): bump golang.org/x/net from 0.32.0 to 0.33.0 (#​21254) (@​dependabot[bot])
• a807c0e: chore(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 (#​21396) (@​dependabot[bot])
• 9783c5e: chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 (#​22182) (@​dependabot[bot])
• a8b76f2: chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 (#​22209) (@​dependabot[bot])
• 0c1d218: chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#​21384) (@​dependabot[bot])
• 4641e80: chore(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.26.0 (#​21777) (@​dependabot[bot])
• 94d3899: chore(deps): bump golang.org/x/oauth2 from 0.26.0 to 0.27.0 (#​21990) (@​dependabot[bot])
• 4c27f73: chore(deps): bump golang.org/x/oauth2 from 0.27.0 to 0.28.0 (#​22211) (@​dependabot[bot])
• 4b08708: chore(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 (#​21778) (@​dependabot[bot])
• 2d99403: chore(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 (#​22216) (@​dependabot[bot])
• 38ad4f4: chore(deps): bump golang.org/x/term from 0.27.0 to 0.28.0 (#​21382) (@​dependabot[bot])
• 73c3935: chore(deps): bump golang.org/x/term from 0.28.0 to 0.29.0 (#​21776) (@​dependabot[bot])
• 270b352: chore(deps): bump golang.org/x/time from 0.10.0 to 0.11.0 (#​22212) (@​dependabot[bot])
• 76d28b5: chore(deps): bump golang.org/x/time from 0.8.0 to 0.9.0 (#​21385) (@​dependabot[bot])
• 7d0c10e: chore(deps): bump golang.org/x/time from 0.9.0 to 0.10.0 (#​21779) (@​dependabot[bot])
• 6b57b16: chore(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0 (#​21163) (@​dependabot[bot])
• f15e1bc: chore(deps): bump google.golang.org/grpc from 1.69.0 to 1.69.2 (#​21270) (@​dependabot[bot])
• 9a02f9b: chore(deps): bump google.golang.org/grpc from 1.69.2 to 1.69.4 (#​21485) (@​dependabot[bot])
• b4753d8: chore(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#​21657) (@​dependabot[bot])
• 2731c3f: chore(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#​22183) (@​dependabot[bot])
• e052670: chore(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.0 (#​21211) (@​dependabot[bot])
• 728b31e: chore(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1 (#​21303) (@​dependabot[bot])
• 2a497ef: chore(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 (#​21412) (@​dependabot[bot])
• d4d6713: chore(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 (#​21513) (@​dependabot[bot])
• 7333c75: chore(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#​21676) (@​dependabot[bot])
• 4e2902d: chore(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 (#​21813) (@​dependabot[bot])
• 4f179a1: chore(deps): bump jinja2 from 3.1.5 to 3.1.6 in /docs (#​22219) (@​dependabot[bot])
• 0dddb9e: chore(deps): bump library/busybox from a5d0ce4 to 498a000 in /test/e2e/multiarch-container (#​21959) (@​dependabot[bot])
• d3dda53: chore(deps): bump library/busybox in /test/e2e/multiarch-container (#​21486) (@​dependabot[bot])
• 780285b: chore(deps): bump library/golang from 1.23.4 to 1.23.5 in /test/remote (#​21535) (@​dependabot[bot])
• 7efd2fe: chore(deps): bump library/golang from 1.23.5 to 1.23.6 in /test/container (#​21774) (@​dependabot[bot])
• 8e91ce9: chore(deps): bump library/golang from 1.23.5 to 1.23.6 in /test/remote (#​21799) (@​dependabot[bot])
• 9e6b28b: chore(deps): bump library/golang from 1.23.6 to 1.24.0 in /test/container (#​21866) (@​dependabot[bot])
• ee83eea: chore(deps): bump library/golang from 1.23.6 to 1.24.0 in /test/remote (#​21868) (@​dependabot[bot])
• 2168221: chore(deps): bump library/golang from 1.24.0 to 1.24.1 in /test/remote (#​22184) (@​dependabot[bot])
• 98cd061: chore(deps): bump library/golang from 2b1cbf2 to cd0c949 in /test/remote (#​22020) (@​dependabot[bot])
• dbf9393: chore(deps): bump library/golang in /test/container (#​21533) (@​dependabot[bot])
