Update dependency argoproj/argo-cd to v3

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
argoproj/argo-cd	major	v2.11.4 → v3.2.3

---

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v3.2.3

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Dependency updates

• 8f903c3: chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.46.0 (#​25791) (@​anandf)

Full Changelog: argoproj/argo-cd@v3.2.2...v3.2.3

v3.2.2

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 122f4db: fix(hydrator): appset should preserve annotation when hydration is requested (cherry-pick #​25644 for 3.2) (#​25654) (@​argo-cd-cherry-pick-bot[bot])
• 33b5043: fix(oidc): check userinfo endpoint in AuthMiddleware (cherry-pick #​23586 for 3.2) (#​25415) (@​mkilchhofer)
• 784f62c: fix(server): update resourceVersion on Terminate retry (cherry-pick #​25650 for 3.2) (#​25718) (@​argo-cd-cherry-pick-bot[bot])
• 732b16f: fix: create read and write secret for same url (cherry-pick #​25581 for 3.2) (#​25589) (@​argo-cd-cherry-pick-bot[bot])

Documentation

• 26b7fb2: docs: add added healthchecks to upgrade docs (cherry-pick #​25487 for 3.2) (#​25490) (@​argo-cd-cherry-pick-bot[bot])
• 0ace9bb: docs: sync-waves guide: Use markdown formatting (cherry-pick #​25372 for 3.2) (#​25659) (@​lindhe)

Dependency updates

• 95e7cdb: chore(deps): bumped k8s.io/kubernetes v1.34.0 to v1.34.2 - manual cherry-pick of 25682 for 3-2 (#​25687) (@​reggie-k)
• 88fe638: chore(deps):bumped gitops-engine to v0.7.1-0.20251217140045-5baed5604d2d with bumped k8s.io/kubernetes to 1.34.2 (#​25708) (@​reggie-k)

Other work

• 024c7e6: chore: reference gitops-engine fork with nil pointer fix (#​25522) (@​ivanpedersen)
• 6398ec3: chore: release champ 3.3 (cherry-pick #​25202 for 3.2) (#​25663) (@​argo-cd-cherry-pick-bot[bot])
• a297038: test(controller): avoid race in test (cherry-pick #​25655 for 3.2) (#​25691) (@​argo-cd-cherry-pick-bot[bot])

Full Changelog: argoproj/argo-cd@v3.2.1...v3.2.2

v3.2.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 6dd5e7a: fix(ui): add null-safe handling for assignedWindows in status panel (cherry-pick #​25128 for 3.2) (#​25180) (@​argo-cd-cherry-pick-bot[bot])
• dabdf39: fix(ui): overlapping UI elements and add resource units to tooltips (cherry-pick #​24717 for 3.2) (#​25225) (@​choejwoo)
• cd8df17: fix: Allow the ISVC to be healthy when the Stopped Condition is False (cherry-pick #​25312 for 3.2) (#​25318) (@​argo-cd-cherry-pick-bot[bot])
• 27c5065: fix: revert #​24197 (cherry-pick #​25294 for 3.2) (#​25314) (@​argo-cd-cherry-pick-bot[bot])
• 29f869c: fix: the concurrency issue with git detached processing in Repo Server (#​25101) (cherry-pick #​25127 for 3.2) (#​25448) (@​dudinea)
• 7bd02d7: fix:(ui) don't render ApplicationSelector unless the panel is showing (cherry-pick #​25201 for 3.2) (#​25208) (@​argo-cd-cherry-pick-bot[bot])

Documentation

• c11e67d: docs: Document usage of ?. in notifications triggers and fix examples (#​25352) (cherry-pick #​25418 for 3.2) (#​25421) (@​argo-cd-cherry-pick-bot[bot])
• a0a1843: docs: Improve switch to annotation tracking docs, clarifying that a new Git commit may be needed to avoid orphan resources - (cherry-pick #​25309 for 3.2) (#​25338) (@​reggie-k)
• 86c9994: docs: update user content for deleting applications (cherry-pick #​25124 for 3.2) (#​25174) (@​argo-cd-cherry-pick-bot[bot])

Other work

• 1545390: fix(cherry-pick): bump gitops-engine ssd regression (#​25226) (@​pjiang-dev)

Full Changelog: argoproj/argo-cd@v3.2.0...v3.2.1

v3.2.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Please note that users operating large monorepos may encounter repo-server lock contention requiring pod restarts. A fix is under review and will be included in the next patch release.

