v2.14.17

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.17/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.17/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Full Changelog: v2.14.16...v2.14.17

v2.14.16

Quick Start

Use v2.14.17

There was an issue with immutable releases for v2.14.16 which caused some release steps to fail (uploading provenance and SBOMs). There should be nothing wrong with v2.14.16, but v2.14.17 is equivalent with a fully-successful release.

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.16/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.16/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 5d0a4f0: fix(appset): When Appset is deleted, the controller should reconcile applicationset #23723 (cherry-pick ##23823) (#23832) (@rumstead)
• d95b710: fix(controller): get commit server url from env (cherry-pick #23536) (#23543) (@gcp-cherry-pick-bot[bot])
• 72e2387: fix(security): repository.GetDetailedProject exposes repo secrets (#24389) (@crenshaw-dev)
• 8a3b2fd: fix(server): infer resource status health for apps-in-any-ns (#22944) (#23707) (@crenshaw-dev)
• ddb6073: fix: improves the ui message when an operation is terminated due to controller sync timeout (cherry-pick #23657) (#23673) (@gcp-cherry-pick-bot[bot])

Other work

• 510b775: chore(cherry-pick-2.14): replace bitnami images (#24289) (@nitishfy)
• d77ecdf: chore: adds all components in goreman run script (cherry-pick #23777) (#23790) (@gcp-cherry-pick-bot[bot])
• f9bb3b6: chore: update Go to 1.24.6 (release-2.14) (#24091) (@thevilledev)
• f8eba3e: fix(cherry-pick-2.14): custom resource health for flux helm repository of type oci (#24339) (@adberger)

Full Changelog: v2.14.15...v2.14.16

v2.13.9

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.9/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.9/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b8ac09d: fix(security): repository.GetDetailedProject exposes repo secrets (#24388) (@crenshaw-dev)
• bfa7247: fix(server): infer resource status health for apps-in-any-ns (#22944) (#23708) (@crenshaw-dev)
• df347d0: fix: do not normalize resource tracking on live crds (#22722) - cherrypick 2.13 (#22747) (@blakepettersson)

Full Changelog: v2.13.8...v2.13.9

v3.1.1

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b22566d: fix(lua): allow actions to add items to array (#24137) (@agaudreault)
• eb72a0b: fix(server): Send Azure DevOps token via git extra headers (#23478) (#23631) (#24223) (@rumstead)
• fdd0991: fix(util): Fix default key exchange algorthims used for SSH connection to be FIPS compliant (#24086) (cherry-pick 3.1) (#24166) (@anandf)
• c140eb2: fix: resolve argocd ui error for externalSecrets, fixes #23886 (#24232) (#24236) (@raweber42)

Other work

• a0f0653: chore: add oci env vars to manifests (#24113) (cherry-pick 3.1) (#24153) (@blakepettersson)
• 70dde2c: chore: cherry pick #24235 to release-3.1 (#24238) (@FourFifthsCode)

Full Changelog: v3.1.0...v3.1.1

v3.0.13

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.13/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.13/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b1df89b: fix(lua): allow actions to add items to array (#24136) (@agaudreault)
• 46e7c00: fix(server): Send Azure DevOps token via git extra headers (#23478) (#23631) (#24222) (@rumstead)
• 274ab28: fix(util): Fix default key exchange algorthims used for SSH connection to be FIPS compliant (#24086) (cherry-pick 3.0) (#24165) (@anandf)
• d76cede: fix: kustomize edit add component check (#24100) (cherry-pick 3.0) (#24103) (@blakepettersson)
• d11bf1a: fix: helm GetTags cache writing (cherry-pick #23865) (#23953) (@gcp-cherry-pick-bot[bot])

Documentation

• 7822fbd: docs: 3.0 migration - added remediation for explicitly syncing apps that use ApplyOutOfSyncOnly=true (cherry-pick #23918) (#23957) (@gcp-cherry-pick-bot[bot])

Other work

• d6e0e5c: chore: cherry pick #24235 to release-3.0 (#24237) (@FourFifthsCode)
• 3fb825c: chore: update Go to 1.24.6 (release-3.0) (#24092) (@thevilledev)

