Argo CD v3.3.14
security****!!
Changes
- Cf38a82132a2275c6229368cdfd8872e3b0d33d6: chore(deps): bump DOMPurify to 3.4.7 for CVE-2026-49978 (#28969) (@aali309)security
- D3f7e8c0b5a40611fe6751b65a475be7b26e4726: chore(deps): bump brace-expansion to 2.1.4, 1.1.18 in /ui for fixing CVE-2026-69152 (release-3.3) (#29149) (@dkarpele)security
- 7242ed2d3cd3a5bb106a1922834244977de83b9f: fix(controller): reuse server-side diff result when masking Secret data (#27858) (#29076) (@1ovsss)fixed
- D93267f05a6c59cc04f472e3bbe1dc0da1d7cf3b: fix(server): prevent SSD CLI secret mask spoofing (#29089) (#29137) (@pjiang-dev)fixed
- 4e181b9ba61f1ab7aa85ac890328e4b4938195c9: fix(ssd): hide secret in last-applied-configuration annotation (#28989) (#29054) (@pjiang-dev)fixed
- 80f08f9de360a22abbb314a5b6b18a71b9a4140c: fix: register pprof endpoints in repo-server using the params config map (cherry-pick #26237 for 3.3) (#29032) (@gdsoumya)fixed
1 maintenance lines (dependency bumps, CI, tests, docs)
- A0a99e187cb6126ef0f3be82d90705513d8f6f3e: chore: bump version to 3.3.14 on release-3.3 branch (#29159) (@github-actions[bot])maintenance
7 lines2 security4 fixed1 maintenancetyped from the source notes