• fe8bab0: chore(deps): bump library/redis from 7.4.1 to 7.4.2 in /test/container (#​21395) (@​dependabot[bot])
• f108332: chore(deps): bump library/redis in /test/container (#​20776) (@​dependabot[bot])
• e920e71: chore(deps): bump library/redis in /test/container (#​21253) (@​dependabot[bot])
• 87a7a6e: chore(deps): bump library/redis in /test/container (#​21310) (@​dependabot[bot])
• 9011397: chore(deps): bump library/redis in /test/container (#​21494) (@​dependabot[bot])
• 3639bfe: chore(deps): bump library/registry in /test/container (#​20775) (@​dependabot[bot])
• 683e4e0: chore(deps): bump selenium-webdriver from 4.27.0 to 4.29.0 in /ui-test (#​22117) (@​dependabot[bot])
• 871ed62: chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.3 to 0.19.4 (#​21411) (@​dependabot[bot])
• 527ef92: chore(deps): bump sigs.k8s.io/structured-merge-diff/v4 from 4.4.4-0.20241211184406-7bf59b3d70ee to 4.6.0 (#​22181) (@​dependabot[bot])
• e18b4d7: chore(deps): switch to new expr package (#​21982) (@​crenshaw-dev)
• 36d563a: chore(deps): update dependency gotestyourself/gotestsum to v1.12.0 (#​21900) (@​renovate[bot])
• cae840b: chore(deps): update dependency gotestyourself/gotestsum to v1.12.1 (#​22328) (@​renovate[bot])
• cf89ee6: chore(deps): update dependency jinja2 to v3.1.5 (#​21289) (@​renovate[bot])
• 1029388: chore(deps): update dependency pygments to v2.19.0 (#​21379) (@​renovate[bot])
• 9cc5224: chore(deps): update dependency pygments to v2.19.1 (#​21392) (@​renovate[bot])
• a415822: chore(deps): update dependency pymdown-extensions to v10.13 (#​21301) (@​renovate[bot])
• 4fee6b5: chore(deps): update dependency pymdown-extensions to v10.14 (#​21403) (@​renovate[bot])
• 42fa72d: chore(deps): update dependency pymdown-extensions to v10.14.3 (#​21619) (@​renovate[bot])
• 065fc31: chore(deps): update module github.com/golangci/golangci-lint to v1.63.2 (#​21343) (@​renovate[bot])
• 33f2a6f: chore(deps): update module github.com/golangci/golangci-lint to v1.63.3 (#​21348) (@​renovate[bot])
• 8245cd9: chore(deps): update module github.com/golangci/golangci-lint to v1.63.4 (#​21368) (@​renovate[bot])
• 2e1db11: chore(deps): update module github.com/golangci/golangci-lint to v1.64.5 (#​21850) (@​renovate[bot])
• 95a43e0: chore(deps): update module github.com/golangci/golangci-lint to v1.64.6 (#​22115) (@​renovate[bot])
• 12928cb: chore(deps): update module github.com/golangci/golangci-lint to v1.64.7 (#​22306) (@​renovate[bot])
• d84ac3a: chore(deps-dev): bump @​types/mocha from 10.0.9 to 10.0.10 in /ui-test (#​21251) (@​dependabot[bot])
• 1f1c339: chore(deps-dev): bump @​types/node from 22.10.10 to 22.13.4 in /ui-test (#​21874) (@​dependabot[bot])
• 41dec01: chore(deps-dev): bump @​types/node from 22.10.2 to 22.10.5 in /ui-test (#​21381) (@​dependabot[bot])
• 2f57940: chore(deps-dev): bump @​types/node from 22.10.5 to 22.10.6 in /ui-test (#​21482) (@​dependabot[bot])
• 3a29a74: chore(deps-dev): bump @​types/node from 22.10.6 to 22.10.7 in /ui-test (#​21511) (@​dependabot[bot])
• 7706644: chore(deps-dev): bump @​types/node from 22.10.7 to 22.10.8 in /ui-test (#​21644) (@​dependabot[bot])
• 75def4f: chore(deps-dev): bump @​types/node from 22.10.8 to 22.10.10 in /ui-test (#​21658) (@​dependabot[bot])
• 33ad0a7: chore(deps-dev): bump @​types/node from 22.13.4 to 22.13.5 in /ui-test (#​21960) (@​dependabot[bot])
• 111cf2c: chore(deps-dev): bump @​types/node from 22.13.5 to 22.13.10 in /ui-test (#​22272) (@​dependabot[bot])
• 235470f: chore(deps-dev): bump @​types/node from 22.9.3 to 22.10.2 in /ui-test (#​21143) (@​dependabot[bot])
• 5b482d7: chore(deps-dev): bump mocha from 10.7.3 to 11.0.1 in /ui-test (#​21030) (@​dependabot[bot])
• b77d9d9: chore(deps-dev): bump typescript from 5.7.2 to 5.7.3 in /ui-test (#​21443) (@​dependabot[bot])
• 05a9171: chore(deps-dev): bump typescript from 5.7.3 to 5.8.2 in /ui-test (#​22118) (@​dependabot[bot])