Full Changelog: v3.0.12...v3.0.13

v3.1.0

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 6047e91: feat(AppProject): Add sync window description (#20766) (@speedfl)
• 999dbb2: feat(UI): add enabled field to explicitly set in automatedSync in SyncPolicy (#22482) (@aali309)
• 111da39: feat(actions): parametrized actions to scale workloads (#15505) (#20097) (@ratulbasak)
• 76a63a1: feat(api): protect static assets endpoint from symlink traversal (#22936) (@crenshaw-dev)
• 99faf82: feat(appset): add target branch support for bitbucket cloud pull request generator (#22402) (@mihallis)
• 64198e8: feat(ci): don't cancel-in-progress on master (#23392) (@crenshaw-dev)
• 6cf2961: feat(cli): Add Plugin Support to the Argo CD CLI (#20074) (@nitishfy)
• d14ba14: feat(cli): Adding whoami alias (#23385) (@christianh814)
• 7d66044: feat(health): Implement spinkube SpinApp CRD health checks (#21896) (@lukepatrick)
• 65464d8: feat(health): OpenTelemetryCollector CRD Healthcheck (#23156) (@savanipoojan78)
• 8f1f5c7: feat(health): add Logstash resource customization (#22028) (@fprovencherdrw)
• 96039be: feat(health): add Rabbitmq topology resource customizations (#22066) (@fprovencherdrw)
• 9149021: feat(health): add crossplane and upbound health checks (#21479) (#22919) (@crenshaw-dev)
• e578b85: feat(health): add kyverno Policy resource customization (#21552) (@marckhair)
• 7224a15: feat(helm): upgrade to 3.18.3 (cherry-pick #23618) (#23620) (@gcp-cherry-pick-bot[bot])
• 8eaccb7: feat(helm): upgrading helm to 3.18.4 (cherry-pick #23724) (#23731) (@gcp-cherry-pick-bot[bot])
• 81ae77a: feat(hydrator): commit tracing (#19441) (#23361) (@crenshaw-dev)
• d9ef10a: feat(hydrator): handle sourceHydrator fields from webhook (#19397) (#22485) (@alexymantha)
• 563d45b: feat(kustomize): upgrade to 5.7.0 (#23619) (#23625) (@crenshaw-dev)
• 2dafcba: feat(ui): add keydown event to the pod dropdown menu (#20996) (@vivian-xu)
• 3f3ac06: feat(ui): add toggle for fullname of resources in application-details-tree (#20812) (@surajyadav1108)
• bb37b10: feat(ui): allow to sort by age in Pod-view (#20783) (@surajyadav1108)
• 0e95193: feat(ui): allows more convenient sorting of repository. (#19829) (@bianbbc87)
• 30742f6: feat(ui): disable select not running pod and bring back arrow to selected pod (#21576) (@linghaoSu)
• 9675487: feat(ui): integrate Progressive Sync feature (#22781) (@aali309)
• eb794b7: feat(ui): set validate=false for "disable autosync" request during rollback via ui (#22898) (#23101) (@dlemfh)
• ceec669: feat(ui): support delete all expired token in project roles (#21782) (@linghaoSu)
• 2fbace3: feat(webhook): Fixed manifest-generate-paths annotation support for monorepos in BitBucket (#21811) (@anandf)
• 964f269: feat: Add GitHub API rate limit metrics (#22864) (@reggie-k)
• 18ce5c2: feat: Add images to resources in sync result #20896 (#20954) (@Aaron-9900)
• 6d7e75d: feat: Add link to get the list of applications of a cluster/project (#21561) (@almoelda)
• ce4b7a2: feat: Contour HTTPProxy health check support for issue # 22504 (#22596) (@gregbarasch)
• 2bd2488: feat: Enable SkipDryRunOnMissingResource sync option on Application level (#22679) (@pasha-codefresh)
• 5a3a104: feat: Implement grafana-operator Dashboard and Folder CRD health checks (#22493) (@afarbos)
• a2152a1: feat: Implement healthcheck gateway api (#20986) (#22855) (@chansuke)
• 2c53861: feat: Polish off UI changes for OCI support (#21685) (#22410) (@keithchong)
• d3223a8: feat: add Fallback condition to KEDA ScaledObject health assessment (#22844) (@rickbrouwer)
• dc1d148: feat: add SSA field manager migration options (#23337) (@pjiang-dev)
• dd5a878: feat: add ability to exclude files when using git file generator (#22734) (@nitishfy)
• f4edcf7: feat: add custom health check for CloudNativePG (#22802) (@sxd)
• 432a0cd: feat: add enable field for automatedSync (#21999) (@anandrkskd)
• 98ca411: feat: add metric for sync durations(#11675) (#18474) (@Jack-R-lantern)
• f763b2a: feat: add pause action for argo-rollouts #20505 (#20506) (@sedflix)
• 19669d2: feat: add repository_id to AppSet generators (#15820) (#22416) (@geichelberger)
• ec9b43f: feat: implement custom resource action skip-current-step for argo rollouts (#23025) (@reggie-k)
• 4a15925: feat: improve Helm documentation (#22859) (@sabre1041)
• ddb1021: feat: improve numa actions (#22835) (@dpadhiar)
• 18c4d9d: feat: oci support (Beta) (#18646) (@blakepettersson)
• 00ee32f: feat: optionally propagate node labels to application pod view (#15274) (#23260) (@msoderberg)
• 5091f9a: feat: remove suspended state from numaproj crds (#23359) (@dpadhiar)
• d284b15: feat: support gitea PR labels filter in appset PR generator (#21115) (#21148) (@livelxw)

