platformchangelog.dev
44 tools
feedrelease

Argo CD ·

Argo CD 3.6.0

security+++++*************!

Argo CD v3.6.0 shipped with 708 changes, including 3 security-related items: coordinated security fixes, a DOMPurify bump to 3.4.7 for CVE-2026-49978, and a SECURITY-INSIGHTS.yml refresh. The release adds 89 features such as progressive sync metrics and conditions for ApplicationSets, new health checks for resources like Tekton PipelineRun and TaskRun, Kro, Kyverno and Pulumi Stack, and Dex TLS configuration options. It also fixes 211 issues and includes a separate RBAC permission for application rollback.

What changes for platform teams

Platform teams running Argo CD get more health checks and progressive sync observability, plus separate RBAC control for rollbacks and configurable Dex TLS settings. The security content is mainly a frontend dependency bump and release-process changes, so the source does not describe a vulnerability in the tool's core code.

Changes

  • Coordinated security fixes (release-3.6) (#30037) (@crenshaw-dev)security
  • Bump DOMPurify to 3.4.7 for CVE-2026-49978 (#28966) (@aali309)security
  • Refresh SECURITY-INSIGHTS.yml last-updated when the release chore bumps project-release (#28725) (#28957) (@kobihikri)security
  • Add hibernate/rehydrate actions for CNPG Cluster (#28478) (@purisev)added
  • Add progressive sync metrics for AppSet (#29202) (@ranakan19)added
  • Adding annotations on apps to force reconciliation before proceeding with progressive sync (#27467) (@ranakan19)added
  • Add metrics for count of app refreshes triggered by appset during progressive sync (#29244) (@ranakan19)added
  • Expose workqueue rate limiter flags on applicationset-controller (#28286) (@om7057)added
  • Surface progressive sync scenario into condition as reasons and messages (#27820) (@ranakan19)added
  • Enable Zizmor to enforce secure config (#27304) (@crenshaw-dev)added
  • Optionally exclude status field when using argocd admin export command (#29219) (@nitishfy)added
  • Allow metrics label/condition flags via argocd-cmd-params-cm (#28287) (@edgrz)added
296 more lines
  • Configure Dex TLS Cipher Suites and Curve Preferences (cherry-pick #29658 for 3.6) (#30217) (@argo-cd-cherry-pick-bot[bot])added
  • Configure TLS Minversion for Dex web (#28712) (@akhilnittala)added
  • Making Dex storage type and config configurable from argocd-cm configmap (#28624) (@akhilnittala)added
  • Implement kyverno health checks (#27354) (@sandert-k8s)added
  • Add built-in health check for TLSRoute (#26596) (@dnfwlq8054)added
  • Add health check for AWS ACK resources (#29016) (@philljie)added
  • Add health check for CloudNativePG Backup (#28468) (@yugstar)added
  • Add health check for CloudNativePG Database CRD (#29511) (@Matthiator)added
  • Add health check for Kro resources (#28743) (@philljie)added
  • Add health check for MedusaBackupJob (issue #28009) (#28008) (@mgross2)added
  • Add health check for MedusaTask (issue #28007) (#28006) (@mgross2)added
  • Add health check for Prometheus Operator Alertmanager (#28446) (@yugstar)added
  • Add health check for Prometheus Operator ThanosRuler (#28463) (@yugstar)added
  • Add health check for cert-manager CertificateRequest (#28465) (@yugstar)added
  • Add health check for cert-manager trust-manager Bundle (#28615) (@yugstar)added
  • Add health check for flink.apache.org/FlinkSessionJob (#26626) (@sivchari)added
  • Add health checks for Tekton PipelineRun and TaskRun (#28467) (@yugstar)added
  • Add health checks for Velero Backup, Restore, and Schedule (#28464) (@yugstar)added
  • Add health checks for cert-manager ACME Order and Challenge (#28466) (@yugstar)added
  • Enable a Pipeline labeled 'recyclable-expired' to be deleted (#28532) (@juliev0)added
  • Support ListenerSet.gateway.networking.k8s.io (#28388) (@root30)added
  • Support custom deletion messages (#27595) (#27596) (@crenshaw-dev)added
  • Support various policies _.microgateway.airlock.com (#28268) (@root30)added
  • Add metrics to app info (#29512) (#29514) (@crenshaw-dev)added
  • Sign hydrated commits (Alpha) (#28239) (#28271) (@mladjan-gadzic)added
  • Allow to disable strict enforcement (#27084) (#27573) (@agaudreault)added
  • Add spans with configurable sampling (#28396) (@blakepettersson)added
  • Configurable serialization and compression for cached manifests (#26897) (#28600) (@adityaraj178)added
  • Count apps per cluster in a single pass (#29570) (@rumstead)added
  • Drop two redundant application copies from the refresh path (#29581) (@rumstead)added
  • Partial json unmarshalling (#29378) (@blakepettersson)added
  • Resolve the destination server without copying the cluster (#29573) (@rumstead)added
  • Reuse matrix child params when the generator is unchanged (#29582) (@rumstead)added
  • Support ignored status for victoriametrics healthcheck (#29351) (@AndrewChubatiuk)added
  • Add support for redirect to selected Dex connector (Alpha) (#24221) (@antonu17)added
  • Add configHash field to Cluster (#25311) (#27657) (@matmil-dev)added
  • Log username on login attempts (cherry-pick #29841 for 3.6) (#29859) (@argo-cd-cherry-pick-bot[bot])added
  • Set X-Robots-Tag to prevent indexing of the UI (#28359) (@yugstar)added
  • Make TLS Curve prefereneces configurable while setting TLS options for repo-server and server. (#28846) (@akhilnittala)added
  • Implement virtual scrolling for Apps list/tiles view when all is selected (#29542) (@aali309)added
  • Lazy loading (#29087) (@jwinters01)added
  • Add regex search toggle to application(sets) list (#27857) (#27889) (@rickbrouwer)added
  • Add resources explorer view (#28098) (@agaudreault)added
  • Add search bar and pagination to settings pages (#28305) (@agaudreault)added
  • Add server-side name filter to applications list and watch (#29106) (#29242) (@rickbrouwer)added
  • Advanced settings view (#28383) (@agaudreault)added
  • Enable React Compiler in the build (@jwinters01)added
  • Show last scheduled and successful times for CronJob in summary panel (cherry-pick #30690 for 3.6) (#30748) (@dudinea)added
  • Sidebar anchors (#28527) (@blakepettersson)added
  • Use anchors instead of divs in app/appset tiles and tablerows (#28005) (@blakepettersson)added
  • Add manifest-generate-paths annotation support for BitBucket Server (#27552) (@adityaraj178)added
  • Add webhook support for harbor (#27810) (#27884) (@adityaraj178)added
  • Add webhook support for DockerHub (#28022) (@nitishfy)added
  • Add deprecation warning when using --signature-keys (#28941) (@kuci-JK)added
  • Add health check for pulumi.com/Stack (#28534) (@guineveresaenger)added
  • Add health check resource customizations for Envoy Gateway Extension CRDs (#27291) (@obliadp)added
  • Add reporting component to events list (#25684) (#27678) (@Suven-p)added
  • Allow pod healthcheck to ignore restart policy via annotation (#15317) (Alpha) (#28249) (@jskrill)added
  • Default to SSD with SSA and remove SMD (#29103) (@pjiang-dev)added
  • Persist and reuse client certificates if they were using in argocd login call (cherry-pick #29718 for 3.6) (#29781) (@argo-cd-cherry-pick-bot[bot])added
  • Replace SIGNATURE-KEYS with SOURCE-INTEGRITY in proj list (#28920) (@kuci-JK)added
  • Accept repository-style Azure keys in repo-creds (#29414) (#29415) (@SHINMH)added
  • Add tpl function to ApplicationSet go-templating (#16302) (#26614) (@twobiers)added
  • Add a button to clear logs in the pod logs viewer (#27149) (@gcadoret)added
  • Add bundled health check for KServe LLMInferenceService (#29599) (#29620) (@sarfarazgit)added
  • Add clear all button to ApplicationSet filters (#28593) (@choejwoo)added
  • Add configurable SSO login button text via ui.loginButtonText (#28254) (@NotKiwy)added
  • Add oci generator for applicationsets (#26121) (@robinlieb)added
  • Add option to disable Swagger UI endpoint (#28717) (@smahadik-27)added
  • Add which resources caused the app health to change (#28455) (@agaudreault)added
  • Adds a server-proxy-url flag in cluster add command (#28134) (@ppapapetrou76)added
  • Allow optionally setting a prefix for redis keys (closes #12978) (#26169) (@healthy-pod)added