Other work

• fdf21f7: Add pollinate to USERS.md (#​21247) (@​shavmohin)
• 3f0a155: Fix application url for custom base href (#​21377) (@​amit-o)
• c689352: Fixing the link in the docs (#​21316) (@​ali-hamza-noor)
• 6f5537b: Merge commit from fork (@​svghadi)
• 4d59154: Replace deprecated go-gitlab dependency with client-go. (#​21175) (@​gbw)
• 9309688: Stabilize on-deployed notification trigger (#​21333) (@​svghadi)
• cce4a28: Update ingress.md (#​21324) (@​aliabbasjaffri)
• 80edbfe: Update toolchain-guide.md (#​21288) (@​Jonty16117)
• 0b542ba: add project missing field to spec (#​21277) (@​afzal442)
• 1194766: added-ACL (#​21238) (@​surajyadav1108)
• fe598a8: chore!: add 60s default jitter (#​22342) (@​agaudreault)
• 47bec8b: chore!: remove legacy repo support (#​19768) (#​21249) (@​crenshaw-dev)
• 5d147a3: chore(appset)!: always apply nested selectors (#​14152) (#​21492) (@​crenshaw-dev)
• 928fd19: chore(appset): simplify cluster list code (#​21820) (@​crenshaw-dev)
• 75bbb50: chore(appset): use DB instead of kube client for cluster validation (#​21190) (@​crenshaw-dev)
• 226a670: chore(ci): improve previous-version script readability, fix bug (cherry-pick #​22378) (#​22381) (@​gcp-cherry-pick-bot[bot])
• 77ad48a: chore(ci): run codegen as part of version bump job (#​21404) (@​crenshaw-dev)
• 335b65b: chore(config)!: Ignore all .status updates & known high churn changes by default (#​21760) (@​agaudreault)
• ab07b0a: chore(controller): simplify sharding code (#​21244) (@​crenshaw-dev)
• 261137d: chore(health): report progressing status for AppSets (#​22092) (@​crenshaw-dev)
• be293fe: chore(hydrator): improve error message (#​21987) (@​crenshaw-dev)
• 42219fd: chore(lint): fix deep copy informers lint (#​22290) (@​crenshaw-dev)
• 4e08b8d: chore(metrics)!: remove deprecated metrics (#​21697) (@​crenshaw-dev)
• bd37458: chore(refactor): remove app destination inferrence logic (#​21189) (@​crenshaw-dev)
• 34fd729: chore(refactor): remove unused function/file (#​21245) (@​crenshaw-dev)
• bd9923f: chore(repo-server): simplify Kustomize/Helm version detection (#​21540) (@​crenshaw-dev)
• 566bc2e: chore(test): simplify test assertions (#​21242) (@​crenshaw-dev)
• ecd0bcd: chore(ui): resolve ts-jest config under globals is deprecated (#​20036) (@​jsoref)
• b6770bd: chore: Add divar.ir to USERS.md (#​21344) (@​aminarefzadeh)
• 12a4dab: chore: Fix data race detection failures in application tests (#​21271) (@​eadred)
• 45e4886: chore: Graceful shutdown for API Server (#​18642) (#​21224) (@​andrii-korotkov-verkada)
• 2ce593b: chore: Optimize Docker image layers (#​21525) (@​marcofranssen)
• 07da3d4: chore: Option to disable sync with replace on API Server level (#​21427) (#​22073) (@​andrii-korotkov-verkada)
• 9d66e89: chore: Remove k8s 1.28 from e2e testing (#​22245) (@​andrii-korotkov-verkada)
• e14d6b7: chore: Update notifications to be less spammy (#​20871) (#​21884) (@​andrii-korotkov-verkada)
