Argo

v3.3.0CI/CD & App Delivery

Feb 2, 2026

Argo v3.3.0 is a substantial feature and maintenance release with changes across synchronization, health, hydration, diff and apply behavior, the UI, and resource operations. It also updates core dependencies and removes an app controller flag.

Action needed (3)

securityThe k8s.io/kubernetes module, updated to v1.34.2
The k8s.io/kubernetes module is updated to v1.34.2 in Argo v3.3.0.
securityHelm 3.19.4
Helm is updated to 3.19.4 in Argo v3.3.0.
securityRedis, updated to the latest stable release
Redis is updated to the latest stable release in Argo v3.3.0.

Check if affected (1)

breakingThe --self-heal-backoff-cooldown-seconds flag, removed
Applies if your app controller configuration uses --self-heal-backoff-cooldown-seconds.
The app controller no longer includes the unnecessary --self-heal-backoff-cooldown-seconds flag.

All 362 other recorded changesfixes 161 · value changes 117 · additions 67 · constraints 15 · defaults 1 · removals 1

fixes (161)

fix(actions): enable pause action so deployment can be paused
do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret
ensure finalizer is added when deletionOrder is set as reverse
handle pre/post delete hook finalizers conflicts
fix: crashing page on application create for write secret
fix: create read and write secret for same url
fix: data race fixes and cleanups
fix: data race on ctxCompleted
fix: deadlock on start missing watches
fix: default to tree view if extension shouldn't be shown
fix: diff should perform server side like apply during resource diffing
fix: diffing should not fail if known kubernetes resource has invalid fields
fix: do not replace namespaces
fix: don't remove defaulted fields and rely only on three way diff merge during diffing
fix: don't show error about missing appset
fix: file extension comparisons are case sensitive
fix: fix temporary files written to '/dev/shm' not cleaned up
fix: git tag override
fix: health status for daemonset with onDelete updateStrategy
fix: health status is set to healthy for statefulset with updateStrat
fix: hydration errors not set on applications
fix: improve manifest parsing
fix: invalid error message on health check failure
fix: make webhook payload handlers recover from panics
fix: managed namespaces should not mutate the live state
fix: panic for data type conversion to *unstructured.Unstructured.
fix: panic: interface conversion: interface {} is string
fix: printing gvkparser error message
fix: removeNamespaceAnnotation should not panic if annotation has unexpected value
fix: resolve deadlock
fix: restore ability to connect a repo in the GUI
fix: return empty instead of error if cache unavailable
fix: return empty list instead of nil to prevent panic.
fix: revert #24197
fix: server-side diff shows refresh/hydrate annotations
fix: sort endpoint IP addresses before diffing
fix: sort fields to correctly calculate diff in server-side apply
fix: stop relying on imported types for ingress health check
fix: structured-merge diff apply default values in live resource
fix: sync hooks should be deleted after sync phase/wave completion
fix: sync should apply Namespaces and CRDs before resources that depend on them
fix: update searchbar props on url parameter change
fix: use custom cluster secret informer
fix: use streaming YAML decoder from Kubernetes
fix:(ui) don't render ApplicationSelector unless the panel is showing
c377101491406203f479fb74a573269eb5c8e50c: fix(appset): progressive sync loop when application has sync errors (#24507) (@agaudreault)
d78929e7f6c7e114241e7cbfa5fab14391027a2e: fix(cluster): reduce lock contention on cluster initialization (#660) (@crenshaw-dev)
adb68bcaab73a18c454caae4c744d932ee83670f: fix(clusterCache): don't miss finding live obj if obj is cluster-scoped and namespacedResources is in transition (#597) (@ncdc)
e181fbb81df7214401f51daf8b2253c9f9142f2f: fix(cmp): fix plugins not having access to argocd cli for git ASKPASS (#24665) (@zachaller)
ef5b77811d7cb1d07a0305bc0b39caed179553fd: fix(health): incorrect reason in PullRequest script (#24826) (@crenshaw-dev)