  • Allow to create Jobs from CronJobs with OwnerReferencesPermissionEnforcement admission (#26009) (@sathieu)added
  • Support REDIS_SENTINEL and REDIS_SENTINELMASTER env vars (#28391) (@suii2210)added
  • Support filtering out managed resources using label selector (#29423) (@alexmt)added
  • Support ignore-differences annotation on resources (#29616) (@ranakan19)added
  • Support separate RBAC permission for application rollback (#28924) (@ppapapetrou76)added
  • Optionally allow pop tokens for azure hybrid aks clusters - Closes #24156 (#26593) (@JS-Jake)added
  • Support custom extensions for application directory source (#28571) (@nitishfy)added
  • Add healthchecks and actions for Project Capsule resources (#28891) (@sandert-k8s)added
  • Rename SyncWindow to InlineSyncWindow (#29152) (@adityaraj178)fixed
  • Display sync option dropdowns on separate lines (#28438) (@adityaraj178)fixed
  • List Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.6) (#30652) (@argo-cd-cherry-pick-bot[bot])fixed
  • Ensure deletion message is printed only for text output fomat (cherry-pick #30600 for 3.6) (#30618) (@argo-cd-cherry-pick-bot[bot])fixed
  • Use server-side timeout query parameter via transport wrapper (#28828) (#28977) (@luwangVMW)fixed
  • Do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.6) (#30481) (@argo-cd-cherry-pick-bot[bot])fixed
  • Don't release finalizer while children still terminate (#28999) (@blakepettersson)fixed
  • Fail reverse deletion when a stale cache entry cannot be evicted (#29042) (#29140) (@himeshp)fixed
  • Fall back to create when patch returns NotFound (#17312) (#28645) (@rickbrouwer)fixed
  • Make ParametersGenerated condition message consistent (#30405) (cherry-pick #30438 for 3.6) (#30577) (@argo-cd-cherry-pick-bot[bot])fixed
  • Refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.6) (#30623) (@argo-cd-cherry-pick-bot[bot])fixed
  • Restore ignoreApplicationDifferences after normalization (#29070) (@pjiang-dev)fixed
  • Stop progressive sync reconciling in a tight loop (#27577) (#29044) (@himeshp)fixed
  • Throw error when generated apps have empty name (#28833) (@nitishfy)fixed
  • Verify terminating Applications against the API server (#29042) (#29043) (@himeshp)fixed
  • Bump argo-ui for React 19 toast compatibility (#28874) (@choejwoo)fixed
  • Authenticate gitops-engine tag push in release workflow (cherry-pick #29744 for 3.6) (#29755) (@argo-cd-cherry-pick-bot[bot])fixed
  • Expand image tag in staging deploy commit message (#28773) (@crenshaw-dev)fixed
  • Explicitly check out base repo and default branch for cherry-pick job (#28413) (@blakepettersson)fixed
  • Fix readthedocs build by removing an invalid link (#28449) (#28450) (@dudinea)fixed
  • Gitkeep so go builds work (#28461) (@crenshaw-dev)fixed
  • Remove unneeded and misnamed ui/dist/app/gitkeep (#28447) (@dudinea)fixed
  • Accept write-repositories in 'argocd admin settings rbac can' (#30457) (cherry-pick #30458 for 3.6) (#30550) (@argo-cd-cherry-pick-bot[bot])fixed
  • Honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.6) (#30498) (@argo-cd-cherry-pick-bot[bot])fixed
  • Send --header values when refreshing an expired auth token (#30061) (#30511) (@nitishfy)fixed
  • Skip stale destinations in cluster stats (#21808) (#28786) (@AkashKumar7902)fixed
  • Clean up tgz stream temporary directories (#29148) (cherry-pick #29156 for 3.6) (#29772) (@argo-cd-cherry-pick-bot[bot])fixed
  • Allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.6) (#30505) (@argo-cd-cherry-pick-bot[bot])fixed
  • Confirm project references before blocking deletion (cherry-pick #29737 for 3.6) (#29743) (@argo-cd-cherry-pick-bot[bot])fixed
  • Correct metrics flag help names. (#28358) (@siddiksawani)fixed
  • Dropping refresh requests during reconcile (#28603) (#28414) (@dudinea)fixed
  • Honor manifest-generate-paths for shallow-cloned repositories (cherry-pick #30485 for 3.6) (#30565) (@argo-cd-cherry-pick-bot[bot])fixed
  • Reuse server-side diff result when masking Secret data (#27858) (@1ovsss)fixed
  • Rewrite resource tree when an app moves back to a controller (cherry-pick #30313 for 3.6) (#30382) (@argo-cd-cherry-pick-bot[bot])fixed
  • Show retry wait time in unambiguous format (#29534) (@nitishfy)fixed
  • Treat timeout.reconciliation=0 as disabled soft expiry (#27683) (@aali309)fixed
  • Use diff cache when timeout.reconciliation is disabled (#29073) (@aali309)fixed
  • Don't drop manager-owned descendant fields when filtering webhook mutations (#28819) (@pujitha24)fixed
  • Correct cluster generator example comments (#29196) (@aminerachyd)fixed
  • Correct broken documentation links (#29572) (@yashrajshuklaaa)fixed
  • Link version banner to stable equivalent page (#27054) (@SkyShineTH)fixed
  • Don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.6) (#30433) (@argo-cd-cherry-pick-bot[bot])fixed
  • Send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.6) (#30410) (@crenshaw-dev)fixed
  • A workaround to fix SRV _grpclb._tcp SRV lookups (#29989) (cherry-pick #30084 for 3.6) (#30169) (@argo-cd-cherry-pick-bot[bot])fixed
  • Enable SyncWithReplaceAllowed by default for in-process server (#27643) (@SAY-5)fixed
  • AWSManagedControlPlane reports Healthy while EKS control plane is updating (#28936) (#28937) (@moko-poi)fixed
  • Crossplane MRs should report Progressing (not Healthy) whilst provisioning (#29381) (#29382) (@kjothen)fixed
  • PromotionStrategy and ChangeTransferPolicy Healthy, not Progressing (#28434) (@crenshaw-dev)fixed
  • ResourceBinding health check for dependency-propagated bindings (#28299) (@pncloud)fixed
  • A KubeVirt VirtualMachine declared stopped is Healthy (#29664) (@daixtrose)fixed
  • Handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.6) (#30628) (@argo-cd-cherry-pick-bot[bot])fixed
  • Report CRDs that are not established yet as Progressing (#26346) (cherry-pick #30441 for 3.6) (#30576) (@argo-cd-cherry-pick-bot[bot])fixed
  • Report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.6) (#30423) (@argo-cd-cherry-pick-bot[bot])fixed
  • Report suspended FlinkDeployment as healthy (#26818) (#28995) (@SaiPisey2)fixed
  • Surface the Suspended condition message for suspended Jobs (#28738) (@semx)fixed
  • Treat nil return from Lua health status script as n/a instead of unknown (#28269) (@snorwin)fixed
  • Use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.6) (#30657) (@argo-cd-cherry-pick-bot[bot])fixed
  • Pass registry passwords through stdin (#17821) (#28795) (@AkashKumar7902)fixed
  • Do not report a permanent note push failure as exhausted retries (cherry-pick #29903 for 3.6) (#29909) (@argo-cd-cherry-pick-bot[bot])fixed
  • Retry notes push on cannot lock ref errors (#28469) (@Churi12)fixed
  • Expose application operation phase in argocd_app_info (#28719) (@vishnu97770)fixed
  • Honor standard oltp tls/header env vars + argocd-tls-certs-cm (#29946) (cherry-pick release-3.6) (#30334) (@blakepettersson)fixed
  • Check if error == notfound (#28663) (@blakepettersson)fixed
  • Incorrect fail metrics on RENAME cache miss (#29037) (@agaudreault)fixed
  • Honor depth of referenced source instead of primary source (#28339) (@alexandresavicki)fixed
  • Stale manifests and goroutine leak after CMP failure (#29870) (cherry-pick #29874 for 3.6) (#30142) (@argo-cd-cherry-pick-bot[bot])fixed
  • Clean repository on revision change (#28771) (@emil-ep)fixed
  • Resolve untyped helm source type in UpdateRevisionForPaths (#28904) (@Churi12)fixed
  • Restore Normalize in UpdateRevisionForPaths to unbreak master (#28979) (@Churi12)fixed
  • Auto-sync skipped when newer commit arrives during sync (#28692) (@blakepettersson)fixed
  • Allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.6) (#30567) (@antcybersec)fixed
  • Fill event count and timestamps for events.k8s.io events (#30015) (cherry-pick #30017 for 3.6) (#30051) (@argo-cd-cherry-pick-bot[bot])fixed
  • Keep the gRPC code when manifest generation is interrupted (cherry-pick #30425 for 3.6) (#30551) (@argo-cd-cherry-pick-bot[bot])fixed
  • Prevent PodLogs goroutine leak on client disconnect (cherry-pick #30450 for 3.6) (#30461) (@argo-cd-cherry-pick-bot[bot])fixed
  • Prevent SSD CLI secret mask spoofing (#29089) (@pjiang-dev)fixed
