Argo
v3.5.4CI/CD & App DeliveryOct 6, 2026
A maintenance release with several correctness fixes, a coordinated security fix, and a small logging enhancement. It has no documented operator-facing breaking changes.
Action needed (1)
securityCoordinated security fixes
A coordinated security fix ships in the 3.5 release branch. The release note does not disclose the affected component or vulnerability details.
All 6 other recorded changesfixes 5 · additions 1
fixes (5)
- fix(cmp): clean up tgz stream temporary directories (#29148) (cherry-pick #29156 for 3.5) (#29773) (@argo-cd-cherry-pick-bot[bot])
- fix(ui): manifest viewer jumpiness (#29691) (cherry pick 3.5) (#29725) (@crenshaw-dev)
- fix: cherry-pick #29737 (release-3.5) (#29749) (@blakepettersson)
- fix(manifest-generate-paths): do not report changes on cache miss without path updates (cherry-pick #29442 for 3.5) (#29849) (@argo-cd-cherry-pick-bot[bot])
- fix(repo-server): cherry-pick health check timeout resulting in CrashLoopBackOff to release-3.5 branch (#29901) (@aali309)
additions (1)
- feat(server): log username on login attempts (cherry-pick #29841 for 3.5) (#29861) (@argo-cd-cherry-pick-bot[bot])
Add Argo to your stack
A weekly email arrives when a release needs action. Like the security patches in this release.