2849f5393076feb85255051c38ef5eee089c0030: fix(health): typo in PromotionStrategy health.lua (@crenshaw-dev)
7c0f032deff536ae64db7dd3a730a59bc0affb81: fix(health): update crossplane healthchecks (#25386) (@jonasz-lasut)
28ec26a6ca6b6a8e9908dc0f946b0f44100af239: fix(health): use promotion resource Ready condition regardless of reason (#24971) (@crenshaw-dev)
dab4cc0b8ad178b8b42c1c9f8418f20692700570: fix(hooks): always remove finalizers on create if hook exists (#770) (@agaudreault)
b52a0750b2bf8c726d4a689000a723946f1c57b9: fix(hydrator): .gitattributes include deeply nested files (#25870) (cherry-pick #26011 for 3.3) (#26013) (@argo-cd-cherry-pick-bot[bot])
a2659e95603427e02c817994cf3994575feee322: fix(hydrator): appset should preserve annotation when hydration is requested (#25644) (@agaudreault)
48a9dcc23b962eafe0a74691769c2c891882ec31: fix(hydrator): empty links for failed operation (#25025) (cherry-pick #26014 for 3.3) (#26018) (@argo-cd-cherry-pick-bot[bot])
fe0466de511fb7d202ec7c15b24fc18db8230f21: fix(hydrator): git fetch needs creds (#25727) (cherry-pick #25738 for 3.3) (#25742) (@argo-cd-cherry-pick-bot[bot])
393cb97042a5b5089ef26f93ff43c1e21c883df3: fix(hydrator): hydrated sha missing on no-ops (#25694) (cherry-pick #25695 for 3.3) (#25697) (@argo-cd-cherry-pick-bot[bot])
0fa47b11b258da9a082a5b206e7fb175e70a9fdd: fix(hydrator): pass destination.namespace to manifest rendering (#25478) (cherry-pick #25699 for 3.3) (#26019) (@argo-cd-cherry-pick-bot[bot])
708c63683c1a4c7936f8dae4f432cd6d1e6371ad: fix(hydrator): race when pushing notes (cherry-pick #25700 for 3.3) (#25709) (@argo-cd-cherry-pick-bot[bot])
05b416906e758bcb3f22b6911af7c94f44dc1352: fix(metrics): more consistent oci metrics (cherry-pick #25549 for 3.3) (#25728) (@argo-cd-cherry-pick-bot[bot])
5efb184c7970b19a4671b4377d73b624ca8e7107: fix(oidc): check userinfo endpoint in AuthMiddleware (#23586) (@the-technat)
792124280fcc67d9b3498bc0a27e05844ddb1e30: fix(server): Dry run always in client mode just for yaml manifest validation even with server side apply (#564) (@anandf)
7430650ff567d12ce452a72dc1c3055e10b603ed: fix(server): ensure resource health status is inferred on application retrieval (#24832) (#24851) (@vr009)
20604f1b21772df85f39878cb6774672446038ac: fix(server): update resourceVersion on Terminate retry (cherry-pick #25650 for 3.3) (#25717) (@argo-cd-cherry-pick-bot[bot])
4a5648ee411b42f6601782ae6c1c50e0f724c9c5: fix(server): use server side dry run in case if it is server side apply (#546) (@pasha-codefresh)
8007df5f6c5dd78a1a8cef73569468ce4d83682c: fix(sync): create namespace before dry-run (#731) (@agaudreault)
c2f611f8cdb37131d970b0555025a2e4a4ad1e79: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (#24802) (@aali309)
27a503aa598ea09f5584ba5fde1661c5813f84c5: fix(ui): add null-safe handling for assignedWindows in status panel (#25128) (@choejwoo)
6d40847e177f866a959b53235479e6265814adf3: fix(ui): fix minor UI issue in app operation state (#24845) (@choejwoo)
ed1fb04bcc46b0e36f442fdc625602e2d50bd0ca: fix(ui): inaccurate timestamp in tooltip for root node (#25014) (@choejwoo)
ad96cb8f0eda28fca0ef08b921fd9c5b9d01acca: fix(ui): overlapping UI elements and add resource units to tooltips (#24717) (@choejwoo)
0b40e3bc786ed6fd50b39303e95bdd72f6ba577d: fix(ui): refactor tooltip, align action btns in app tile view (#25098) (@choejwoo)
8dcaa2fa4761f9283a3435c02e2f5c6fd1e0e58d: fix(ui): show delete/details action dropdown for orphaned resource (#24766) (@choejwoo)
24fbf285d270e1a66505ae995ea5448ac1ce0bc1: fix: shell compatibility issues in Procfile (#24792) (@adityaraj178)
06792159924477c02f12856b80c40973e7e3fb31: fix: #24781 update crossplane healthchecks to V2 version (#24782) (@jonasz-lasut)
2c97a96cab1b9386728feed92e0fa31547ea2a98: fix: 'ResourceOperations.CreateResource' should use 'kubectl' package to properly execute create operation (#298) ( <>)
847cfc9f8b200e96a70b591a68b9fb385cf2ce56: fix: Ability to disable Server Side Apply on individual resource level (#634) (@pasha-codefresh)
2565df31d16fd28d34a442072cbb7bcbb7415d33: fix: Add ScaleDownLimit as health state for HPA (#343) (@harikrongali)