Changelog

Features

• be8e79e: feat(appset): add pprof endpoints (cherry-pick #​25044 for 3.2) (#​25051) (@​rumstead)
• 79f152c: feat(appset): deleting applications in order when Progressive sync enabled on applicationSet (#​23465) (@​ranakan19)
• b1a9fab: feat(appset): enhance ApplicationSet status debugging logs (#​23869) (@​somln)
• a5c6898: feat(appset): increase concurrent reconcile maximum to max int64 (#​23721) (@​rumstead)
• 6a20776: feat(cli): Support Server-Side Diff CLI (#​23978) (@​pjiang-dev)
• 69f7d39: feat(cli): add 'get-resource' command (#​23196) (#​23609) (@​cjcocokrisp)
• 853b8dd: feat(cli): support password prompt input when --password is not provided in bcrypt cli (#​23906) (@​gyu-young-park)
• 5a8b427: feat(controller): Permit using newer revision when retrying failed sync (#​11494) (#​23038) (@​olivergondza)
• 5c9a5ef: feat(health): Add healthCheck for CRD DatadogMetric (#​23464) (@​Nicolas-Richard)
• d3de443: feat(health): CronJob health and suspend, resume and terminate Job actions (#​23991) (@​agaudreault)
• 36f1a59: feat(health): add health checks for GitOps Promoter (#​23663) (@​crenshaw-dev)
• 99fea7c: feat(helm): upgrade to 3.18.3 (#​23618) (@​crenshaw-dev)
• e8e39a9: feat(helm): upgrading helm to 3.18.4 (#​23724) (@​mubarak-j)
• 6f6c39d: feat(hydrator): Commit message templating (#​23679) (#​24204) (@​pbhatnagar-oss)
• e85e353: feat(hydrator): Credential template to source hydrator (#​23999) (@​pbhatnagar-oss)
• 562194b: feat(hydrator): add .gitattributes file to hydrated repo root (#​23678) (#​23725) (@​FourFifthsCode)
• 8b2799c: feat(hydrator): parallelize repo-server calls (#​24451) (#​24436) (@​crenshaw-dev)
• a6a78ef: feat(kustomize): upgrade to 5.7.0 (#​23619) (@​crenshaw-dev)
• d954789: feat(server): 3scale health checks (#​24327) (#​24326) (@​ammachado)
• 5b8e4b5: feat(server): pass authenticated userId as header to extensions (#​24356) (@​agaudreault)
• 2229f9d: feat(ui): Add hydration in status to dashboard application tiles (#​24319) (@​adityaraj178)
• 13c47ee: feat(ui): Added repo connection state message (#​24175) (@​surajyadav1108)
• 72d054d: feat(ui): Requests info for Cpu and Mem added to Pod details (#​20637) (@​surajyadav1108)
• 762114c: feat(ui): Sort by application-sync-order in the list page (#​23521) (#​24191) (@​downfa11)
• 97af89a: feat(ui): add prune option to application rollback (#​23861) (#​23932) (@​anthisfan)
• 8d018bb: feat(ui): add sortable columns to application list (#​24213) (#​24535) (@​downfa11)
• 6212ea2: feat(ui): adjust line-height and spacing for multi-line text in details row (#​24173) (@​jiwlee97)
• 26b970b: feat: Add gRPC health check in argocd-server (#​24276) (@​krapie)
• dcf1965: feat: Add health checks for Coralogix (#​23853) (@​daniel-leinov)
• 4e63bc7: feat: Adding ExtensionService health-check (#​23576) (@​solomon-kibret)
• be042c4: feat: AppSet PR generator return 0 results upon repo not found instead of failing (#​23447) (@​reggie-k)
• 3401d3b: feat: Export metrics to track number of users (#​20801) (#​23343) (@​sathiya06)
• c447628: feat: Implement Altinity clickhouse-operator CRD health checks (#​24017) (@​acze)
• 6028dea: feat: add OpenTelemetry trace context propagation for HTTP requests (#​23029) (@​yafeiaa)
• 3af3a05: feat: add sso-host flag for OAuth2 login configuration (#​22738) (#​22784) (@​PaleHazy)
• feab307: feat: add status.resourcesCount field to appset and change limit default (#​24698) (#​24711) (@​alexmt)
• 29df864: feat: add title matching filter for Pull Request Generator (#​23569) (@​nitishfy)
• fca42e3: feat: log a warning instead of debug when repository webhook does not match an application (#​23939) (@​fernandocarletti)
• 7ae14c8: feat: preserve non-hydrated files during hydration (#​24129) (@​nitishfy)
• c012702: feat: read argocd password from stdin (#​23520) (@​nitishfy)
• 07bd5e0: feat: show operation state UI (#​23589) (@​Aaron-9900)
• 14a22ad: feat: update unpause action for Numaproj CRDs (#​24036) (@​dpadhiar)

