v2.12.4

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 1568165: fix(appset): Fix perpetual appset reconciliation (#19822) (#19995) (@gcp-cherry-pick-bot[bot])
• b76a09e: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20090) (@gcp-cherry-pick-bot[bot])
• d56ef76: fix: diffing should not fail if resource fail schema validation (#19714) (#19729) (@gcp-cherry-pick-bot[bot])

Documentation

• 02b8336: docs: note cluster scoping changes in 2.12x (#19684) (#19702) (@gcp-cherry-pick-bot[bot])

Dependency updates

• ff3ef71: cherry-pick chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#20056) (@ishitasequeira)
• 08fe6f5: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20016) (@gcp-cherry-pick-bot[bot])
• 8590550: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#19883) (#19987) (@chengfang)

Full Changelog: v2.12.3...v2.12.4

v2.11.9

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.9/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.9/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• bd78134: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20091) (@gcp-cherry-pick-bot[bot])

Dependency updates

• 54ac05b: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20017) (@gcp-cherry-pick-bot[bot])
• 93f7846: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#19883) (#19989) (@chengfang)
• 8b79185: chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#20055) (@ishitasequeira)

Full Changelog: v2.11.8...v2.11.9

v2.10.17

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.10.17/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.10.17/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• a1d3758: fix: ArgoCD 2.11 - Loop of PATCH calls to Application objects (#19340) (#19348) (@alexmt)
• f52dcf6: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20092) (@gcp-cherry-pick-bot[bot])
• 286568e: fix: diffing should not fail if resource fail schema validation (#19734) (@alexmt)
• 5b041c2: fix: docs version regex changed (#18756) (#19355) (@ft-jasong)

Dependency updates

• 1200b6c: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20031) (@gcp-cherry-pick-bot[bot])
• b3c2bc1: chore(deps): bump express from 4.17.3 to 4.19.2 in /ui (#17648) (#19266) (@gcp-cherry-pick-bot[bot])
• 9865a8a: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#19883) (#19990) (@chengfang)
• 6b00605: chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#20054) (@ishitasequeira)

Other work

• c02a3d7: upgrade github.com/hashicorp/go-retryablehttp to v0.7.7 (#19237) (@Mangaal)

Full Changelog: v2.10.16...v2.10.17

v2.13.0-rc2

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.0-rc2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.0-rc2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 425b408: fix: Add redis password to forwardCacheClient struct (#19599) (#19977) (@gcp-cherry-pick-bot[bot])
• 243ecc2: fix: notification controller crash loop in 2.13 RC1 (#19984) (#19986) (@gcp-cherry-pick-bot[bot])

Dependency updates

• 5392ca7: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20015) (@gcp-cherry-pick-bot[bot])