23f41cb84931266f2632688c934ff101ae30e868: fix: Add ScalingDisabled healthy state to HPA (#323) (@maruina)
5d680d6b808bb9881e87cef628913238019f8da7: fix: Add additional healthy states for HPA (#234) (@mikebryant)
61c0cc745e0bbd0dc4a35d50f5a6d0f87606ff3b: fix: Add missing IngressClass in kind order when syncing tasks (#380) (@terrytangyuan)
c0b63afb740ce71a046a2efe2e75ffaebab3c72e: fix: Address issue during diff when secret data is nil (#345) (@leoluz)
ed6fe769e6aa626f20379d0c2ccd3cbac2d8ae0c: fix: Allow the ISVC to be healthy when the Stopped Condition is False (#25312) (@hdefazio)
3a3f6a33d7eed83929096997cbdbe3bc9ff95069: fix: Child apps should not affect parent app's health by default (#153) (@keithchong)
d59276a397540aa3c42eb9b66c431ee55e4f215d: fix: Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (#24587) (@aali309)
760fcb68be8ea237417ebef475919f24dfed4859: fix: Current time is not set in startedAt in NewSyncContext (#180) (@yutachaos)
814d79df4954c8a8b9ebbbe023b974b9c634a8f9: fix: Data race between gitops-engine's pkg/cache/cluster.go and itself, on Argo CD startup (#4627) (#168) (@jgwest)
872c4700331e65ecbe618cc7aca3d134ffd93aba: fix: Detect unknown fields in invalid specs as OutOfSync (#154) (@jgwest)
380f7be5bf322929c265537fb7e0b1628dc8d759: fix: Dry run stuck on pre sync hook (#236) (@mayzhang2000)
2bc3fef13e0712cf177ba6cbcfb52283f3d9ca73: fix: Fix argument order in resource filter (#436) (@jannfis)
762f9b70f3056381aa782a4ea310a57919380d49: fix: Fix checking dryRun when using Server Side Apply (#699) (@pjiang-dev)
30abebda3d930d93065eec8864aac7e0d56ae119: fix: GCP config connector healthchecks do not make use of existing observedGeneration #24458 (#24459) (@Hapshanko)
53cbe5f6be19b58390c75759583b8729c5547184: fix: HPA health check is making incorrect assumption on annotations (#190) (@mayzhang2000)
54bbebf5933c6e8eb4fe9b3bcc81f81d19fa029c: fix: Hook Deletion Policies HookSucceeded should be run after whole H… (#144) (@mayzhang2000)
1f147912e4c4eac30bcba41ebf3c4995c38c1c63: fix: Make CephCluster CRD health script deterministic (#25391) (#25392) (@rkevin-arch)
dcb86f7d6b6460e4f9172f49b0dbc67d27589c97: fix: Namespace auto-creation (#105) (@mayzhang2000)
3ef5ab187edd80dfd564301a7969c0212568e90c: fix: New kube applier for server side diff dry run with refactoring (#662) (@andrii-korotkov-verkada)
ed31317b276570be2ef14fe531870fe6922cab9e: fix: Only consider resources which supports appropriate verb for any given operation (#423) (@jannfis)
0d0cec6b66c906b1dda6784637e1dfb2ada328f1: fix: Only show apiVersion/kind when targetState is defined (#25068) (@jsoref)
32c32a67cb2d0e4077e6e474dade43c798458e59: fix: Only show please update resource specification message when spec… (cherry-pick #25066 for 3.3) (#25894) (@argo-cd-cherry-pick-bot[bot])
fbcaf35ab2c26568c7a384be43260861cd55360a: fix: Progress Sync Unknown in UI (#24202) (@aali309)
8849c3f30c5523222c2575951b3102006c1f51d4: fix: Server side diff now works correctly with fields removal (#640) (@andrii-korotkov-verkada)
89c110b5952eb1005f1962aad128f20a0d3dc0ed: fix: Server-Side diff removed fields missing in diff (#722) (@pjiang-dev)
4fd18478f5946b756fe253055358f89d4dd403a9: fix: Server-side diff shows incorrect diffs for list related changes (#688) (@pjiang-dev)
73bcea9c8c8f0f93322274af1aeb17b0e3cfe4d1: fix: Set QPS and burst rate for resource ops client (#395) (@jannfis)
8d99997db097f1e3c8966ee84e43fdd3c5e879e9: fix: Set TLSServerName in NewKubeConfig (#156) (@ailurarctos)
7171d62f8c6e1eab34759ae88c86622cce99e26d: fix: Support transition from a git managed namespace to auto-create n… (#141) (@mayzhang2000)
33f542da003cf7e227299a901a42d46f80015873: fix: SyncOption Replace=True is broken (#321) ( <>)
74de77a24c80e0397f1c0f92e0f6ea9a19210e9d: fix: Toggle automated.enabled to disable auto-sync for rollbacks (cherry-pick #25719 for 3.3) (#25943) (@argo-cd-cherry-pick-bot[bot])
069a5e64fb79ea610661b7ea4c0417987f50eb8f: fix: WithInitialState should require start time to support generateName hooks properly (#183) (@jessesuen)