Bug fixes

• 48a7030: fix(UI): Add missing icon colors to auto-sync (#​23962) (@​surajyadav1108)
• aff3ae3: fix(api): app create --upsert should not error on invalid current destination (#​23922) (@​agaudreault)
• fb94cad: fix(applications): update application navigation URLs (#​22671) (#​23285) (@​Ruby-rc)
• 460111f: fix(applicationset): Git generator: Don't append default object to literal empty json array (#​23500) (#​23513) (@​ChristianCiach)
• ac4ae17: fix(appset): When Appset is deleted, the controller should reconcile applicationset #​23723 (#​23823) (@​sangdammad)
• 31e0f42: fix(appset): add applicationset leader election to roles and clean up (#​14369) (#​23976) (@​rumstead)
• d269e6f: fix(appset): add applicationsets to the built-in readonly role (#​24190) (#​24318) (@​crenshaw-dev)
• 6ec1aa1: fix(appset): do not remove progressive sync conditions (#​23506) (@​agaudreault)
• 03ac864: fix(cli): avoid panic in configure command when no local config exists (#​23085) (#​23967) (@​krapie)
• 7f5ef5c: fix(cli): correct typo in bcrypt error message (#​23849) (@​gyu-young-park)
• 70c8f46: fix(cli): honor ALL_PROXY and other proxy environment variables (#​24177) (@​SinnoLn)
• f13aa46: fix(cli): respect refresh type when running with specified revision (#​22463) (#​22462) (@​thejoeejoee)
• c4d99bb: fix(controller): expose ARGOCD_SYNC_WAVE_DELAY as configurable parameter (#​24536) (@​u-kai)
• e981167: fix(controller): get commit server url from env (#​23536) (@​nobbs)
• 83d553c: fix(controller): impersonation with destination name (#​23309) (#​23504) (@​crenshaw-dev)
• e0f4b00: fix(darwin): remove the need for cgo when building a darwin binary on linux (#​23507) (@​rumstead)
• d7364b4: fix(dashboard): Allow quantile label as float and integer (#​24087) (@​adberger)
• b20fd43: fix(discovery): add missing lua syntax and return to discovery (fixes #​24257) (#​24262) (@​jan-mrm)
• 614c85c: fix(docs): fix applicationsetcontroller.enable.github.api.metrics to false in docs cm (#​23516) (@​reggie-k)
• 4501ebb: fix(docs): include v3.1 upgrade docs (#​23529) (@​mubarak-j)
• 786b24e: fix(health): CRD health check message (#​23690) (#​23691) (@​crenshaw-dev)
• f4c4c66: fix(health): add logic for disabled policies (#​21347) (@​dhaiducek)
• 91b8bba: fix(health): custom resource health for flux helm repository of type oci (#​24294) (@​adberger)
• 35e3897: fix(health): incorrect reason in PullRequest script (cherry-pick #​24826 for 3.2) (#​24828) (@​argo-cd-cherry-pick-bot[bot])
• 8fa3e47: fix(health): remove CronJob progressing/suspended status (#​24430) (@​agaudreault)
• 4821d71: fix(health): typo in PromotionStrategy health.lua (cherry-pick #​24726 for 3.2) (#​24760) (@​argo-cd-cherry-pick-bot[bot])
• c68ec27: fix(health): undeclared var used in ChangeTransferPolicy check (#​23912) (@​crenshaw-dev)