  • Process apps with an unresolvable destination on one shard (#30456) (cherry-pick #30463 for 3.6) (#30639) (@argo-cd-cherry-pick-bot[bot])fixed
  • Recompute distribution when Update adds an unknown cluster (#29476) (cherry-pick #29477 for 3.6) (#30318) (@argo-cd-cherry-pick-bot[bot])fixed
  • Hide secret in last-applied-configuration annotation (#28989) (@pjiang-dev)fixed
  • Add state information for sync operation (#28758) (@agaudreault)fixed
  • Correctly set operationState values on retry (#26530) (#28778) (@agaudreault)fixed
  • Do not pass --force to server-side apply (#29624) (#29626) (@KR-Ravindra)fixed
  • Reduce unnecessary sync operation caused by refreshes (#28619) (@agaudreault)fixed
  • Remove hook finalizer when live object is missing from reconciliation cache (cherry-pick #29469 for 3.6) (#30529) (@argo-cd-cherry-pick-bot[bot])fixed
  • Fix Hydrate-To revision name in App details (#27134) (@olivergondza)fixed
  • Add ResizeObserver to Monaco editor to fix collapsed rendering (#28810) (@choejwoo)fixed
  • Align tile favorite icons consistently (cherry-pick #29844 for 3.6) (#29845) (@argo-cd-cherry-pick-bot[bot])fixed
  • Clarify scoped repository copy (#22793) (#29177) (@SHINMH)fixed
  • Don't crash resource panel when desired state is null (#30528) (cherry-pick #30532 for 3.6) (#30538) (@argo-cd-cherry-pick-bot[bot])fixed
  • Enhance Bitbucket Server URL handling in ui for repo and revision links (#27587) (@adityaraj178)fixed
  • Format parent node info with Argo styles (#28385) (@agaudreault)fixed
  • Guard SSO redirect to stop 401 retry loop (#28807) (@geojaz)fixed
  • Hide the pod highlight button when there is only one pod (#29252) (#29255) (@sandaruwijewardhana)fixed
  • Keep application list names aligned with external links (#29259) (@linghaoSu)fixed
  • Keep notice icon next to app name in tiles (#29413) (@choejwoo)fixed
  • Keep status panel links readable when focused in dark mode (#29288) (cherry-pick #30493 for 3.6) (#30542) (@argo-cd-cherry-pick-bot[bot])fixed
  • Keep the pending New App form update when re-renders (#30248) (cherry-pick #30249 for 3.6) (#30611) (@argo-cd-cherry-pick-bot[bot])fixed
  • Make pod highlight dropdown readable in dark theme (#29605) (@choejwoo)fixed
  • Manifest viewer jumpiness (#29691) (#29692) (@crenshaw-dev)fixed
  • Navigate to application on appset list view row click (#28789) (@choejwoo)fixed
  • Prefix application-details per-app CSS class to avoid collisions (#24220) (#28573) (@polarAli)fixed
  • Preserve application tile height and spacing with page all (cherry-pick #29777 for 3.6) (#29803) (@argo-cd-cherry-pick-bot[bot])fixed
  • Prevent content showing through sticky source title (#29107) (@choejwoo)fixed
  • Prevent crash when deleting ReplicaSet from grouped list (#26167) (@choejwoo)fixed
  • Prevent delete button from clipping in application tiles view (#28379) (@choejwoo)fixed
  • Prevent resource action buttons from overlapping status icons (#29302) (@linghaoSu)fixed
  • Reduce Applications virtual-scroll flicker on scroll (cherry-pick #29935 for 3.6) (#29972) (@argo-cd-cherry-pick-bot[bot])fixed
  • Refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.6) (#30592) (@argo-cd-cherry-pick-bot[bot])fixed
  • Remove kind filter from appset page (#29310) (#29311) (@crenshaw-dev)fixed
  • Remove unnecessary open app icon on list view (#29681) (@agaudreault)fixed
  • Show enableOCI only for Helm (cherry-pick #29974 for 3.6) (#30075) (@argo-cd-cherry-pick-bot[bot])fixed
  • Show full name of app on hover (#29235) (#29262) (@adityaraj178)fixed
  • Show multi-source plugin env in Parameters tab (#29465) (@lemon0333)fixed
  • Show operation state on applications list page (#29063) (#29064) (@antonu17)fixed
  • Show warning in appset-status display (#28445) (@ranakan19)fixed
  • Sidebar icon alignment (#28783) (@southball)fixed
  • Tree view spacing with group nodes (#29660) (@agaudreault)fixed
  • Update cluster count logic in ApplicationsSummary (#28768) (@linghaoSu)fixed
  • Update icon for consistency in appset list (#28528) (@choejwoo)fixed
  • Update title in appset details page (#28529) (@choejwoo)fixed
  • Use break-word on sync status message (#5084) (#28961) (@EmilyXinyi)fixed
  • Use distinct icons for open-app and external URLs (#28503) (@choejwoo)fixed
  • Use groupedResources local variable in parent ref panel (#28399) (@crenshaw-dev)fixed
  • Use hydrateTo branch name when set (#29554) (#29562) (@crenshaw-dev)fixed
  • Use the open-app icon in the ApplicationSet list row (#29264) (@choejwoo)fixed
  • Use unfiltered resources for filter counts (#29621) (@choejwoo)fixed
  • Vertical alignment of application tile content (#28412) (@choejwoo)fixed
  • Wrap GROUP/KIND header instead of overflowing (#29304) (@linghaoSu)fixed
  • Match Helm OCI apps using repoURL+chart against registry events (#27954) (@adityaraj178)fixed
  • Empty SHA256 fingerprint for SSH known hosts entries on the UI (#29401) (@ppapapetrou76)fixed
  • (ui) reduce Applications virtual-scroll flicker on scroll (cherry-pick #29935 for 3.6) - REVERT (#29973) (@keithchong)fixed
  • Auto-sync triggers despite selfHeal: false when Sync Status and Last Sync are at different commits #26769 (#26770) (@adityaraj178)fixed
  • GRPCRoute health check ignores stale observedGeneration conditions (#28086) (#28087) (@obliadp)fixed
  • Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.6) (#30509) (@argo-cd-cherry-pick-bot[bot])fixed
  • Server-Side diff should respect impersonation (#28821) (@pjiang-dev)fixed
  • Support rabbitmq scale to zero in health check (#29119) (@Postremus)fixed
  • Use EachListItemWithAlloc to prevent page retention (#29305) (@liam-mackie)fixed
  • Watch APIServices like we do CRDs (#28289) (@zachaller)fixed
  • Accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.6) (#30517) (@argo-cd-cherry-pick-bot[bot])fixed
  • Add a lock on clusterinformer (#28216) (@blakepettersson)fixed
  • Add service for application controller statefulset (#29498) (#29499) (@chandan009s)fixed
  • Admin cluster shards command does not display shards if there are no clusters assigned to them (#28429) (@cjcocokrisp)fixed
  • Auto-sync skipped when newer commit arrives during sync with manifest-generate-paths (#27875) (#28227) (@josef-sotkovsky)fixed
  • Badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.6) (#30583) (@argo-cd-cherry-pick-bot[bot])fixed
  • Cache the OCI tag list (#30117) (cherry-pick #30118 for 3.6) (#30120) (@argo-cd-cherry-pick-bot[bot])fixed
  • Controller panics in StateDiffs when server-side diff applier fails (#30743) (cherry-pick #30744 for 3.6) (#30755) (@argo-cd-cherry-pick-bot[bot])fixed
  • Correct operator precedence in getAppInstanceValue (#28852) (@magic-peach)fixed
  • Correct operator precedence in isDestinationMatched deny pattern (#28854) (@magic-peach)fixed
  • Correct scheduled-time format in CronWorkflow create-workflow action (#29915) (cherry-pick #29916 for 3.6) (#29952) (@argo-cd-cherry-pick-bot[bot])fixed
  • Correct variable expansion in Makefile and typo in .snyk (#28674) (@magic-peach)fixed
  • Deleted resource are incorrectly shown in UI (#28322) (@agaudreault)fixed
  • Detect OCI repo type from URL prefix in Normalize() (#28517) (#28518) (@peikk0)fixed
  • Don't clobber non-ignored fields on "replace" (#27136) (@blakepettersson)fixed
  • Don't degrade Cluster API Cluster health while Ready is False during provisioning (#29237) (@jonathanrainer)fixed
  • Don't render status clickable when there is no operation (#27990) (@choejwoo)fixed
  • Fix escaped URL routing for write repo (creds) endpoints (cherry-pick #29940 for 3.6) (#29957) (@argo-cd-cherry-pick-bot[bot])fixed
  • Fix failure on Sync of resources that do not fit into last-applied-configuration (#28421) (#28440) (@dudinea)fixed
  • Fix flaky tests (#28609) (@adityaraj178)fixed
  • Fix untar inbound check if dstPath is symlinked (cherry-pick #28881 for 3.6) (#29977) (@argo-cd-cherry-pick-bot[bot])fixed
  • Fixes a regression of dex config env vars substituion (#28369) (@ppapapetrou76)fixed
  • Fixes cluster cache tests flakiness (#28407) (@ppapapetrou76)fixed
  • Fixes flaky tests by making Log capturer thread-safe (#28328) (@ppapapetrou76)fixed