Bug fixes

• f26b7cd: fix(ApplicationSet): Check strategy type to verify it's a progressive sync (#22563) (@fcrespofastly)
• 274e918: fix(appcontroller): if a history limit is negative, automatically converted to 0 (#22036) (@kingbj940429)
• 25dc960: fix(applicationset_controller): requeue by ApplicationStatus changes (#23043) (@dshmelev)
• f7590fa: fix(appset): Add token to enterprise client (#23240) (#23455) (@lets-call-n-walk)
• 66d06c0: fix(appset): When Appset is deleted, the controller should reconcile applicationset #23723 (cherry-pick ##23823) (#23835) (@rumstead)
• 7a06400: fix(appset): add default retry limit for operations triggered via RollingSync (#20428) (#23335) (@mikeshng)
• e9ae886: fix(ci): get correct previous version, fail workflow if not (#22376) (@crenshaw-dev)
• 9c2ffb7: fix(ci): handle major versions in compatibility table generator (#22370) (@crenshaw-dev)
• 9a8ec4a: fix(ci): use tags instead of branches (#22372) (@crenshaw-dev)
• 3f90f99: fix(cli): Fix for removing auto generated tag for applicationset command (#22446) (@anandf)
• 0dfdb0a: fix(cli): Prevent Get & Sync from Hanging on Invalid Application Spec (#21702) (@almoelda)
• a223356: fix(controller): always set health.status.lastTransitionTime (#22665) (#22666) (@crenshaw-dev)
• 75f7016: fix(controller): get commit server url from env (cherry-pick #23536) (#23541) (@gcp-cherry-pick-bot[bot])
• d69639a: fix(controller): impersonation with destination name (#23309) (cherry-pick #23504) (#23519) (@gcp-cherry-pick-bot[bot])
• 45a8c68: fix(controller): only update lastTransitionTime when needed (#23018) (@crenshaw-dev)
• 320f46f: fix(darwin): remove the need for cgo when building a darwin binary on linux (cherry-pick #23507) (#23526) (@gcp-cherry-pick-bot[bot])
• df5ff1f: fix(doc): Fix typo in SSA doc (#23421) (@pjiang-dev)
• 73f68af: fix(docs): Fix UI port in E2E docs (#22881) (@olivergondza)
• acd8844: fix(docs): upgrading 3.0 docs (#2289...

v3.0.12

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.12/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.12/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• fc27c4d: fix(appset): When Appset is deleted, the controller should reconcile applicationset #23723 (cherry-pick ##23823) (#23834) (@rumstead)
• 5e769f9: fix(metrics): Cherrypick grpc stats fix release 3.0 (#23889) (@pbhatnagar-oss)

Full Changelog: v3.0.11...v3.0.12

v3.1.0-rc3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.0-rc3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.0-rc3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 8eaccb7: feat(helm): upgrading helm to 3.18.4 (cherry-pick #23724) (#23731) (@gcp-cherry-pick-bot[bot])

Bug fixes

• 36cc2d1: fix(health): CRD health check message (#23690) (cherry-pick #23691) (#23738) (@gcp-cherry-pick-bot[bot])

Full Changelog: v3.1.0-rc2...v3.1.0-rc3

v3.0.11

Note: due to build issues, release notes for 3.0.7-3.0.10 are consolidated here.