b0c5e00ccfa5d1e73087a18dc59e2e4c72f5f175: fix: add default protocol to subset of ports if it is empty (#347) (@ahalay)
917f5a0f16d57162a335e8134230e714de4faa05: fix: add suspended condition (#484) (@ashutosh16)
c1e23597e77e6ddc410aa834ca27120d082dfe15: fix: address kubectl auth reconcile during server-side diff (#562) (@leoluz)
d5d7e8fad2e56ef2d7b52767f0dd89e8af3f8344: fix: allow flags to be set when auto-sync is disabled (#24328) (#24380) (@downfa11)
46073c1cd66d70b80f376b81078da2a2aba2cf91: fix: applyOutOfSyncOnly should work with sync waves as well (#251) (@kshamajain99)
2a9c1448b292af84c1e3a607ad42c21bfbcfa785: fix: applyoutofsync with dry-run (#253) (@kshamajain99)
b4dd8b8c3976d03f9928a393c2447830a3ef7449: fix: avoid acquiring lock on mutex and semaphore at the same time to prevent deadlock (#521) (@alexmt)
7a09f69ad6293fa764ab425a3b3223996c4394d7: fix: avoid calling UpdateRevisionForPaths unnecessary (#25151) (@alexmt)
d25b8fd69f0dc83b0eead1154c5d33add1c61de7: fix: avoid memory and events spike after forcesfully refreshing api cache (#145) ( <>)
54992bf42431e71f71f11647e82105530e56305e: fix: avoid resources lock contention utilizing channel (#629) (@mpelekh)
98ccd3d43fd9f4dbc3f6610b9701fbf56be53ded: fix: calculate SSA diffs with smd.merge.Updater (#467) (@leoluz)
fe4ab01cba7656617a293fc32de250d4069a473b: fix: capture stderr in executil RunWithExecRunOpts (#25139) (@dudinea)
81dcc2f2eee94753b514615e40ca995ee71f1b9b: fix: check for no local config when running argocd context dev-system (#25245) (@anbraten)
828dc7574b8adc2dd557658e878614f2ca6967d2: fix: check resource namespaces are managed (#143) (@jopit)
3f3e54f7c340ef4cc9b8953325430ca5aaa465db: fix: cherry-picking with quotes in the title (#25017) (@Joibel)
8fbb44c336f06397840a7b626c6535d11b2183de: fix: close response body on error paths to prevent connection leak (cherry-pick #25824 for 3.3) (#26005) (@argo-cd-cherry-pick-bot[bot])
f4e479e3f0ff06ced36eba12a175c180b101e92c: fix: consider Replace/Force sync option on live resource annotations (#26110) (#26189) (@agaudreault)
610ea27c8eaab810e8d11587059a8e67803eb359: fix: correct mismatch in typescript repository model (#25273) (#25274) (@allanyung)
fix: correctly infer ownership references from PVC to StatefulSet
fix: deadlock in listener
fix: deduplicate OpenAPI definitions for GVKParser (#587) (#590)
fix: ensureCRDReady check did not work for v1 CRDs
fix: exclude creationTimestamp from diffing
fix: fix nil pointer dereference in cluster caching
fix: handle nil ParseableType from GVKParser
fix: health check for HPA doesn't catch all good states
fix: honor debuglog cmd option in application controller
fix: leverage RetryWatcher to watch cluster events and introduce periodical K8S API state resynchronization
fix: nil and empty ignoredifferences
fix: register new CRD to apigroups
fix: regression on creationTimestamp with server-side diff
fix: remove last-applied-configuration before diff in ssa
fix: remove lock acquisition in ClusterCache.GetAPIResources()
fix: resolve argocdService initialization issue in notifications CLI
fix: server-side diff shows duplicate containerPorts
fix: structured merge diff fix for null metadata field
fix: stuck hook issue when a Job resource has a ttlSecondsAfterFinished field set
fix: sync option applyOutOfSync
fix: the concurrency issue with git detached processing in Repo Server
fix: update ExternalSecret discovery.lua to also include the refreshPolicy
fix: update normalization for ignoreDifferences on server-side diff
fix: use registry for helm registry .. commands
fix: volumeClaimTemplates are out of sync incorrectly
* 4a71661dbe1288d81339a5e4d037bee2f91cace5: chore(ui): fix Incorrect links to applications managed by other argo instances (#23266) (@aali309)
* b18f378548281bb7804a903f427023507b212bea: fix for nil while sync (#83) (@mayzhang2000)
* dc952c1a60ae387299409f447de886d21b2a6268: validate resource opts (#759) (@agaudreault)
fix(sync): ApplyOutOfSyncOnly=true sync option is not honoured for cluster scoped resources
fix: Health status for HTTPRoute with multiple generations
fix: Opentelemetry Collector in sidecar mode doesn't count instances