  • Glob compile error (#29699) (@crenshaw-dev)fixed
  • Handle GrafanaFolder negative-polarity condition (#29395) (#29397) (@Karthik-Chowdary)fixed
  • Honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.6) (#30609) (@argo-cd-cherry-pick-bot[bot])fixed
  • Include multi-source revisions in sync completion event (cherry-pick #30446 for 3.6) (#30472) (@gdsoumya)fixed
  • Incorrect GitHub path in TestGitHubListReturnsRepositoryNotFoundError (#25775) (@cwoebker)fixed
  • Kustomize: ignore Components directories missing a kustomization file (cherry-pick #26576 for 3.6) (#29936) (@argo-cd-cherry-pick-bot[bot])fixed
  • Lua script for Pipeline not to use strings library (#28602) (@juliev0)fixed
  • Migrate react-ga to react-ga4 (#28945) (@FZhg)fixed
  • Modify GPG regex to support additional key algorithms (cherry-pick #27638 for 3.6) (#30495) (@argo-cd-cherry-pick-bot[bot])fixed
  • Mount argocd-cmd-params-cm in repo-server so pprof can be enabled (#28863) (@rumstead)fixed
  • Name downloaded deployment and replicaset logs after the resource (#26970) (cherry-pick #29832 for 3.6) (#30518) (@argo-cd-cherry-pick-bot[bot])fixed
  • Normalize Helm valuesObject in source comparison to avoid spurious appdetails 403 (#28288) (#28318) (@bear-san)fixed
  • Only do annotation backfill if live unset (#28770) (@blakepettersson)fixed
  • Pass down context to cli commands instead of using default context.Ba… (#28734) (@Eduard-Voiculescu)fixed
  • Prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.6) (#30613) (@argo-cd-cherry-pick-bot[bot])fixed
  • Propagate command context to kube and HTTP calls in argocd CLI (#28837) (@Eduard-Voiculescu)fixed
  • Recover AuthReconcile visitor panics (#29436) (#29440) (@Karthik-Chowdary)fixed
  • Recover from kubectl panic in AuthReconcile when SA is forbidden (#28669) (@mahesh-sadupalli)fixed
  • Relogin with --argocd-context does not correctly persist credentials (#28453) (#28510) (@octonawish-akcodes)fixed
  • Remove generation from ssd (#30398) (cherry-pick #30402 for 3.6) (#30443) (@argo-cd-cherry-pick-bot[bot])fixed
  • Replace k8s.io/cri-streaming (#28315) (@blakepettersson)fixed
  • Respect ignore differences for individual array elements in CRDs (#28220) (@nitishfy)fixed
  • Restore SSH repository fetch through a SOCKS5 proxy (cherry-pick #30238 for 3.6) (#30252) (@ppapapetrou76)fixed
  • Return InvalidArgument for invalid repo URL in ListRefs (#28631) (@choejwoo)fixed
  • Return InvalidArgument for non-existent app path in GetAppDetails (#28699) (@choejwoo)fixed
  • Return InvalidArgument for unresolved revision in GetAppDetails (#28782) (@choejwoo)fixed
  • Serialize Helm chart cache cleanup with chart extraction (#30253) (cherry-pick #30260 for 3.6) (#30522) (@argo-cd-cherry-pick-bot[bot])fixed
  • Server-side diff reports fields removed by other managers as diffs (cherry-pick #30206 for 3.6) (#30231) (@argo-cd-cherry-pick-bot[bot])fixed
  • Show 'name does not match' error in delete/sync confirmation dialogs (#28752) (@octonawish-akcodes)fixed
  • Skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.6) (#30648) (@argo-cd-cherry-pick-bot[bot])fixed
  • Stream list requests straight to http writer (#27152) (@blakepettersson)fixed
  • Support bearer token auth on terminal websocket endpoint (#28285) (@amarkdotdev)fixed
  • Synchronize OCI cache cleanup with extraction (#30020) (cherry-pick #30023 for 3.6) (#30105) (@argo-cd-cherry-pick-bot[bot])fixed
  • Tooltips that are cut in half when the window is to small in the health bar (#28700) (@Molaryy)fixed
  • Use Entra ID uti claim as token id when jti is absent (#28625) (#28656) (@magic-peach)fixed
  • Use OIDC refresh tokens to renew expired sessions (#27041, #12189) (#27777) (@ris-tlp)fixed
  • Validate resolved OIDC config after secret substitution (#29545) (#29555) (@chandan009s)fixed
  • Wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.6) (#30354) (@argo-cd-cherry-pick-bot[bot])fixed
  • Warn when 'rbac can' checks a group without a role binding (#28729) (#28733) (@SamyDjemai)fixed
  • Race condition on empty-uid backfill (#28343) (@crenshaw-dev)fixed
  • Consistent gen manifest cache key for UpdateRevisionForPaths (#28074) (@fm1ck3y)fixed
  • Do not report changes on cache miss without path updates (cherry-pick #29442 for 3.6) (#29854) (@argo-cd-cherry-pick-bot[bot])fixed
  • Deep-copy before mutating object from a shared cache (#29350) (@antonu17)fixed
  • Read appprojects from informer cache (#28815) (@antonu17)fixed
  • Expire cached Helm chart archives using repo cache expiration (#28081) (@Mangaal)fixed
  • Fixes server-side diff with Helm+Kubernetes (#28092) (@ppapapetrou76)fixed
  • Health check timeout resulting in CrashLoopBackOff (cherry-pick #29863 for 3.6) (#29900) (@argo-cd-cherry-pick-bot[bot])fixed
  • Honor ARGOCD_REPO_SERVER_OTLP_HEADERS in repo-server (#28698) (@nitishfy)fixed
  • Make git auth errors readable instead of "terminal prompts disabled" (#28748) (@edu-diaz)fixed
  • Don't drop request log entries for Kubernetes-typed messages (cherry-pick #29872 for 3.6) (#30520) (@argo-cd-cherry-pick-bot[bot])fixed
  • Merge branch 'master' into react-compiler-rules-of-react-fixes (@jwinters01)other
  • Merge pull request #28417 from jwinters01/react-compiler-rules-of-react-fixes (@jwinters01)other
  • Merge pull request #28538 from juliev0/pause-disable (@juliev0)other
  • Merge remote-tracking branch 'origin/master' into react-compiler-rules-of-react-fixes (@jwinters01)other
  • Tie argo-ui to appropriate commit (@jwinters01)other
400 maintenance lines (dependency bumps, CI, tests, docs)
  • Exclude generated workflow from dependabot (#28774) (@crenshaw-dev)maintenance
  • Fix CI breakage: remove dependabot's changes to an agentic workflow compiled file (#28772) (@dudinea)maintenance
  • Regenerate manifests in Renovate helm post-upgrade tasks (#29297) (@crenshaw-dev)maintenance
  • Strip v prefix for helm and git-lfs renovate checksum tasks (#29287) (@crenshaw-dev)maintenance
  • Use curl in kustomize checksum helper so Renovate can refresh checksums (cherry-pick #29938 for 3.6) (#30102) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Note that a templated project blocks the Preview tab (#29238) (@ShmuelOps)maintenance
  • Document GHCR webhook support for the OCI generator (cherry-pick #30492 for 3.6) (#30548) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Improve docs for argocd app create --file - (#29553) (#29563) (@crenshaw-dev)maintenance
  • Document the argocd.argoproj.io/hydrate annotation (#28400) (@dudinea)maintenance
  • Manifest-generate-paths and hydrator.metadata note limitation (#28555) (#28557) (@crenshaw-dev)maintenance
  • Adjust misleading onboarding steps (#29672) (@adesso-os)maintenance
  • ApplicationSet Cluster Decision Resource Generator - update OCM references from deprecated PlacementRule to PlacementDecision (#28307) (@mikeshng)maintenance
  • Fix minor typo in API authorization documentation (#28633) (@allexistence)maintenance
  • Proposal: Virtual Scrolling (#28900) (@aali309)maintenance
  • Reggie as a release champion for 4.0 (#29651) (@reggie-k)maintenance
  • Timeout.reconciliation needs restart to work (#27540) (@carlosonunez-redhat)maintenance
  • Add Mojro to USERS.md (#29124) (@ruturaj220)maintenance
  • Add a warning in api docs about the session api that works only for local users (#29384) (@ppapapetrou76)maintenance
  • Add gitlab ci to menu (#28723) (@blakepettersson)maintenance
  • Add jedarden.com to USERS.md (#29352) (@jedarden)maintenance
  • Add mermaid diagram support to mkdocs (#27991) (@choejwoo)maintenance
  • Add more bot instructions (#29317) (@blakepettersson)maintenance
  • Add proposal for attaching debug containers (#27366) (@KyriosGN0)maintenance
  • Add server-side-diff default behavior to 3.6 upgrade guide (cherry-pick #29769 for 3.6) (#29771) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Centralize MAINTAINERS via argoproj/.project (#29645) (@agaudreault)maintenance
  • Clarify core resource health checks (#29254) (@KHARSHAVARDHAN-eng)maintenance
  • Clarify hook caveats in the database migration example (#29409) (@ppapapetrou76)maintenance
