Argo

v3.4.10CI/CD & App Delivery

Oct 6, 2026

A maintenance release with routine dependency updates, bug fixes, and improved release provenance for container images and CLI binaries. It also includes an undisclosed coordinated security fix that requires an upgrade.

Action needed (1)

securityCoordinated security fixes
The release-3.4 branch includes coordinated security fixes in commit 4bc8085b0a6d2296b849539d3d09fc7be7a4a511 under issue #30039.

All 9 other recorded changesvalue changes 5 · fixes 3

value changes (5)

* 2e4811cc084e9b10f27813a16ae17fae9b664328: chore(deps): bump github.com/go-git/go-billy/v5 from 5.6.2 to 5.9.0 (cherry-pick argoproj#27847 for 3.4) (#29759) (@nmirasch)
* 9c3211c4cb07184428583d2e0acd05ad5be7e49f: chore(deps): bump go.opentelemetry.io/otel from 1.43 to 1.44 (release-3.4) (#29764) (@nmirasch)
* 08da64bf920ff076913e213331dac51f56ea0059: chore(deps): bump golang.org/x/crypto to 0.57.0 (release-3.4) (#29825) (@akhilnittala)
* 4469a335a79f7b9ab8e263179f507cd21fc19834: feat(server): log username on login attempts (cherry-pick #29841 for 3.4) (#29860) (@argo-cd-cherry-pick-bot[bot])
bump up js-yaml from 4.3.1 to 4.3.2

fixes (3)

* e7225da286ecd43eb31f41d04717ce0b9a6852a4: fix(cmp): clean up tgz stream temporary directories (#29148) (cherry-pick #29156 for 3.4) (#29775) (@argo-cd-cherry-pick-bot[bot])
* 54bb5b408421de8622a15e40467932599bebdbcc: fix: cherry-pick #29737 (release-3.4) (#29765) (@blakepettersson)
* f161802f4fa3b0f874640fdff6d92f9143ff2e20: fix(ui): manifest viewer jumpiness (#29691) (cherry pick 3.4) (#29726) (@crenshaw-dev)

Add Argo to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →

Official release note ↗All Argo releases →