value changes (117)

use clone instead of replace on sprig templates to reduce function copies
avoid unnecessary repo-server calls
don't push commits if manifests don't change
improve sync warnings
More optimal IterateHierarchyV2 and iterateChildrenV2
improve memory consumption limiting
improve sync operation messages
use Kubernetes v1.18.6 libraries
fix: replace k8s.io/endpointslice to v0.29.2
chore(deps): Update some package versions
chore(deps): Upgrade structured-merge-diff from v4.4.1 to v4.4.3
chore(deps): bump code.gitea.io/sdk/gitea from 0.22.0 to 0.22.1
chore(deps): bump express from 4.20.0 to 4.22.1 in /ui
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.1 to 1.20.0
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from … to …×3
chore(deps): bump github.com/Azure/kubelogin from … to …×3
chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.16.0 to 2.17.0
chore(deps): bump github.com/casbin/casbin/v2 from … to …×7
chore(deps): bump github.com/cyphar/filepath-securejoin from … to …×2
chore(deps): bump github.com/evanphx/json-patch
chore(deps): bump github.com/evanphx/json-patch to v5.9.11
chore(deps): bump golang.org/x/sync from 0.17.0 to 0.18.0
hide sync option 'replace' if sync with replace is disabled in the server
add status.resourcesCount field to appset and change limit default
return images from resources when sync occurs
update unpause fast/gradual actions for Numaplane rollouts
fix: reduces information returned by settings api when accessed anonymously
fix: replace k8s.io/endpointslice version
fix: use informer in webhook handler to reduce memory usage
fix: workflows without status.phase should be considered Progressing
chore(deps): Update some dependencies - another run
chore(deps): bump axios from 1.8.2 to 1.12.2 in /ui-test
* ab11e959b47be6a37d5e4d8b907e56df0624b80e: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 (#24855) (@dependabot[bot])
* eb76c93f0a2ef5e93c63a47add67b73f0de3ba1b: chore(deps): bump github.com/go-logr/logr from 0.2.0 to 0.2.1 (#173) (@dependabot[bot])
* 5bbbdfbc6998397dfb594b892ba03b920105144c: chore(deps): bump github.com/go-logr/logr from 1.2.0 to 1.2.2 (#368) (@dependabot[bot])
* 5a60cc4ee6d0b50ee62fbc8b136f15d27b655b83: chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#24775) (@dependabot[bot])
* b829cd29c89de5e295db4e6685d9b2d85ad6b94b: chore(deps): bump github.com/go-openapi/runtime from 0.29.0 to 0.29.2 (#25255) (@dependabot[bot])
* 0f8652d4e73afede5a9ec3b5a8170b73490b8c06: chore(deps): bump github.com/golang/mock from 1.4.4 to 1.5.0 (#241) (@dependabot[bot])
* 59b6b0e2b87b2d0ded674102ab8feeed536f56d3: chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.2 to 2.3.3 (#25176) (@dependabot[bot])
* 860eed5127291c4c134bde473f6e9e853c76f368: chore(deps): bump github.com/itchyny/gojq from 0.12.17 to 0.12.18 (#25465) (@dependabot[bot])
* cc57831808c4366b9a5ccb43b8ebbd1c0d758833: chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.87 to 0.9.88 (#25544) (@dependabot[bot])
* 2adf4568a17f6c68912a6a00f66e7ac846c651b8: chore(deps): bump github.com/olekukonko/tablewriter from 1.0.9 to 1.1.0 (#24676) (@dependabot[bot])
* b6bf931fe4766955de54aae4174b618d3173539d: chore(deps): bump github.com/olekukonko/tablewriter from 1.1.0 to 1.1.1 (#25232) (@dependabot[bot])
* 56dcea0cfe5b538f59277d2437bced3a2e426038: chore(deps): bump github.com/olekukonko/tablewriter from 1.1.1 to 1.1.2 (#25453) (@dependabot[bot])
* db76222068517689d4c8943952dd81a4bb8ae978: chore(deps): bump github.com/spf13/cobra from 0.0.5 to 0.0.7 (#78) (@dependabot[bot])
* f53e1d56298f15664d489b33e562b004da58815d: chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#25505) (@dependabot[bot])
* e5e3a1cf5c1263d3db5cfda60cd86f540e0cf6a8: chore(deps): bump github.com/spf13/cobra from 1.2.1 to 1.5.0 (#420) (@dependabot[bot])
* ee5c440fc4cbfec1b6ae8fb806dd798ef23d3c9f: chore(deps): bump github.com/stretchr/testify from 1.4.0 to 1.6.1 (#77) (@dependabot[bot])
* 09186f3d4f4b943942bec04496f52a2e84dd62da: chore(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#208) (@dependabot[bot])
* f43147f813c8779b32624a1b8a055805cc10136f: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.6 to 0.147.1 (#24705) (@dependabot[bot])
* e75e37c06cce0512ce29aa9ae0e6dbc8c32bd7a5: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.147.1 to 0.148.0 (#24718) (@dependabot[bot])
* eff6a63e10e1f1b6169184d4cff2903737b78de8: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.148.0 to 0.148.1 (#24774) (@dependabot[bot])
* b8f5299f2198143b8d319e29a37693fb33f0bd81: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.148.1 to 0.157.0 (#24950) (@dependabot[bot])
* 1b4fde19865403cab17737b3011f1a7529407ec1: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.157.0 to 0.157.1 (#25108) (@dependabot[bot])
* c7b47c3cd2ab5e7278b0c315d908b0fd2bf08861: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.157.1 to 0.159.0 (#25175) (@dependabot[bot])
* 61a89dc23e854bfd991154629d3ced050618679c: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.159.0 to 0.160.0 (#25281) (@dependabot[bot])
* a62e3687f2dbf74d22c570075dc722614d476a29: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.160.0 to 1.5.0 (#25481) (@dependabot[bot])
* 4ddd0a2fc7bd2ef4da061b347864d9869f269857: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.5.0 to 1.7.0 (#25543) (@dependabot[bot])
* 45a54ae04106bd1476c91aac236392ed64311f3c: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.7.0 to 1.8.0 (#25554) (@dependabot[bot])
* 8fec5c53060c9b1c267e256113c7a9331298d5c9: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.0 to 1.8.1 (#25616) (@dependabot[bot])