  • Clarify implicit destinations for project-scoped clusters (#28324) (@senutpal)maintenance
  • Clarify namespaceResourceWhitelist affects UI resource tree (#28565) (@lzb12)maintenance
  • Clarify required vs optional cluster secret fields (#28310) (@yugstar)maintenance
  • Document double-wildcard pattern for domain-level repository matching (#26196) (@ArsalanAnwer0)maintenance
  • Document headless authentication approaches for CI/CD pipelines (#29046) (@ppapapetrou76)maintenance
  • Document hydrator git-only repository support (#29541) (@nandotorres)maintenance
  • Document object format for the clusters RBAC resource (#28668) (@allenlee820202)maintenance
  • Fix 'Argo CD' project name (#29318) (@hsnabszhdn)maintenance
  • Fix 'allows to display' grammar in status badge revisionLength (#29696) (@fng713)maintenance
  • Fix 'argocd-cm' references (#29320) (@hsnabszhdn)maintenance
  • Fix 'respectRBAC' list formatting (#29321) (@hsnabszhdn)maintenance
  • Fix Keycloak RBAC group matching and controller flag description (#28569) (@almightymoon)maintenance
  • Fix broken reconcile docs link in annotations-and-labels (#28330) (@s3onghyun)maintenance
  • Fix broken sealed-secrets Helm repoURL in examples (#28683) (@mailnike)maintenance
  • Fix config management plugin link (#29172) (#29173) (@DresdenGman)maintenance
  • Fix grammar issues in faq.md #28346 (#28347) (@Taiwrash)maintenance
  • Fix grammar issues in running-locally.md #28346 (#28348) (@Taiwrash)maintenance
  • Fix grammatical error in CI troubleshooting documentation (#28680) (@magic-peach)maintenance
  • Fix minor typos in bug triage guidelines (#28634) (@allexistence)maintenance
  • Fix missing word in SECURITY.md vulnerability reporting instructions (#28679) (@magic-peach)maintenance
  • Fix nested matrix generator examples (#26751) (#28784) (@AkashKumar7902)maintenance
  • Fix non-existent 'argocd repo edit' command in HA guide (cherry-pick #30694 for 3.6) (#30707) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Fix typo and brand name inconsistency in operator-manual docs (#29104) (@sangharshcs)maintenance
  • Fix typos and grammar in documentation (#28673) (@magic-peach)maintenance
  • Fix typos in documentation and CI stale workflow (#28672) (@magic-peach)maintenance
  • Fix warning message when invoking without grpc-web (#28720) (@Eduard-Voiculescu)maintenance
  • Give every annotation and label an anchor (#29380) (@nitishfy)maintenance
  • Replace 'client id' with 'client ID' (#29319) (@hsnabszhdn)maintenance
  • Bump SonarSource/sonarqube-scan-action from 8.2.0 to 8.2.1 (#28741) (@dependabot[bot])maintenance
  • Bump Ubuntu base image digest to 26.04 (resolute-20260811.1) (#29569) (@dudinea)maintenance
  • Bump actions/cache from 5.0.5 to 6.0.0 (#28402) (@dependabot[bot])maintenance
  • Bump actions/cache from 6.0.0 to 6.1.0 (#28475) (@dependabot[bot])maintenance
  • Bump actions/checkout from 6.0.2 to 7.0.0 (#28637) (@dependabot[bot])maintenance
  • Bump actions/checkout from 6.0.3 to 7.0.0 (#28350) (@dependabot[bot])maintenance
  • Bump actions/checkout from 7.0.0 to 7.0.1 (#28825) (@dependabot[bot])maintenance
  • Bump actions/setup-go from 6.4.0 to 6.5.0 (#28401) (@dependabot[bot])maintenance
  • Bump actions/setup-go from 6.5.0 to 7.0.0 (#28740) (@dependabot[bot])maintenance
  • Bump actions/setup-node from 6.4.0 to 7.0.0 (#28709) (@dependabot[bot])maintenance
  • Bump actions/setup-node from 6.4.0 to 7.0.0 (#28765) (@dependabot[bot])maintenance
  • Bump actions/stale from 10.3.0 to 10.4.0 (#28664) (@dependabot[bot])maintenance
  • Bump actions/stale from 10.4.0 to 11.0.0 (#28932) (@dependabot[bot])maintenance
  • Bump docker/build-push-action from 7.2.0 to 7.3.0 (#28536) (@dependabot[bot])maintenance
  • Bump docker/login-action from 4.2.0 to 4.3.0 (#28562) (@dependabot[bot])maintenance
  • Bump docker/login-action from 4.3.0 to 4.4.0 (#28582) (@dependabot[bot])maintenance
  • Bump docker/login-action from 4.4.0 to 4.5.0 (#28886) (@dependabot[bot])maintenance
  • Bump docker/login-action from 4.5.0 to 4.5.1 (#28917) (@dependabot[bot])maintenance
  • Bump docker/login-action from 4.5.1 to 4.5.2 (#28951) (@dependabot[bot])maintenance
  • Bump docker/login-action from 4.5.2 to 4.6.0 (#28974) (@dependabot[bot])maintenance
  • Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#28561) (@dependabot[bot])maintenance
  • Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#29279) (@dependabot[bot])maintenance
  • Bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#28535) (@dependabot[bot])maintenance
  • Bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#29550) (@dependabot[bot])maintenance
  • Bump dompurify (cherry-pick #30014 for 3.6) (#30034) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.0 (#29212) (@dependabot[bot])maintenance
  • Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.0 to 1.23.1 (#29462) (@dependabot[bot])maintenance
  • Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1 (#29459) (@dependabot[bot])maintenance
  • Bump github.com/Azure/kubelogin from 0.2.18 to 0.2.19 (#28403) (@dependabot[bot])maintenance
  • Bump github.com/alicebob/miniredis/v2 from 2.38.0 to 2.39.0 (#29588) (@dependabot[bot])maintenance
  • Bump github.com/aws/smithy-go from 1.27.2 to 1.27.3 (#28473) (@dependabot[bot])maintenance
  • Bump github.com/aws/smithy-go from 1.27.3 to 1.27.4 (#28760) (@dependabot[bot])maintenance
  • Bump github.com/aws/smithy-go from 1.27.4 to 1.27.5 (#28931) (@dependabot[bot])maintenance
  • Bump github.com/aws/smithy-go from 1.27.5 to 1.27.6 (#29041) (@dependabot[bot])maintenance
  • Bump github.com/aws/smithy-go from 1.27.6 to 1.27.7 (#29136) (@dependabot[bot])maintenance
  • Bump github.com/aws/smithy-go from 1.27.7 to 1.27.8 (#29230) (@dependabot[bot])maintenance
  • Bump github.com/aws/smithy-go from 1.27.8 to 1.27.9 (#29376) (@dependabot[bot])maintenance
  • Bump github.com/bombsimon/logrusr/v4 from 4.1.0 to 4.2.0 (#29480) (@dependabot[bot])maintenance
  • Bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 (#28325) (@dependabot[bot])maintenance
  • Bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0 (#28643) (@dependabot[bot])maintenance
  • Bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0 (#29592) (@dependabot[bot])maintenance
  • Bump github.com/cyphar/filepath-securejoin from 0.6.1 to 0.7.0 (#28351) (@dependabot[bot])maintenance
  • Bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.5 (#29589) (@dependabot[bot])maintenance
  • Bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 (cherry-pick #30284 for 3.6) (#30711) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Bump github.com/go-jose/go-jose/v4 from 4.1.6 to 4.1.7 (cherry-pick #30731 for 3.6) (#30735) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Bump github.com/go-logr/logr from 1.4.3 to 1.4.4 (#28823) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/loads from 0.24.0 to 0.25.0 (#28822) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/loads from 0.25.0 to 0.25.1 (#29229) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/loads from 0.25.1 to 0.25.2 (#29460) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/loads from 0.25.2 to 0.25.3 (#29615) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/runtime/server-middleware from 0.32.3 to 0.32.4 (#28372) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/runtime/server-middleware from 0.32.4 to 0.32.5 (#28759) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/runtime/server-middleware from 0.32.5 to 0.32.6 (#28845) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/runtime/server-middleware from 0.32.6 to 0.33.0 (#28933) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/runtime/server-middleware from 0.33.0 to 0.33.1 (#29375) (@dependabot[bot])maintenance
  • Bump github.com/go-openapi/runtime/server-middleware from 0.33.1 to 0.33.2 (#29590) (@dependabot[bot])maintenance
  • Bump github.com/gobwas/glob from 0.2.3 to 1.0.0 (#29482) (@dependabot[bot])maintenance
  • Bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 (#28560) (@dependabot[bot])maintenance
  • Bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.3 to 2.3.4 (#29427) (@dependabot[bot])maintenance
  • Bump github.com/jarcoal/httpmock from 1.4.1 to 1.4.2 (#28953) (@dependabot[bot])maintenance