• 8d1aeb5: chore: Update some dependencies and add some comments about old libs (#​22104) (#​22208) (@​andrii-korotkov-verkada)
• 5223ce5: chore: Upgrade Redis from 7.0.15-alpine to 7.2.7-alpine and haproxy (#​22108) (#​22110) (@​andrii-korotkov-verkada)
• d765aab: chore: Upgrade ubuntu base image to latest 24.04 digest (#​21524) (@​marcofranssen)
• 91cb693: chore: action docker warnings (#​21556) (@​Softyy)
• 8a447d9: chore: add e2e test for hook finalizer which prevents external resource deletion (#​21113) (@​dejanzele)
• 6daaac5: chore: add log context to proxy extension requests (#​21834) (@​leoluz)
• acb47b4: chore: add script to bump major version (#​21363) (@​crenshaw-dev)
• 944f9f7: chore: add the Argo CD type definitions and method comments (#​21854) (@​nitishfy)
• f044200: chore: bump gitops-engine (#​22335) (@​pjiang-dev)
• 76dbaaa: chore: bump to github.com/grpc-ecosystem/go-grpc-middleware/v2 (#​22098) (@​mmorel-35)
• 9b91454: chore: cleanup diff-cache testdata (#​21600) (@​llavaud)
• 8507a87: chore: define apiextensionsv1 alias with importas (#​21823) (@​mmorel-35)
• 74582e9: chore: embed trivial rand string function (#​22177) (@​crenshaw-dev)
• 35a174b: chore: enable badCond from gocritic (#​21632) (@​mmorel-35)
• b04a7c1: chore: enable context-as-argument from revive (#​21371) (@​mmorel-35)
• c803257: chore: enable duplicated-imports from revive (#​21378) (@​mmorel-35)
• 6c45721: chore: enable early-return from revive (#​21423) (@​mmorel-35)
• f245e8b: chore: enable err-error and strconcat of perfsprint linter (#​21267) (@​mmorel-35)
• 8a6f53d: chore: enable errorf of perfsprint linter (#​21280) (@​mmorel-35)
• bf082c2: chore: enable ifElseChain from gocritic (#​21636) (@​mmorel-35)
• 5508d1f: chore: enable importas for k8s.io/apimachinery/pkg/api/errors (#​21262) (@​mmorel-35)
• 8126508: chore: enable importas for k8s.io/apimachinery/pkg/apis/meta/v1 (#​21284) (@​mmorel-35)
• 4e5db16: chore: enable increment-decrement from revive (#​21366) (@​mmorel-35)
• 947a7b8: chore: enable indent-error-flow from revive (#​21394) (@​mmorel-35)
• 5ef4faa: chore: enable nolintlint (#​21559) (@​mmorel-35)
• 753f7b6: chore: enable parallel helm manifest generation by default (#​22224) (@​nitishfy)
• c739478: chore: enable receiver-naming from revive (#​21372) (@​mmorel-35)
• 9f0dc94: chore: enable redundant-import-alias from revive (#​21386) (@​mmorel-35)
• 24893ad: chore: enable several rules from revive (#​21638) (@​mmorel-35)
• 27915da: chore: enable singleCaseSwitch and commentFormatting rules from gocritic (#​21616) (@​mmorel-35)
• cb3024c: chore: enable superfluous-else from revive (#​21373) (@​mmorel-35)
• 50c49ec: chore: enable unnecessary-stmt from revive (#​21398) (@​mmorel-35)
• 53bc19b: chore: enable unused-parameter from revive (#​21365) (@​mmorel-35)
• 9ea979b: chore: enable use-any from revive (#​21282) (@​mmorel-35)
• 37aaeb3: chore: enable usetesting linter (#​21935) (@​mmorel-35)