Full Changelog: v2.13.0-rc1...v2.13.0-rc2

v2.13.0-rc1

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.0-rc1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.0-rc1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• d0313c5: Revert "feat: removed legacy app tracking label (#13203)" (#19196) (@crenshaw-dev)
• 26fb098: feat!: disable profile endpoint by default (#19327) (@alexmt)
• 42de68d: feat(5388): Allow multiple external URLs for SSO access (#18927) (@ClifHouck)
• f9078f7: feat(appset): add key title to PR generator (#16447) (#17907) (@ggjulio)
• 6f84afc: feat(appset): make K8s client configurable (#18623) (@alexymantha)
• db02eaa: feat(askpass): make askpass socket path configurable (#19313) (@crenshaw-dev)
• fe8dcb6: feat(ci): upload Webpack bundle analysis to codecov (#19478) (#19479) (@crenshaw-dev)
• 70755aa: feat(cli): add cmd to preview generated apps of appsets (#10895) (#16781) (@agaudreault)
• 21a3641: feat(cli): ignore tracking annotation on backup restore (#18960) (@agaudreault)
• effbdc9: feat(dex): set logger based on argo config (#13191) (#19608) (@agaudreault)
• e26c105: feat(health): Added Keptn Analysis (#19211) (@asamonik)
• 326cc4a: feat(health): Added KeptnMetric (#19210) (@asamonik)
• 7f338e9: feat(health): support for aws.crossplane.io resources (#19029) (@Jellyfrog)
• f26b76a: feat(health): support for some rds.crossplane.io resources (#19076) (@Jellyfrog)
• 21ed19b: feat(helm): support --kube-version, --api-versions, and --namespace (#19325) (#19328) (@crenshaw-dev)
• edf631c: feat(kustomize): add support for helm args to pass api and kube versions (#16583) (@MrFreezeex)
• 6ee5845: feat(rbac): allow validation of fine-grained policy in project (#19338) (@agaudreault)
• 588b251: feat(sourceNamespace): Regex Support (#19016) (#19017) (@ArthurVardevanyan)
• 00466c3: feat(ui): add extension the top-bar action menu (#19620) (@ashutosh16)
• 20e7f8e: feat(ui): add health status and message in sync status list (#19875) (@linghaoSu)
• 3a267b8: feat: Add EndpointSlice to resource icon (#19362) (@mg5566)
• 3cbb152: feat: Add applicationset metrics (#19691) (@ilia-medvedev-codefresh)
• f110570: feat: Add custom health check for cluster-api AWSManagedControlPlane (#19304) (@itaiatu)
• 7fdddbe: feat: Add custom resource actions for flux resources (#18922) (@adberger)
• 824d0dc: feat: Add custom resource health for flux resources (#19082) (@adberger)
• 18ccd7a: feat: Add flag --sso-launch-browser to login and relogin commands (issue #16208) (#18865) (@david-wu-octopus)
• c4709fb: feat: Add graceful shutdown handling in notification (#19368) (@D0ri123)
• 75e7383: feat: Add ignore-resources-tracking annotation to ignore resources update (#18343) (@kahoulei)
• de35745: feat: Add metric to expose Applications conditions (#19438) (@foyerunix)
• d223157: feat: Add open-cluster-management.io healthchecks (#19411) (@JustinKuli)
• 74bbc4f: feat: Add source namespaces output to printProject function (#19365) (@juwon8891)
• 6296b17: feat: Add suspended status in custom resource health for flux resources (#19508) (@adberger)
• ad74383: feat: Adding author/creator as a template key for Pull Request Generator (#18974) (@vfaergestad)
• c1d3373: feat: Allow disabling TLS from notifications controller and reposerver (#19630) (@m-wynn)
• e7760b5: feat: Allow return the client without performing a matchRepository (#18053) (@jsolana)
• 1028808: feat: Decoupling application sync using impersonation (#17403) (@anandf)
• e86258d: feat: Implement PodDisruptionBudget CRD health checks (#19826) (@afarbos)
• 59e0091: feat: Implement cluster-api MachinePool CRD health checks (#19595) (@afarbos)
• dad6fa2: feat: Implement graceful shutdown in application-controller (#19465) (@leehosu)
• ddc0b0f: feat: Introduce KeptnWorkloadVersion custom resource (#15951) (@odubajDT)
• 878494f: feat: Send user groups to proxy extensions (#19855) (@leoluz)
• 116180b: feat: Support context switch for argocd-util (#19549) (@pasha-codefresh)
• ebbd3d1: feat: add --source-position flag to argocd get app command to show parameter changes for multi-source application (#19887) (@nitishfy)
• be90cc0: feat: add a button to show parameter details (#12183) (#16871) (@Tchoupinax)
• 74af92f: feat: add proxy to kustomize build operations (#18551) (@the-technat)
• 9b3a4d1: feat: add set-finallizer on argocd admin app generate-spec command (#18855) (@KyriosGN0)
• bacdced: feat: allow no_proxy to be specified on repoCreds (#18526) (@the-technat)
• 1dd2821: feat: collect and log hydration commands (#19346) (@crenshaw-dev)
• c5d0acf: feat: forward the Argo CD logged in user to the proxy extension (#19075) (@leoluz)
• 234c7ec: feat: gracefully shut down repo-server on SIGTERM (#19309) (@crenshaw-dev)
• d6bc02b: feat: health checks for Numaplane CRDs (#19077) (@dpadhiar)
• 3a5b653: feat: implement 'argocd admin appset generate' to troubeshoot appsets (#19518) (@alexmt)
• 34b411c: feat: implement source refs for helm set-file (#17941) (@cardoe)
• 32ee00f: feat: introduce health checks for MonoVertexRollouts (#19688) (@dpadhiar)
• 4f64f0f: feat: move basic auth for for Azure DevOps to webhooks lib (#19407) (@robinlieb)
• 0acecad: feat: reduce redis traffic caused by app resource tree updates in redis (#19722) (@alexmt)
• 1aa898c: feat: support log level in cmp plugin, possibility to trace generated manifest (#18851) (@pasha-codefresh)