  • Bump github.com/mattn/go-isatty from 0.0.22 to 0.0.23 (#28761) (@dependabot[bot])maintenance
  • Bump github.com/mattn/go-isatty from 0.0.23 to 0.0.24 (#28883) (@dependabot[bot])maintenance
  • Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0 (#28824) (@dependabot[bot])maintenance
  • Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 (#28914) (@dependabot[bot])maintenance
  • Bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 (#29552) (@dependabot[bot])maintenance
  • Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.21.0 (#28387) (@dependabot[bot])maintenance
  • Bump github.com/redis/go-redis/v9 from 9.21.0 to 9.22.0 (#29092) (@dependabot[bot])maintenance
  • Bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 (#29341) (@dependabot[bot])maintenance
  • Bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 (#29457) (@dependabot[bot])maintenance
  • Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (#29211) (@dependabot[bot])maintenance
  • Bump github.com/skeema/knownhosts from 1.3.2 to 1.3.3 (#29458) (@dependabot[bot])maintenance
  • Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#29231) (@dependabot[bot])maintenance
  • Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#29301) (@dependabot[bot])maintenance
  • Bump github/codeql-action/autobuild from 4.36.2 to 4.36.3 (#28563) (@dependabot[bot])maintenance
  • Bump github/codeql-action/init from 4.36.3 to 4.37.0 (#28636) (@dependabot[bot])maintenance
  • Bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 (#28583) (@dependabot[bot])maintenance
  • Bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 (#28635) (@dependabot[bot])maintenance
  • Bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 (#28913) (@dependabot[bot])maintenance
  • Bump golang.org/x/crypto from 0.55.0 to 0.56.0 in the golang-x group (#29587) (@dependabot[bot])maintenance
  • Bump golang.org/x/net from 0.53.0 to 0.55.0 in /gitops-engine (#28540) (@dependabot[bot])maintenance
  • Bump golang.org/x/net from 0.56.0 to 0.57.0 (#28640) (@dependabot[bot])maintenance
  • Bump golang.org/x/net from 0.61.0 to 0.62.0 in the golang-x group (cherry-pick #30699 for 3.6) (#30746) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Bump golang.org/x/term from 0.44.0 to 0.45.0 (#28642) (@dependabot[bot])maintenance
  • Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#28513) (@dependabot[bot])maintenance
  • Bump google.golang.org/grpc from 1.81.1 to 1.82.0 (#28525) (@dependabot[bot])maintenance
  • Bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#28739) (@dependabot[bot])maintenance
  • Bump google.golang.org/grpc from 1.82.1 to 1.83.0 (#29020) (@dependabot[bot])maintenance
  • Bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#29340) (@dependabot[bot])maintenance
  • Bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#29461) (@dependabot[bot])maintenance
  • Bump google.golang.org/grpc from 1.83.2 to 1.84.0 (cherry-pick #29790 for 3.6) (#29914) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#28512) (@dependabot[bot])maintenance
  • Bump js-yaml from 3.14.1 to 4.2.0 in /ui (#28291) (@dependabot[bot])maintenance
  • Bump js-yaml from 3.14.1 to 5.2.0 in /ui (#28509) (@dependabot[bot])maintenance
  • Bump js-yaml from 4.3.0 to 4.3.1 in /ui (#29090) (@dependabot[bot])maintenance
  • Bump js-yaml from 4.3.0 to 5.2.2 in /ui (#28918) (@dependabot[bot])maintenance
  • Bump js-yaml from 4.3.1 to 5.4.1 in /ui (#29483) (@dependabot[bot])maintenance
  • Bump k8s client to 0.37.0 (#29597) (#29595) (@dudinea)maintenance
  • Bump library/ubuntu from f3d2860 to 53958ec in /test/container (#28370) (@dependabot[bot])maintenance
  • Bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#28696) (@dependabot[bot])maintenance
  • Bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#28884) (@dependabot[bot])maintenance
  • Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#29613) (@dependabot[bot])maintenance
  • Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#29078) (@dependabot[bot])maintenance
  • Bump renovatebot/github-action from 46.1.15 to 46.1.16 (#28373) (@dependabot[bot])maintenance
  • Bump renovatebot/github-action from 46.1.16 to 46.1.17 (#28474) (@dependabot[bot])maintenance
  • Bump renovatebot/github-action from 46.1.17 to 46.1.18 (#28581) (@dependabot[bot])maintenance
  • Bump renovatebot/github-action from 46.1.18 to 46.1.19 (#28697) (@dependabot[bot])maintenance
  • Bump renovatebot/github-action from 46.1.19 to 46.1.20 (#28808) (@dependabot[bot])maintenance
  • Bump renovatebot/github-action from 46.1.20 to 46.1.21 (#28915) (@dependabot[bot])maintenance
  • Bump rxjs from 6.6.7 to 7.8.2 in /ui (#28916) (@dependabot[bot])maintenance
  • Bump sigs.k8s.io/structured-merge-diff/v6 from 6.4.0 to 6.4.1 (#28604) (@dependabot[bot])maintenance
  • Bump sigs.k8s.io/structured-merge-diff/v6 from 6.4.1 to 6.4.2 (#28622) (@dependabot[bot])maintenance
  • Bump slack-go to v0.23.1 and golang.org/x/net to v0.53.0 (#28377) (@ayushi-work)maintenance
  • Bump softprops/action-gh-release from 3.0.0 to 3.0.1 (#28371) (@dependabot[bot])maintenance
  • Bump step-security/harden-runner from 2.19.4 to 2.20.0 (#28621) (@dependabot[bot])maintenance
  • Bump step-security/harden-runner from 2.19.4 to 2.20.0 (#28787) (@dependabot[bot])maintenance
  • Bump step-security/harden-runner from 2.20.0 to 2.20.1 (#29094) (@dependabot[bot])maintenance
  • Bump step-security/harden-runner from 2.20.1 to 2.21.0 (#29214) (@dependabot[bot])maintenance
  • Bump step-security/harden-runner from 2.21.0 to 2.21.1 (#29497) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 2 updates (#28639) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 2 updates (#29209) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 5 updates (#28514) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 5 updates (#28603) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 5 updates (#28710) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 5 updates (#29551) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#28537) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#28844) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#28952) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#28975) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29040) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29117) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29192) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29228) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29339) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29455) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29614) (@dependabot[bot])maintenance
  • Bump the aws-sdk-v2 group with 6 updates (#29704) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#28762) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#28843) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#28869) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#29021) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#29077) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#29093) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#29213) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#29338) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#29454) (@dependabot[bot])maintenance
  • Bump the codeql group with 4 updates (#29702) (@dependabot[bot])maintenance
  • Bump the golang-x group with 2 updates (#29210) (@dependabot[bot])maintenance
  • Bump the golang-x group with 2 updates (cherry-pick #30146 for 3.6) (#30739) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Bump the golang-x group with 3 updates (#29628) (@dependabot[bot])maintenance
  • Bump the golang-x group with 3 updates (#29705) (@dependabot[bot])maintenance
  • Bump the golang-x group with 3 updates (cherry-pick #30198 for 3.6) (#30742) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Bump the otel group with 2 updates (#29118) (@dependabot[bot])maintenance
  • Bump the otel group with 4 updates (#29091) (@dependabot[bot])maintenance
  • Bump the otel group with 6 updates (#29456) (@dependabot[bot])maintenance
  • Bump timezones-list from 3.0.1 to 3.1.0 in /ui (#29594) (@dependabot[bot])maintenance