• d1251f4: fix(health): use promotion resource Ready condition regardless of reason (cherry-pick #​24971 for 3.2) (#​24973) (@​argo-cd-cherry-pick-bot[bot])
• 56320a7: fix(hydrator): handle empty path (#​24349) (@​crenshaw-dev)
• 4d16fdc: fix(hydrator): normalize repo URL when grouping (#​23564) (#​23565) (@​crenshaw-dev)
• c60a727: fix(hydrator): omit Argocd- trailers from hydrator.metadata (#​23463) (@​crenshaw-dev)
• 02de363: fix(metrics): grpc prometheus stats missing (#​23877) (#​23838) (@​pbhatnagar-oss)
• 50531e6: fix(oci): loosen up layer restrictions (cherry-pick #​24640 for 3.2) (#​24648) (@​argo-cd-cherry-pick-bot[bot])
• b96401b: fix(project): Do not block project update when a cluster referenced in an App doesn't exist (#​23659) (@​OpenGuidou)
• e8f8610: fix(security): repository.GetDetailedProject exposes repo secrets (#​24387) (@​crenshaw-dev)
• 796f72c: fix(server): Send Azure DevOps token via git extra headers (#​23478) (#​23631) (@​mikebordon)
• 1ba3929: fix(server): ensure resource health status is inferred on application retrieval (#​24832) (cherry-pick #​24851 for 3.2) (#​24865) (@​argo-cd-cherry-pick-bot[bot])
• f420cce: fix(server): make parameterized resource actions backwards-compatible (#​23695) (@​crenshaw-dev)
• 0a1572b: fix(server): preserve webhook secret references on server restart (#​22588) (#​23905) (@​somln)
• 8c8902b: fix(server): validate new project on update (#​23970) (#​23973) (@​agaudreault)
• 1fbd63d: fix(sync): auto-sync loop when FailOnSharedResource (#​23357) (#​23641) (@​agaudreault)
• 65a082b: fix(sync): do not retry when sync timeout has elapsed (#​24020) (@​agaudreault)
• 9dfa9db: fix(sync): operations in errors without status cause infinite auto-sync loop (#​23356) (@​agaudreault)
• 3349949: fix(test): TestFailKustomizeBuildPatches fails on MacOS dev. env (#​23737) (@​dudinea)
• 965c83e: fix(test): Test_SSHCreds_Environ_TempFileCleanupOnInvalidProxyURL fails on Macos dev. env. (#​23755) (@​dudinea)
• c880373: fix(tests): race condition creating the sync id (#​23460) (@​agaudreault)
• 8884b27: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (cherry-pick #​24802 for 3.2) (#​25123) (@​argo-cd-cherry-pick-bot[bot])
• d54c8af: fix(ui): Made App name font bolder in applications-list rows (#​24256) (@​surajyadav1108)
• 1bc9adb: fix(ui): account detail page crashes for accounts with empty capabilities (#​23787) (@​hanxiaop)
• 04d1ca4: fix(ui): catch AbortError during data fetch cancellation (#​24054) (@​youhonglian)
• 24b0ecc: fix(ui): convert GroupWrapper to a functional component (#​23796) (@​jiwlee97)
• 564e507: fix(ui): convert PolicyWrapper component to functional component (#​23809) (@​jiwlee97)
• dd1547f: fix(ui): convert RevisionFormField components to functional components (#​23813) (@​chansuke)
• d6ecc66: fix(ui): enable natural sort ordering for resources, add autocomplete attributes to login form #​22853 (#​23599) (@​sea-gull-diana)