• e66068c: chore: enable var-declaration from revive (#​21370) (@​mmorel-35)
• c1b2f78: chore: enable var-naming from revive (#​21861) (@​mmorel-35)
• ceb758c: chore: import k8s.io/api/core/v1 as corev1 (#​21345) (@​mmorel-35)
• 3593f24: chore: mark with-hydrator manifests as generated (#​21639) (@​crenshaw-dev)
• 045a027: chore: reggie-k as release champion for 3.0 (#​21736) (@​reggie-k)
• ffdbcb6: chore: reuse common PermissionDeniedAPIError (#​21283) (@​mmorel-35)
• 2b1220c: chore: revise wrong resource customization usage example (#​22074) (@​hanxiaop)
• aeb0002: chore: set default tracking to annotation (#​22289) (@​crenshaw-dev)
• 9b17495: chore: update go-github to use token (#​21292) (@​aburan28)
• 38c2b34: chore: update gotestsum automatically (#​21828) (@​mikutas)
• 228b86d: chore: update mockery version (#​22126) (@​gdsoumya)
• e3bcc48: chore: updates to Numaplane health checks (#​21671) (@​juliev0)
• 922d080: chore: upgrade Go to 1.24 (#​22242) (@​sivchari)
• ef55ba5: chore: use dario.cat/mergo instead of github.com/imdario/mergo (#​21274) (@​mmorel-35)
• 6087b4f: chore: use github.com/golang-jwt/jwt/v5 (#​21276) (@​mmorel-35)
• 795bda5: chore: use github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus (#​21937) (@​mmorel-35)
• 83257a9: chore: use grpc-middleware interceptors (#​22329) (@​mmorel-35)
• db82e23: chore: use internal errors util instead of pkg's (#​22174) (@​crenshaw-dev)
• 48334cf: chore: use standard errors instead of github.com/pkg/errors (#​21266) (@​mmorel-35)
• 9843bfb: chore: use testify instead of native testing (#​21781) (@​mmorel-35)
• 13235ad: chore: use testify instead of testing.Fatal (#​21258) (@​mmorel-35)
• d7ccf47: chore: use testify instead of testing.Fatal or testing.Error in pkg (#​20761) (@​mmorel-35)
• e7d9091: chore: use testify instead of testing.Fatal or testing.Error in reposerver (#​20762) (@​mmorel-35)
• 644af54: chore: version bumping helm3 (#​22009) (@​igaskin)
• e147247: ci: disable nolintlint linter (#​21707) (@​agaudreault)
• 976a849: ci: fixes #​21862 Concurrency in pr-title-check (#​21863) (@​appiepollo14)
• e5df999: crepocreds-short-changed (#​21285) (@​surajyadav1108)
• 9a3cfcb: docs(2.14): adding basic upgrading docs for 2.14 (#​21744) (@​rumstead)
• 622847b: docs(2.14): use 2.14.1 manifests as remote bases (#​21759) (@​rumstead)
• 073ccf7: fix(#​19314, #​15700): allow ssh/altssh subdomains in repo URLs to match webhook payload (#​21227) (@​mtbennett-godaddy)
• 8f285a5: fix(in-cluster): do not allow the cluster to be used when disabled (#​21208) (@​agaudreault)
• a1431be: fix(ui, rbac): project-roles (#​21829) (@​blakepettersson)
• 26ebb9b: fixed the broken link while version upgrade/degrade (#​21279) (@​afzal442)
• 2bcaa19: revert: add a check for user defined role referential integrity #​21065 (#​22130) (@​rumstead)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.11...v3.0.0