  • Bump uuid from 8.3.2 to 14.0.1 in /ui (#28887) (@dependabot[bot])maintenance
  • Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#28742) (@dependabot[bot])maintenance
  • Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#28885) (@dependabot[bot])maintenance
  • Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#29039) (@dependabot[bot])maintenance
  • Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#29496) (@dependabot[bot])maintenance
  • Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#29703) (@dependabot[bot])maintenance
  • Update dependency dexidp/dex to v2.45.1 (#28850) (@argoproj-renovate[bot])maintenance
  • Update dependency dexidp/dex to v2.46.0 (cherry-pick #30065 for 3.6) (#30216) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Update dependency git-lfs/git-lfs to v3.8.0 (#29426) (@argoproj-renovate[bot])maintenance
  • Update dependency git-lfs/git-lfs to v3.8.1 (cherry-pick #30360 for 3.6) (#30751) (@dudinea)maintenance
  • Update dependency golang to v1.27.1 (#29490) (@argoproj-renovate[bot])maintenance
  • Update dependency helm/helm to v4.2.2 (#28457) (@argoproj-renovate[bot])maintenance
  • Update dependency helm/helm to v4.2.3 (#28851) (@argoproj-renovate[bot])maintenance
  • Update dependency helm/helm to v4.2.4 (#29187) (@argoproj-renovate[bot])maintenance
  • Update dependency helm/helm to v4.3.0 (#29648) (@argoproj-renovate[bot])maintenance
  • Update dependency helm/helm to v4.3.1 (release-3.6) (#30211) (@argoproj-renovate[bot])maintenance
  • Update dependency kubernetes-sigs/kustomize to v5.8.3 (release-3.6) (#30097) (@argoproj-renovate[bot])maintenance
  • Update dependency markdown to v3.10.3 (#28987) (@argoproj-renovate[bot])maintenance
  • Update dependency pygments to v2.21.0 (#29217) (@argoproj-renovate[bot])maintenance
  • Update dependency pymdown-extensions to v11 (#28386) (@argoproj-renovate[bot])maintenance
  • Update dependency pymdown-extensions to v11.0.1 (#28627) (@argoproj-renovate[bot])maintenance
  • Update dependency pymdown-extensions to v11.0.2 (#29329) (@argoproj-renovate[bot])maintenance
  • Update dependency pymdown-extensions to v12 (#29723) (@argoproj-renovate[bot])maintenance
  • Update docker.io/bitnamilegacy/kubectl docker tag to v1.33 (#28458) (@argoproj-renovate[bot])maintenance
  • Update docker.io/library/busybox docker digest to dc2d74b (#29008) (@argoproj-renovate[bot])maintenance
  • Update docker.io/library/golang docker tag to v1.27.1 (#29492) (@argoproj-renovate[bot])maintenance
  • Update docker.io/library/golang:1.26.4 docker digest to 8c5d338 (#28405) (@argoproj-renovate[bot])maintenance
  • Update docker.io/library/redis docker tag to v8.10.0 (#28991) (@argoproj-renovate[bot])maintenance
  • Update docker.io/library/redis docker tag to v8.10.1 (#29295) (@argoproj-renovate[bot])maintenance
  • Update docker.io/library/redis docker tag to v8.8.1 (#28896) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.11.0 (#29038) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.11.8 (#29050) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.13.1 (#29062) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.14.0 (#29067) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.14.12 (#29102) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.14.3 (#29085) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.14.4 (#29096) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.14.7 (#29099) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.15.0 (#29112) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.17.1 (#29113) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.17.5 (#29122) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.20.1 (#29127) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.22.0 (#29129) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.23.3 (#29133) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.24.0 (#29144) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.24.1 (#29147) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.24.2 (#29151) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.26.0 (#29154) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.27.0 (#29168) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.30.4 (#29176) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.32.2 (#29207) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.32.4 (#29223) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.32.6 (#29232) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.35.4 (#29271) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.37.1 (#29299) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.39.2 (#29327) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.4.5 (#28992) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.43.1 (#29356) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.46.4 (#29385) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.53.0 (#29478) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.56.1 (#29489) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.56.3 (#29491) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.57.1 (#29501) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.59.2 (#29515) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.61.1 (#29528) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.62.1 (#29539) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.64.1 (#29557) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.7.0 (#29002) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.7.1 (#29019) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.85.0 (#29709) (@argoproj-renovate[bot])maintenance
  • Update ghcr.io/renovatebot/renovate docker tag to v44.9.1 (#29034) (@argoproj-renovate[bot])maintenance
  • Update group golang (#29268) (@argoproj-renovate[bot])maintenance
  • Update group golang (master) (cherry-pick #30090 for 3.6) (#30130) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Update group golang to v1.26.5 (#28628) (@argoproj-renovate[bot])maintenance
  • Update group golang to v1.26.6 (#29186) (@argoproj-renovate[bot])maintenance
  • Update group golang to v1.27.3 (release-3.6) (#30304) (@argoproj-renovate[bot])maintenance
  • Update group node to v24.17.0 (#27924) (@argoproj-renovate[bot])maintenance
  • Update group renovate (#28988) (@argoproj-renovate[bot])maintenance
  • Update group renovate (#29115) (@argoproj-renovate[bot])maintenance
  • Update group renovate (#29333) (@argoproj-renovate[bot])maintenance
  • Update group renovate (#29452) (@argoproj-renovate[bot])maintenance
  • Update group renovate (#29585) (@argoproj-renovate[bot])maintenance
  • Update group renovate (#29700) (@argoproj-renovate[bot])maintenance
  • Update module github.com/golangci/golangci-lint/v2 to v2.12.2 (#28424) (@argoproj-renovate[bot])maintenance
  • Update module github.com/golangci/golangci-lint/v2 to v2.13.0 (#29277) (@argoproj-renovate[bot])maintenance
  • Update module github.com/golangci/golangci-lint/v2 to v2.13.2 (#29425) (@argoproj-renovate[bot])maintenance
  • Update module github.com/vektra/mockery/v3 to v3.7.2 (#28882) (@argoproj-renovate[bot])maintenance
  • Update module github.com/vektra/mockery/v3 to v3.7.3 (#29167) (@argoproj-renovate[bot])maintenance
  • Update module github.com/vektra/mockery/v3 to v3.8.0 (#29630) (@argoproj-renovate[bot])maintenance
  • Update redis (#29132) (@argoproj-renovate[bot])maintenance
  • Bump @babel/preset-env from 7.29.5 to 7.29.7 in /ui (#29547) (@dependabot[bot])maintenance
  • Bump @babel/preset-typescript from 7.28.5 to 7.29.7 in /ui (#29453) (@dependabot[bot])maintenance
  • Bump @testing-library/jest-dom from 6.9.1 to 7.0.1 in /ui (#29495) (@dependabot[bot])maintenance
  • Bump @types/uuid from 9.0.8 to 11.0.0 in /ui (#29208) (@dependabot[bot])maintenance
  • Bump copy-webpack-plugin from 12.0.2 to 14.0.0 in /ui (#29529) (@dependabot[bot])maintenance
  • Bump esbuild-loader from 4.4.3 to 4.5.0 in /ui (#29481) (@dependabot[bot])maintenance
  • Bump eslint-config-prettier from 9.1.2 to 10.1.8 in /ui (#28234) (@dependabot[bot])maintenance
  • Bump jest-environment-jsdom from 29.7.0 to 30.5.0 in /ui (#29530) (@dependabot[bot])maintenance
  • Bump jest-junit from 6.4.0 to 17.0.0 in /ui (#27652) (@dependabot[bot])maintenance