Bug fixes

• 0183aac: Revert "fix(appset): keep reconciling even when params error occurred (#17062)" (#18781) (@crenshaw-dev)
• 6dc559a: fix(AnyNameSpaceRegex): Additional Functions Glob to Regexexp (#19516) (@ArthurVardevanyan)
• 67776ad: fix(applicationset): ensure that older applicationStatus is updated with new required values (#19165) (@wparr-circle)
• 30a1623: fix(applicationset): use requeue after if generate app errors out (#18761) (@MrFreezeex)
• 42c001d: fix(appset): Fix perpetual appset reconciliation (#19822) (@tjamet)
• 71bbdcc: fix(appset): Retry on conflict when updating status (#19663) (@carlosrejano)
• 01874d6: fix(appset): allow for shorthand git refs in git generators #15427 (#19783) (@rumstead)
• 3cdce83: fix(appset): informer is not a kubernetes informer (#18905) (#19618) (@crenshaw-dev)
• 5dd6020: fix(appset): migrateStatus updates appset pointer after updating (#19619) (@carlosrejano)
• a47243a: fix(appset): missing permissions (#18829) (#18943) (@agaudreault)
• ed14baa: fix(appset): missing permissions for cluster install (#19059) (#19430) (@hodorov)
• 42c2349: fix(appset): remove cache references (#19647) (@rumstead)
• ff1d37f: fix(ci): use commit hash instead of release number in security insights (#18718) (@crenshaw-dev)
• 6db9186: fix(cli): Get Redis password from secret in loadClusters() (#18951) (@david-wu-octopus)
• aa2bafd: fix(cli): admin settings rbac can has inconsistency among project resources (#17805) (@hanxiaop)
• c141436: fix(cli): add opti...

v2.11.8

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.8/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.8/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 7b9438e: fix: ArgoCD 2.11 - Loop of PATCH calls to Application objects (#19340) (#19347) (@alexmt)
• 5638e70: fix: Parse hostname correctly from repoURL to fetch correct CA cert (#19488) (#19603) (@gcp-cherry-pick-bot[bot])
• 1383a1b: fix: diffing should not fail if resource fail schema validation (#19735) (@alexmt)
• 42cc36a: fix: docs version regex changed (#18756) (#19353) (@ft-jasong)

Full Changelog: v2.11.7...v2.11.8

v2.12.3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 343dec0: feat(sourceNamespace): Regex Support (#19016) (#19017) (#19664) (@gcp-cherry-pick-bot[bot])

Bug fixes

• cafd35c: fix(AnyNameSpaceRegex): Additional Functions Glob to Regexexp (#19516) (#19665) (@gcp-cherry-pick-bot[bot])

Full Changelog: v2.12.2...v2.12.3

v2.12.2

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b068220: fix(appset): informer is not a kubernetes informer (#18905) (#19618) (#19636) (@gcp-cherry-pick-bot[bot])
• 7244c2d: fix(appset): remove cache references (#19652) (@rumstead)
• c873d5c: fix: Floating title content incorrect for multi-sources (#17274) (#19623) (#19627) (@gcp-cherry-pick-bot[bot])
• 88f85da: fix: Parse hostname correctly from repoURL to fetch correct CA cert (#19488) (#19602) (@gcp-cherry-pick-bot[bot])

Full Changelog: v2.12.1...v2.12.2

v2.9.22

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.22/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.22/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 90c83dc: fix: ArgoCD 2.11 - Loop of PATCH calls to Application objects (#19340) (#19569) (@alexmt)
• dd3545b: fix: docs version regex changed (#18756) (#19356) (@ft-jasong)

Other work

• 73f9171: upgrade github.com/hashicorp/go-retryablehttp to v0.7.7 (#19239) (@Mangaal)

Full Changelog: v2.9.21...v2.9.22

v2.8.21

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.21/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.21/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Full Changelog: v2.8.20...v2.8.21