Argo CD

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• e77e4b645cc1ad28b1af74931d8810c514fa75e7: fix(reposerver): honor depth of referenced source instead of primary source (cherry-pick #28339 for 3.4) (#28341) (@alexandresavicki)
• 63e67d5e7f502f85b69cd52d6d56e1123b087992: fix(ssa): do not run auth reconcile with SSA (cherry pick of #27624 and #27601 to 3.4) (#28265) (@Mangaal)
• 240390732e7b593a53a237c4f149426e7268f295: fix: auto-sync skipped when newer commit arrives during sync with manifest-generate-paths (#27875) (cherry-pick #28227 for 3.4) (#28331) (@argo-cd-cherry-pick-bot[bot])
• 2d18587a4c36d4676dd0514bc4a3c5e0cc8b2ed4: fix: deleted resource are incorrectly shown in UI (cherry-pick #28322 for 3.4) (#28337) (@argo-cd-cherry-pick-bot[bot])
• a82e158db8a56037d8e8b5085d188abd9fba12f0: fix: don't clobber non-ignored fields on "replace" (cherry-pick #27136 for 3.4) (#28507) (@argo-cd-cherry-pick-bot[bot])
• d4c8f1c3c724d4d71c1f4ddb6b255ab36d3bef4a: fix: fixes a regression of dex config env vars substituion - Cherry pick of #28369 in 3.4 (#28411) (@ppapapetrou76)

Dependency updates

• 8c7ece50a4dfd731d5e10bedf3a3e692808b3d23: chore(deps): bump golang.org/x/crypto to 0.53.0 (release-3.4) (#28375) (@nmirasch)
• a8f245b7a0a9b4b9ca8538038b521da29b5932f6: chore(deps): update Ubuntu base image to 26.04 LTS (3.4) (#28430) (@suii2210)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.4...v3.4.5

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 146184ea41fa545e0a084c82f05cfe5bd07a9ff9: fix(health): PromotionStrategy stuck Progressing after no-op re-hydration (#28124) (cherry-pick #28125 for 3.4) (#28135) (@argo-cd-cherry-pick-bot[bot])
• e515f51ab1ca500a165b49ca9ec9c402279b6768: fix(rbac): resolve RBAC regression for project-scoped resources in multi-namespace architecture (#25289) (#26573) (#28062) (@wanddynosios)
• 7f2fe9576c6b426f00b04abe6dea55cc9cf634c3: fix(ssd): regression causing diff to error on new objects (#27679) (cherry-pick #27703 for 3.4) (#28241) (@argo-cd-cherry-pick-bot[bot])
• 5199ea6cb74471e22b9c007b0c4598575bb37e44: fix: add a lock on clusterinformer (cherry-pick #28216 for 3.4) (#28312) (@blakepettersson)
• 7a64081225fe7e9688cd7a3d0ad0ff2bc62fde78: fix: exclude live status from normalization (cherry-pick #28201 for 3.4) (#28204) (@argo-cd-cherry-pick-bot[bot])
• 0b3436ffe67564506a49007970daa3d9f476856d: fix: fixes parsing of dex passwords with dollar sign (cherry pick of #28027 to 3.4) (#28197) (@ppapapetrou76)
• 9ccf66b8fc4500d90091075debed86dc218a3981: fix: resolve cross-generator Values templates in RenderGeneratorParams (#27827) (cherry-pick #27830 for 3.4) (#28128) (@argo-cd-cherry-pick-bot[bot])

Other work

• 14ad471bf6102535664cac3b43cb706904c72b35: Merge pull request #28162 from argoproj/cherry-pick-28158-to-release-3.4 (@dudinea)
• 0fd000b25fb94fbc2de25dd3c97417e44d28a629: Merge pull request #28164 from argoproj/cherry-pick-28155-to-release-3.4 (@dudinea)
• ff255193d14b0ab7ecf7bea48c9cfda3cc0de46a: chore(ci): bump codecov action to 7.0.0 to fix the GPG issue (cherry-pick #28159 for 3.4) (#28172) (@dudinea)
• e9ff0c571b905989d517ac377c4071b6b6180081: ci: bump goreleaser (cherry-pick #28033 for 3.4) (#28072) (@argo-cd-cherry-pick-bot[bot])
• 1c5e37da077808446895092764bd14312c53d76d: ci: use github release notes in goreleaser (cherry-pick #28048 for 3.4) (#28071) (@argo-cd-cherry-pick-bot[bot])
• 0c14cfb5117526dd35657e0fddd21c5c612664be: fix(manifest-generate-paths): Normalize repo before using type repo (#28113) (@fm1ck3y)
• c2003f447e49a183b75e3d94e7982c59c012bd5e: test(e2e): Add test for second Sync after initial for different resources/options (#28156) (#28155) (@dudinea)
• 9810fa2902e60e48df2acda2353f44b293d4203f: test(e2e): fix cleanup of CRDs for e2e tests (#28157) (#28158) (@dudinea)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.3...v3.4.4