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.11/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.11/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

• fix(azure): use compatible workload identity modules by @rumstead in #23004
• fix(applicationset): requeue applicationste when application status changes by @rumstead in #23412
• fix(server): Propagate useAzureWorkloadIdentity flag from during repo validation (#23348) by @rumstead in #23416
• Bump version to 3.0.7 on release-3.0 branch by @github-actions in #23428
• fix(goreleaser): add darwin with CGO enabled to gorelease by @rumstead in #23438
• Bump version to 3.0.8 on release-3.0 branch by @github-actions in #23451
• fix(goreleaser): add darwin with CGO enabled and remove static to gorelease (cherry-pick #23457) by @gcp-cherry-pick-bot in #23459
• Bump version to 3.0.9 on release-3.0 branch by @github-actions in #23462
• fix(appset): Add token to enterprise client (#23240) (cherry-pick #23455) by @gcp-cherry-pick-bot in #23476
• fix(controller): impersonation with destination name (#23309) (cherry-pick #23504) by @gcp-cherry-pick-bot in #23517
• fix: kustomize components + monorepos (cherry-pick #23486) by @gcp-cherry-pick-bot in #23539
• fix(controller): get commit server url from env (cherry-pick #23536) by @gcp-cherry-pick-bot in #23542
• fix(sync): auto-sync loop when FailOnSharedResource (#23357) by @agaudreault in #23639
• fix: improves the ui message when an operation is terminated due to controller sync timeout (cherry-pick #23657) by @gcp-cherry-pick-bot in #23671
• fix(server): infer resource status health for apps-in-any-ns (#22944) by @crenshaw-dev in #23706
• docs(images): add a note about missing images for 3.0 releases (#23612) (cherry-pick #23712) by @gcp-cherry-pick-bot in #23714
• fix(darwin): remove the need for cgo when building a darwin binary on linux (cherry-pick #23507) by @gcp-cherry-pick-bot in #23735
• docs(images): add a note about missing images for 3.0 releases (cherry-pick #23741) by @gcp-cherry-pick-bot in #23742
• fix(health): CRD health check message (#23690) (cherry-pick #23691) by @gcp-cherry-pick-bot in #23739
• Bump version to 3.0.10 on release-3.0 branch by @github-actions in #23744
• Bump version to 3.0.11 on release-3.0 branch by @github-actions in #23745

Full Changelog: v3.0.6...v3.0.11

v3.1.0-rc2

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.0-rc2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.0-rc2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 7224a15: feat(helm): upgrade to 3.18.3 (cherry-pick #23618) (#23620) (@gcp-cherry-pick-bot[bot])
• 563d45b: feat(kustomize): upgrade to 5.7.0 (#23619) (#23625) (@crenshaw-dev)

Bug fixes

• 75f7016: fix(controller): get commit server url from env (cherry-pick #23536) (#23541) (@gcp-cherry-pick-bot[bot])
• 37f2793: fix(hydrator): omit Argocd- trailers from hydrator.metadata (cherry-pick #23463) (#23621) (@gcp-cherry-pick-bot[bot])
• 1cbd28c: fix(server): make parameterized resource actions backwards-compatible (cherry-pick #23695) (#23709) (@gcp-cherry-pick-bot[bot])
• 6142c5b: fix(sync): auto-sync loop when FailOnSharedResource (#23357) (#23640) (@agaudreault)
• c215dbf: fix: OCI client, avoid calling tags/list if revision is not a constraint #23580 (cherry-pick #23581) (#23582) (@gcp-cherry-pick-bot[bot])
• dd675fe: fix: UI error with ApplicationSet in any namespace (cherry-pick #23601) (#23604) (@gcp-cherry-pick-bot[bot])
• 6fe5ec7: fix: improves the ui message when an operation is terminated due to controller sync timeout (cherry-pick #23657) (#23672) (@gcp-cherry-pick-bot[bot])
• 4a7e581: fix: kustomize components + monorepos (cherry-pick #23486) (#23540) (@gcp-cherry-pick-bot[bot])

Documentation

• fed347d: docs(images): add a note about missing images for 3.0 releases (#23612) (cherry-pick #23712) (#23713) (@gcp-cherry-pick-bot[bot])

Full Changelog: v3.1.0-rc1...v3.1.0-rc2