* 4d33ca981b9df3a2b232491889243dfa8b355452: chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#24908) (@dependabot[bot])
* 791e92490fb9d52a47e65e2eede2aa359270b2a8: chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#25355) (@dependabot[bot])
* 805c3891cb9bc65930d564f47fdf9c2c5c4243d6: chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 (#25555) (@dependabot[bot])
* 30f4accb42d628d50bbdcba1ddf2a4239e5c027d: chore(deps): bump golang.org/x/net from 0.26.0 to 0.33.0 (#671) (@dependabot[bot])
* e5ef2e16d84d3e9f5bb271be94782f81a6048566: chore(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 (#700) (@dependabot[bot])
* 9169c08c91e754686bfcbeb38e155a5256572eff: chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 (#713) (@dependabot[bot])
* f0bb1192a8d6040c1878ce7db6d7b464bad1e54a: chore(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 (#24904) (@dependabot[bot])
* f618adb93e3e3eec4e87069d09db996160acdb94: chore(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 (#25264) (@dependabot[bot])
* fa873d4085d539096f4b4023c9a76aba0d7bb05a: chore(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 (#25556) (@dependabot[bot])
* ce183f02fe1373b03b9cd2107b753f19ae5158cb: chore(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#24903) (@dependabot[bot])
* d8a86f4ccb81ffca93a9f54e7dbc9d96db4b83ce: chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#25234) (@dependabot[bot])
* b6da0545f3e7293f607715453a007953cef59145: chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#25559) (@dependabot[bot])
* 95b191d349448b56ccd258ca9e44f41352e0b0af: chore(deps): bump golang.org/x/time from 0.13.0 to 0.14.0 (#24906) (@dependabot[bot])
* 8273c3a8bac3426bbddbc2ef2a252ba76cac74c8: chore(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0 (#24870) (@dependabot[bot])
* 7b73766251ccfa916e27a17b40054325bd4d006a: chore(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 (#25320) (@dependabot[bot])
* d9fe8a41752e8e55aa56f80289f91159aed6b308: chore(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 (#25656) (@dependabot[bot])
* 48c6671593fdfe52bd887482467598ec2f91b538: chore(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10 (#24829) (@dependabot[bot])
* ec7134406a98e963b0e87d8f203719335a6e6d2d: chore(deps): bump js-yaml from 4.1.0 to 4.1.1 in /ui (#25315) (@dependabot[bot])
* 83ce6ca8cedc48e62181c593132cd47646be78a9: chore(deps): bump k8s libs from 0.29.2 to 0.29.6 (#586) (@crenshaw-dev)
* 51a33e63f175339e55c29b813c7b836262d0f714: chore(deps): bump k8s.io/klog/v2 from 2.30.0 to 2.70.1 (#426) (@dependabot[bot])
* 73f3e7f01a9b36e655203b93d76927a36d5c3611: chore(deps): bump k8s.io/klog/v2 from 2.4.0 to 2.8.0 (#239) (@dependabot[bot])
* b5600162862f1bc5d5b9540cf12de4f1e394bbfc: chore(deps): bump k8s.io/kubernetes from 1.22.2 to 1.23.1 (#365) (@tommyknows)
* 10f991d674374db3371dae7ac729aa8266cdfa40: chore(deps): bump min-document from 2.19.0 to 2.19.1 in /ui (#25223) (@dependabot[bot])
* 3ad7da50f7ade6a7924e7f5d70ae53354e10ece6: chore(deps): bump node-forge from 1.3.0 to 1.3.2 in /ui (#25434) (@dependabot[bot])
* 17b98d9b666d2f78d340e973b051185bd8bec540: chore(deps): update github.com/argoproj/notifications-engine digest to e2e7fe1 (#25604) (@renovate[bot])
* ac071b57a156d13ab0c2b26a70fe8e4e3555b93c: chore(deps): update notifications-engine to fix GitHub PR comments nil panic (cherry-pick #26065 for 3.3) (#26075) (@soutar)
* 369fb7577e58d34faacf6dae439e014c36496530: chore(deps): update notifications-engine to v0.5.1-0.20251223091026-8c0c96d8d530 (cherry-pick #25785 for 3.3) (#25853) (@argo-cd-cherry-pick-bot[bot])
* 0371401803996f84bcd70a5f6bb2f0ecc7d7b5d2: chore(deps): upgrade go version in dockerfile (#638) (@jmeridth)
* f15cf615b8141a9f0d8e37cf92bac2d0e7a486da: chore(deps): upgrade k8s version and client-go (#530) (@fengshunli)
* 15973bc6b42d0b0f376c8cb2b7ee9de7715b1d7a: Do not use --force with --dry-run (#633) (@rafal-jan)
* 8a3ce6d85caa4220cfcaa8aa8b6d6dff476909ec: Update condition to select right pvc as child for statefulset (#550) (@hanzala1234)
* b371e3bfc5e95962096866e3d8e0205bf647f1a2: Update namespace v2 (#465) (@blakepettersson)
* a16fb84a8c4eaaeeb89d0a3364a5b7e87e128394: bump k8s v1.32 (#665) (@sivchari)
* 675f8cfe3f073d4ec070b1fb67d6c577f08d21b6: chore(cherry-pick-3.3): bump expr to v1.17.7 (#25888) (@nitishfy)
* 116707bed11bb0a9efc26cdad44d39d84ede77da: chore(cli): plugins always have an argocd prefix (#24768) (@blakepettersson)
* cc707ccc94eca610ae467de38c92d33835bc7b55: chore: Update to Kubernetes v1.19.2 (#139) (@ash2k)
* 928245881d739498fa3cb6174caa4a65c01b17ff: chore: Use v0.20.4 kube dependencies (#238) (@sbose78)
* 95e00254f82a1e2a38c47b8383e68dddff763b88: chore: bump k8s libraries to 1.31 (#619) (@crenshaw-dev)
* 97ad5b59a62726af8f9a2a86824b5906d76f7e03: chore: bump k8s v1.34 (#773) (@pjiang-dev)
* a45189fc91b93c4c94d72e06ae4c0edcb6559dd9: chore: bump k8s.io dependencies to 1.17 (#70) (@darshanime)
* 099cba69bdfccba0d9159260f22a79225e1bc8b9: chore: bump kubernetes version to 0.30.x (#579) (@sivchari)
* efca5b9144fab9aa4d5aabb1a51d6340d8fa0bd4: chore: bumps golang version everywhere to the latest 1.25.5 (cherry-pick #25716 for 3.3) (#25808) (@argo-cd-cherry-pick-bot[bot])
* 5db7846c78f02fd29230e42a06d70104b67aa027: chore: bumps helm to 3.19.2 and kustomize to 5.7.1 (#25362) (@ppapapetrou76)
* 46d14961401878dc5c396e346c2bad5a9701605c: refactor: Kubernetes 1.21 libraries (#266) (@ash2k)
* 32c6afc4a7a5a6fe011cffc6dc494184db5bd411: refactor: Kubernetes v1.20.1 (#195) (@ash2k)
* 27374da031e7dcfcacc345c840338c19de03271b: refactor: ugprade k8s client to v0.22.2 (#338) ( <>)