v2.14.15

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.15/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.15/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• ec51989: fix(applicationset): requeue applicationste when application status changes (#​23413) (@​rumstead)
• da2ef7d: fix(sync): auto-sync loop when FailOnSharedResource (#​23357) (@​agaudreault)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.14...v2.14.15

v2.14.14

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.14/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.14/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• a2361bf: fix: add cooldown to prevent resetting autoheal exp backoff preemptively (cherry-pick #​23057) (#​23188) (@​gdsoumya)
• 14fa0e0: fix: parse project with applicationset resource (cherry-pick #​23252) (#​23268) (@​gcp-cherry-pick-bot[bot])
• 2aceb1d: fix: update broken yarn.lock (#​23212) (@​svghadi)

Other work

• 3c68b26: chore: upgrade Go from 1.23.4 to 1.24.4 (release-2.14) (#​23294) (@​thevilledev)
• e24ee58: chore: upgrade golangci-lint to v2 (release-2.14) (#​23305) (@​thevilledev)
• 5f89062: chore: upgrade mockery to v2.53.4 (release-2.14) (#​23316) (@​thevilledev)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.13...v2.14.14

v2.14.13

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.13/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.13/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

This release fixes a critical security issue: GHSA-2hj5-g64g-fp6p

Other work

• 24d5722: Merge commit from fork (@​crenshaw-dev)
• d213c30: chore: bump gitops-engine ssd fix (#​23072) (@​pjiang-dev)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.12...v2.14.13

v2.14.12

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.12/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.12/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• f7ad2ad: fix(ApplicationSet): Check strategy type to verify it's a progressive sync (cherry-pick #​22563) (#​22833) (@​gcp-cherry-pick-bot[bot])
• ced6a78: fix(health): handle nil lastTransitionTime (#​22897) (cherry-pick #​22900) (#​22909) (@​gcp-cherry-pick-bot[bot])
• 25235fb: fix(test): broken e2e test (cherry-pick #​22975) (#​23052) (@​gcp-cherry-pick-bot[bot])
• 78e61ba: fix: Only port-forward to ready pods (#​10610) (cherry-pick #​22794) (#​22826) (@​mikebryant)
• fe93963: fix: do not normalize resource tracking on live crds (#​22722) - cherrypick 2.14 (#​22746) (@​blakepettersson)
• 5bc6f47: fix: infinite reconciliation loop when app is in error (#​23047) (@​agaudreault)
• b163de0: fix: remove project from cache key for project scoped credentials (#​22816) (@​pjiang-dev)

Dependency updates

• efe5d29: chore(deps): resolve CVE GO-2025-3540, GO-2025-3503, GO-2025-3487 within 2.14.10 (#​22709) (@​nathanlaceyraft)

Other work

• 3a9ab77: fix(commit-server): apply image override (cherry-pick #​22916) (#​22918) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.11...v2.14.12

---

Configuration

Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.

k8s/apps/argocd/base/kustomization.yaml

 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- https://github.com/argoproj/argo-cd/manifests/cluster-install?ref=v2.14.11
+- https://github.com/argoproj/argo-cd/manifests/cluster-install?ref=v3.0.9
 # - https://github.com/argoproj/argo-cd/manifests/ha/cluster-install?ref=v2.8.2
 # I don't use Dex at the moment and it doesn't seem to produce metrics
 # when unconfigured.