  • Bump postcss from 8.5.14 to 8.5.18 in /ui (#28919) (@dependabot[bot])maintenance
  • Bump postcss from 8.5.18 to 8.5.23 in /ui (#29036) (@dependabot[bot])maintenance
  • Bump prettier from 3.8.4 to 3.9.5 in /ui (#28805) (@pasha-codefresh)maintenance
  • Bump prettier from 3.9.5 to 3.9.6 in /ui (#27409) (@dependabot[bot])maintenance
  • Bump sass from 1.100.0 to 1.103.1 in /ui (#29337) (@dependabot[bot])maintenance
  • Bump ts-jest from 29.4.9 to 29.4.12 in /ui (#28950) (@dependabot[bot])maintenance
  • Bump uuid from 9.0.1 to 14.0.1 in /ui (#28658) (@dependabot[bot])maintenance
  • Bump webpack from 5.106.2 to 5.110.3 in /ui (#29612) (@dependabot[bot])maintenance
  • Bump webpack-cli from 5.1.4 to 7.2.3 in /ui (#29549) (@dependabot[bot])maintenance
  • Bump webpack-dev-server from 5.2.4 to 5.2.5 in /ui (#28329) (@dependabot[bot])maintenance
  • Bump webpack-dev-server from 5.2.5 to 5.2.6 in /ui (#28829) (@dependabot[bot])maintenance
  • Remove unused deps (#29114) (@blakepettersson)maintenance
  • Enable go 1.27 (#29377) (@blakepettersson)maintenance
  • Renovate self-bump weekly (#29561) (@crenshaw-dev)maintenance
  • Automate Dex bumps (#28612) (@crenshaw-dev)maintenance
  • Automate production binary bumps (#28433) (@crenshaw-dev)maintenance
  • Bump kubernetes versions in e2e matrix (#29596) (#29571) (@dudinea)maintenance
  • Dependabot groups for golang.org/x and codeql (#28651) (@crenshaw-dev)maintenance
  • Fix Renovate PR attribution (#28428) (@crenshaw-dev)maintenance
  • Group interdependent upgrades (#29275) (@crenshaw-dev)maintenance
  • Ignore node for dependabot (#28418) (@crenshaw-dev)maintenance
  • Only bump image if there's a new version (#28419) (@crenshaw-dev)maintenance
  • Pin issue-triage agent model to claude-sonnet-5 (#29502) (@nitishfy)maintenance
  • Use curl instead of wget for renovate (#28459) (@crenshaw-dev)maintenance
  • Use sonnet-4.5 for gh aw (#29634) (@reggie-k)maintenance
  • Add OpenTelemetry spans for CMP internal phases (#28365) (@toyamagu-2021)maintenance
  • Bump go-git dependency (cherry-pick #30013 for 3.6) (#30022) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Gh aw change to gpt-5-mini model (#29652) (@reggie-k)maintenance
  • Cache compiled Lua scripts across executions (#28278) (@crenshaw-dev)maintenance
  • Remove dupe type (#28617) (@crenshaw-dev)maintenance
  • Fix update-supported-version.sh script to handle k3s 1.37-rc3 tag (#29689) (@dudinea)maintenance
  • Fix Rules-of-React violations for React Compiler readiness (@jwinters01)maintenance
  • Fix additional Rules-of-React violations (@jwinters01)maintenance
  • Fix deprecation warnings post React-19 upgrade (#29183) (@jwinters01)maintenance
  • Fix lint errors surfaced by React Compiler ruleset (@jwinters01)maintenance
  • Pnpm 12 (#29619) (@blakepettersson)maintenance
  • Remove dead filteredGraph state (@choejwoo)maintenance
  • Resolve react-hooks deps from public npm registry (@jwinters01)maintenance
  • Use swagger-ui-dist instead of redoc (#29018) (@blakepettersson)maintenance
  • Remove accidentally committed test file (#28626) (@olivergondza)maintenance
  • Undo PR 28918 due to redoc dependency on older version (#28943) (@keithchong)maintenance
  • Update Redis to 8.6.4 (#28589) (@baurmatt)maintenance
  • Add logs with timing for cluster sync performance (#28707) (@agaudreault)maintenance
  • Add prometheus argocd version gauge (#25981) (@blakepettersson)maintenance
  • Adds 3.7 relase on the schedule (#29467) (@ppapapetrou76)maintenance
  • Adds a short message to health check contributors to update the upgra… (#29025) (@ppapapetrou76)maintenance
  • Apply linter to gitops-engine (#28859) (@agaudreault)maintenance
  • Bump version to 3.6.0 on release-3.6 branch (#30754) (@github-actions[bot])maintenance
  • Bump version to 3.6.0-rc1 on release-3.6 branch (#29730) (@github-actions[bot])maintenance
  • Bump version to 3.6.0-rc2 on release-3.6 branch (#30042) (@github-actions[bot])maintenance
  • Bump version to 3.6.0-rc3 on release-3.6 branch (#30219) (@github-actions[bot])maintenance
  • Bump version to 3.6.0-rc4 on release-3.6 branch (#30347) (@github-actions[bot])maintenance
  • Change the release pr title to pass the github action pr title check (#28939) (@ppapapetrou76)maintenance
  • Correct documenting comment on ApplicationConditionType format (#29084) (@tacf)maintenance
  • Do not update app object in indexer (#28705) (@agaudreault)maintenance
  • Fix broken test (#29057) (@ppapapetrou76)maintenance
  • Fix lint (#29506) (@kuci-JK)maintenance
  • Fix typos in code comments and documentation (#28682) (@magic-peach)maintenance
  • Fix typos in comments and two user-facing messages (#29510) (@MsfPablo)maintenance
  • Fix typos in sharding comments (#29263) (@MsfPablo)maintenance
  • Handle DeletedFinalStateUnknown from informer (#28321) (@agaudreault)maintenance
  • Initialize git lfs like debian does (#29435) (@ppapapetrou76)maintenance
  • K3s 1.37.0 ga (cherry-pick #29843 for 3.6) (#29848) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Move Docker image updates from Dependabot to Renovate (#28422) (@crenshaw-dev)maintenance
  • Propagate contexts (#28353) (@blakepettersson)maintenance
  • Remove dompurify (cherry-pick #30181 for 3.6) (#30183) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Rxjs retry when migration (#29475) (@pasha-codefresh)maintenance
  • Signal handling followups (#29226) (@blakepettersson)maintenance
  • Switch reconcile trigger log to info level for managed resource (#28456) (@agaudreault)maintenance
  • Sync maintainer files for membership Sep 2026 (#29544) (@crenshaw-dev)maintenance
  • Use kustomize version from tool-versions.sh (#28875) (@kuci-JK)maintenance
  • Use test contexts throughout (#28314) (@blakepettersson)maintenance
  • Support tagged releases for gitops-engine (#27740) (@rumstead)maintenance
  • Fix - make renovate update itself correctly, fix network failures (#28985) (@dudinea)maintenance
  • Make renovate manage Redis versions throughout the project (#28994) (#28993) (@dudinea)maintenance
  • Add github-agentics issue triage workflow (#28215) (@reggie-k)maintenance
  • Use gh aw copilot GitHub token (#28797) (@reggie-k)maintenance
  • Avoid duplicate Go cache restores (#28437) (@siddiksawani)maintenance
  • Harden gitops-engine tag step to use GITHUB_REF_NAME (#28706) (@RealFakeAccount)maintenance
  • Remove gh-aw-local target from codegen (#28830) (@nitishfy)maintenance
  • Upload unit and e2e coverage separately with Codecov flags (#28085) (@AdamSaleh)maintenance
  • Use GitHub token for installing gh aw to avoid rate limit (#28856) (@reggie-k)maintenance
  • Fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.6) (#30419) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Wait for the add handler before swapping the cache client (#30384) (cherry-pick #30400 for 3.6) (#30426) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Fix github's failure to show complete results of e2e test (#28727) (#28726) (@dudinea)maintenance
  • Accept connection reset by peer as valid mTLS rejection (#28367) (@toyamagu-2021)maintenance
  • Run TestLsRemote against a local repository (#30386) (cherry-pick #30399 for 3.6) (#30411) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Fix hydrator e2e tests failures when run with make test-e2e (#28579) (#28578) (@dudinea)maintenance
  • Fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.6) (#30414) (@argo-cd-cherry-pick-bot[bot])maintenance
  • Add tests to fetch git references (#28586) (@nitishfy)maintenance
  • Assert Changes value explicitly in UpdateRevisionForPaths test (#28984) (@Churi12)maintenance
708 lines3 security89 added211 fixed5 other400 maintenancetyped from the source notes

Full release notes ↗ · all Argo CD releases

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Report a mistake

context

Tools

Argo CD

Other Argo CD releases

How this was written

The change list is the project's own release notes, sorted into change types by fixed rules. The summary was written from the original by the model named above, checked by fixed publishing rules, and read by an editor after publication. See the methodology.

Back to the feed