additions (67)

feat(actions): add icons to apps actions
Updated CLI to show Plugins during tab completion
add powershell completion
add grafana-org-operator Health
add inline parameter support to Source Hydrator
conditionally render app view extensions
support custom icons
Ability to create custom labels for namespaces created with syncOptions CreateNamespace
Add ability to hide certain annotations on secret resources
Add health check for Ceph CRD
Add health checks for ServiceBinding and ServiceInstance
Add impersonation support for App finalizer deletion
Add path flag to ArgoCD CLI app list
Add server-side apply manager config
Add the ability to not autogenerate external URLs from ingress object
Enable SkipDryRunOnMissingResource sync option on Application level
Implement Server-Side Diffs
PreDelete hooks support
Prune resources in reverse of sync wave order
add CreateResource to kubectl
add FindResources method that allows to find any resource in cache
add ability to use shallow clone for repositories
add basic support for server-side apply
add creation timestamp
add support split yaml that return actual yamls
added cascade option to DeleteResource
adds various OCI metrics
application resource deletion protection
configurable watch resync timeout. ability to disable cluster resync
create namespace
detect PVC StatefulSet ownership
expose all kubernetes resources in cluster info
expose cluster sync retry timeout
implement gitops-agent
introduce SyncWaveHook callbacks invoked after applying each sync wave
oidc background token refresh
retry with client side dry run if server one was failed
split refresh button with dropdown for hard refresh
support 'Replace=true' sync option
support configuring cluster cache re-sync timeout
support exiting early from IterateHierarchy method
support replace strategy for CRD
support resource prune propagation policy
support resource pruning in gitops-agent
sync-options annotation with Force=true
use different env variable to control server side K8s API call timeout
feat(actions): Add cloudnativepg reload, restart, promote, suspend and resume actions
feat(actions): PullRequest merge action
feat(actions): add pause action for KEDA ScaledObject and ScaledJob
feat(appset): add pprof endpoints
Add additional examples to proj list command
Secrets credentials via volume mount
implement abstraction layer for appset ui support
Apply out of sync option only
Support for retries when building up cluster cache
add GvkParser in cluster cache
add profile feature for agent
add sync delete option
auto migrate kubectl-client-side-apply fields for SSA
better error message for sync operations
cluster cache should expose synchronization error
expose APIGroups in GetClusterInfo
implement KEDA scaledJob health-checks
prune last
* 717b8bfd69482e09a77294ba873570c6ead514b9: Add option to skip the dryrun from the sync context (#708) (@Nheijmink19)
* c0ffe8428a23011ae9f6d0d3d01f9bf6200a4339: manage clusters via proxy (#466) (@ls0f)
* c5b7114c501fc0a12a12c9055ed0913be7c278b3: selective sync (#213) (@kshamajain99)