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.12/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.12/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 47da18433587c202c8b57e47c34af86d37ee7b2b: fix(health): PromotionStrategy stuck Progressing after no-op re-hydration (#28124) (cherry-pick #28125 for 3.3) (#28136) (@argo-cd-cherry-pick-bot[bot])
• e385760aec1c6a5c8f736bcfd45e7259a41135ea: fix: add a lock on clusterinformer (cherry-pick #28216 for 3.3) (#28313) (@blakepettersson)
• 516314b16f45757606ed39c6d9ebd6bbbe10d8aa: fix: exclude live status from normalization (cherry-pick #28201 for 3.3) (#28203) (@argo-cd-cherry-pick-bot[bot])
• 3205f8b0dd1588ff636d9ec0db1b4336343df761: fix: fixes parsing of dex passwords with dollar sign (cherry pick of #28027 to 3.3 (#28198) (@ppapapetrou76)
• 703ad3f9520ffb5e83a261d06bdb24d6776720ef: fix: honor repo depth setting in gitSourceHasChanges and fetch functions (cherry-pick #27838 for 3.3) (#28065) (@alexandresavicki)

Other work

• c4c07e396ca4f85599b720331e4bfc6a8687b38e: Merge pull request #28161 from argoproj/cherry-pick-28158-to-release-3.3 (@dudinea)
• cdfc9a5d0e0838b0c3c0884adfa08c9b3dda2b79: Merge pull request #28166 from argoproj/cherry-pick-28155-to-release-3.3 (@dudinea)
• 6aecd33bd19a00c78f18c2d6a8cfa762419fe383: chore(ci): bump codecov action to 7.0.0 to fix the GPG issue (cherry-pick #28159 for 3.3) (#28173) (@dudinea)
• b9f2a3b6269adb25f8054241398884caecc0657f: test(e2e): Add test for second Sync after initial for different resources/options (#28156) (#28155) (@dudinea)
• fe3fea21ad00619438c2f0fa8117203f22bed784: test(e2e): fix cleanup of CRDs for e2e tests (#28157) (#28158) (@dudinea)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.11...v3.3.12

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.11/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.11/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• cd3b64dd8c250b61a8220ef07eabf47384635d15: fix(lint): unnecessary nesting (cherry-pick #27815 for 3.3) (#27818) (@argo-cd-cherry-pick-bot[bot])
• 82dd8ce2e39d1f254572f53527e91fa3703e854d: fix(ui): don't prefetch errors (#27877) (cherry-pick #27925 for 3.3) (#28023) (@argo-cd-cherry-pick-bot[bot])
• da10473981262fdb7693a0e06e104db72efd8c26: fix: nil-check (cherry-pick #28039 for 3.3) (#28041) (@argo-cd-cherry-pick-bot[bot])
• d5560679d12628243d5aeef9f85feb49adaa41e5: fix: prevent InvalidSpecError race in application controller startup (cherry-pick #27672 for 3.3) (#27844) (@argo-cd-cherry-pick-bot[bot])
• 21d55380342feb67f894fb800d100ac40460d778: fix: remove resourceVersion from ssd (#27406) (cherry-pick release-3.3) (#28016) (@blakepettersson)
• 120eb3126a5aa68efb178f67aa819ab799eac225: fix: truncate labels for deletion hook resources (cherry-pick #27542 for 3.3) (#27715) (@choejwoo)

Dependency updates

• 1cb5892bd8c209d5e6fe3fac2bb27ce62477854e: chore(deps): bump redoc/dompurify to v3.4.0 in /ui for fixing CVE-2026-41240(cherry-pick 3.3) (#27912) (@alkakumari016)

Other work

• 9e253030b62e7b8ae314a5a2d5c75ba8169bfabc: fix(gitops-engine): fix nil pointer dereference error in removeWebookMutation() (cherry-pick #27749 for 3.3) (#28032) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.10...v3.3.11