• 3e6f11e: fix(ui): fix filter header label wrap (#​23560) (@​linghaoSu)
• aa5d139: fix(ui): fix misleading pointer cursor and animation click-block issue (#​23688) (@​choejwoo)
• 88a32d6: fix(ui): handle missing resources on UI (#​24355) (@​pjiang-dev)
• b18ea68: fix(ui): prevent undefined values in filter state causing checkbox corruption (#​23733) (@​choejwoo)
• e24d8d4: fix(ui): resolve duplicate sync-policy (#​24233) (@​downfa11)
• f3dbc6f: fix(ui): wrap log lines are wrapped to the next line (#​23946) (@​xfrnk2)
• a8cae97: fix(util): Fix default key exchange algorthims used for SSH connection to be FIPS compliant (#​24086) (@​anandf)
• 1b3ced9: fix: "admin cluster generate-spec" fails on missing "argocd-cm" (#​10429) (#​24088) (@​ATGardner)
• 001bfda: fix: #​24781 update crossplane healthchecks to V2 version (cherry-pick #​24782 for 3.2) (#​24784) (@​argo-cd-cherry-pick-bot[bot])
• 5ee35ad: fix: Address shellcheck detected shell warnings (#​22686) (@​olivergondza)
• 58b0116: fix: Allow metrics ingress for redis-ha-proxy (#​23926) (#​23928) (@​JulesTriomphe)
• 4e5b201: fix: ArgoCD CLI diff shows installationID annotations (#​22409) (#​22567) (@​muma378)
• 0793efb: fix: Badge display revision for multiple-sources application #​17986 (#​22547) (@​fpetr)
• ef8ac49: fix: Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (cherry-pick #​24587 for 3.2 (#​24716) (@​aali309)
• bb56b9e: fix: Ensure application sets in custom namespace can be upserted (#​23860) (@​onematchfox)
• df324c0: fix: Ensure that symlink targets are not made absolute on extracting a tar (#​24145) (#​24146) (@​leh-ppi)
• c94874f: fix: HTTPProxy health-check update (#​23575) (@​solomon-kibret)
• 6aa9c20: fix: Health status for HTTPRoute with multiple generations (#​24958) (cherry-pick #​24959 for 3.2) (#​25039) (@​lindeskar)
• 7129a2c: fix: High Application Controller CPU Usage - Reduce calls to db.GetSettings (#​24235) (@​FourFifthsCode)
• 87faf58: fix: Hydrator wipes out entire branch when multiple Applications hydrate to the same branch with different path (fixes #​24179) (#​24185) (@​adityaraj178)
• b8ac5ef: fix: OCI client, avoid calling tags/list if revision is not a constraint #​23580 (#​23581) (@​erdody)
• 1453367: fix: Progress Sync Unknown in UI (cherry-pick #​24202 for 3.2) (#​24641) (@​argo-cd-cherry-pick-bot[bot])
• 12d3f5d: fix: RunResourceAction: error getting Lua resource action: built-in script does not exist #​24490 (#​24491) (@​FourFifthsCode)
• 1c9bb47: fix: Selecting repoType in dropdown doesn't do anything (#​23747) (#​23750) (@​keithchong)
• 8d47727: fix: UI error with ApplicationSet in any namespace (#​23601) (@​jaqxues)
• 45a7a18: fix: kustomize edit add component check (#​24100) (@​blakepettersson)
• 4c92911: fix: syncPolicy.automated.enabled=false does not disable aut