constraints (15)

Add support for HPA v2 (autoscaling/v2)
allow limiting clusterResourceWhitelist by resource name
syncing to a different revision requires override privilege
added support for filtering by group in app get-resource CLI command
add support for github app authentication without installationid
Namespace/CRD creation should happen before PreSync phase
auto respect rbac for discovery/sync
cross namespace hierarchy traversal from cluster-scoped parents to namespaced children
support limiting number of concurrent k8s list queries
support managing cluster resources in a namespaced mode
ed983d8a6985fce56d7dbf486626238e2166b691: fix(oci): loosen up layer restrictions (#24640) (@blakepettersson)
a6472c83935700e43756ea7c19e91c5ef83f509b: fix: allow docker dhi helm charts to be used (cherry-pick #25835 for 3.3) (#25964) (@argo-cd-cherry-pick-bot[bot])
bc811c5774079e4e58483fb8c176c3f4a1b25aa7: fix: allow for backwards compatibility of durations defined in days (#24769) (@lplazas)
fix: limit number of resources in appset status
* bd7681ae3f8b432aa688daf2b8358efd9914888e: Added support for impersonation in the kubectl (#534) (@anandf)

defaults (1)

* 631d429e2c8c0b70a4b3537c8686022da7627184: set default verbosity as 0 when dry run strategy is none (@ranakan19)

removals (1)

Revert "feat: Ability to create custom labels for namespaces created … (#455)

Add Argo to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →

Official release note ↗All Argo releases →