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• f435b0fd4c740fd49151b9cdf22263f4ca0c6ae8 fix(cli): return immediately from 'app wait' when app is already in desired state (#12211) (#27503) (#27713) (jheyduk)
• b39fe4fb1035e27d36b6d3afeaab8446418a017c fix(lint): unnecessary nesting (cherry-pick #27815 for 3.4) (#27817) (argo-cd-cherry-pick-bot[bot], Michael Crenshaw)
• 668f2c56a62bd03b597cf547b31afe3e058e2ceb fix(ui): don't prefetch errors (#27877) (cherry-pick #27925 for 3.4) (#28024) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
• b796979ce219c8d5de0f330a8e67baa92ea1c6e3 fix(ui): return full source for non-hydrator apps in Parameters tab (cherry-pick #26946 for 3.4) (#27964) (Gabriel Barreto, himeshp)
• 5d3f8a0b50b3507ae007e8bbb063b1f3fb2a6fff fix: honor repo depth setting in gitSourceHasChanges and fetch functions (cherry-pick #27838 for 3.4) (#28043) (argo-cd-cherry-pick-bot[bot], alexandresavicki, Cursor)
• 35ed877840f530d7868e524cdf27e203fbf3974a fix: nil-check (cherry-pick #28039 for 3.4) (#28040) (argo-cd-cherry-pick-bot[bot], Blake Pettersson, Soumya Ghosh Dastidar)
• b0f1553a61f61e0dac8f79ba9d0771274a2fc6c8 fix: prevent InvalidSpecError race in application controller startup (cherry-pick #27672 for 3.4) (#27845) (argo-cd-cherry-pick-bot[bot], Michele Baldessari)
• 4fa095050bb318b412519aecb1ac18f69aec4c23 fix: truncate labels for deletion hook resources (cherry-pick #27542 for 3.4) (#27714) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)

Dependency updates

• 0edd404f7f1996abeec3ac411e33a1449fc94664 chore(deps): bump redoc/dompurify to v3.4.0 in /ui for fixing CVE-2026-41240(cherry-pick 3.4) (#27913) (Alka Kumari)

Other work

• ce55c857b5e525f72c5c496d1bf69bc0d048edfa fix(gitops-engine): fix nil pointer dereference error in removeWebookMutation() (cherry-pick #27749 for 3.4) (#28031) (argo-cd-cherry-pick-bot[bot], Pierre Guinoiseau)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.2...v3.4.3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.12/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.12/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 2d1a0bb5507e8fc22b23d7608d56bc0586415b95: fix(lint): unnecessary nesting (cherry-pick #27815 for 3.2) (#27819) (@argo-cd-cherry-pick-bot[bot])
• 4caf2709419b4f172d5a7adbe95d20cb1d86e3bd: fix: export url validation function (#27816) (@crenshaw-dev)
• d6e96fcc00b74d9692301fd18a23d22bf0e802a5: fix: wrap lines toggle causes log lines to overflow container - Fixes [Issue #27586] (cherry-pick #27627 for 3.2) (#27668) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

• cff8c0320985278c1d2a85860eace168a71f1b04: chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (cherry-pick #27401 for 3.2) (#27735) (@argo-cd-cherry-pick-bot[bot])

Other work

• 3f7237b5baf57a4b77574e2b0c4c793a7010341a: Merge commit from fork (@pjiang-dev)
• c8df5ff7acc403adcee1256da5d87081cd52f0a6: Merge commit from fork (@blakepettersson)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.2.11...v3.2.12

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b15e9e3cc5a89f0024974243f1dc90cc75194702 fix: Revert "fix: avoid calling UpdateRevisionForPaths unnecessary (#25151)" (cherry-pick #27241 for 3.4) (#27251) (argo-cd-cherry-pick-bot[bot], Alexander Matyushentsev)
• 570ccbc5217f5231d0a843b1099667591432a605 fix: prevent panic on nil APIResource in permission validator (cherry-pick #26610 for 3.4) (#27752) (argo-cd-cherry-pick-bot[bot], Andy Lo-A-Foe)

Dependency updates

• 6eb621513ec513ab0a59b3b21e38e3874260707a chore(deps): bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (cherry-pick #27401 for 3.4) (#27734) (argo-cd-cherry-pick-bot[bot], dependabot[bot])

Other work

• 35ea43c537d6e8948e67f347317fc4f88b325122 Merge commit from fork (Blake Pettersson)
• bcb4298afc9fcff5f5d69f4e1db2d0a75983f42c Merge commit from fork (Peter Jiang)
• 4e715779c0d9ef5a0042843460062276ff72e53b chore: bump otel/sdk to 1.43.0 (release-3.4) (#27806) (Nitish Kumar)
• 6e227bad2b48620cfb1943828f973af8671139cf ci: pin images of setup-qemu-action, setup-buildx-action and goreleaser CLI version (cherry-pick #27060 for 3.4) (#27731) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)
• 87e9148320749693624d08e3d6fa2cc217c672a0 fix(gitops-engine): apply HideSecretData to server-side diff results for Secrets (cherry-pick #27598 for 3.4) (#27754) (argo-cd-cherry-pick-bot[bot], Peter Jiang, downfa11)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.1...v3.4.2