[public-glueops-renovatebot]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
argoproj/argo-cd	Kustomization	minor	v3.4.9 → v3.5.3	v3.5.6 (+2)

---

Release Notes

argoproj/argo-cd

v3.5.3

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• c198be7: fix(health): a KubeVirt VirtualMachine declared stopped is Healthy (cherry-pick #​29664 for 3.5) (#​29665) (@​argo-cd-cherry-pick-bot[bot])
• 4b3f69d: fix(health): report suspended FlinkDeployment as healthy (#​26818) (cherry-pick #​28995 for 3.5) (#​29525) (@​argo-cd-cherry-pick-bot[bot])
• dd2cb1a: fix(repository): clean repository on revision change (cherry-pick #​28771 for 3.5) (#​29486) (@​argo-cd-cherry-pick-bot[bot])
• 70b399c: fix(resource_customizations): Crossplane MRs should report Progressing (not Healthy) whilst provisioning [ISSUE: #​29381] (cherry-pick #​29382 for 3.5) (#​29520) (@​argo-cd-cherry-pick-bot[bot])
• be8b387: fix(sync): correctly set operationState values on retry (#​26530) (cherry-pick #​28778 for 3.5) (#​29431) (@​omkar619-dev)
• a5e5992: fix(ui): guard SSO redirect to stop 401 retry loop (cherry-pick #​28807 for 3.5) (#​29631) (@​argo-cd-cherry-pick-bot[bot])
• 0b0890e: fix(ui): use hydrateTo branch name when set (cherry-pick #​29562 for 3.5) (#​29564) (@​crenshaw-dev)
• 18f0566: fix: GRPCRoute health check ignores stale observedGeneration conditions (#​28086) (cherry-pick #​28087 for 3.5) (#​29517) (@​argo-cd-cherry-pick-bot[bot])
• 4d653a6: fix: handle GrafanaFolder negative-polarity condition (#​29395) (cherry-pick #​29397 for 3.5) (#​29524) (@​argo-cd-cherry-pick-bot[bot])
• ec58520: fix: recover AuthReconcile visitor panics (cherry-pick #​29440 for 3.5) (#​29531) (@​Karthik-Chowdary)

Full Changelog: argoproj/argo-cd@v3.5.2...v3.5.3

v3.5.2

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• f1f109c: fix(appset): restore ignoreApplicationDifferences after normalization (cherry-pick #​29070 for 3.5) (#​29195) (@​argo-cd-cherry-pick-bot[bot])
• a45dd38: fix(repository): resolve untyped helm source type in UpdateRevisionForPaths (cherry-pick #​28904 for 3.5) (#​29399) (@​argo-cd-cherry-pick-bot[bot])
• 417c675: fix(revert): auto-sync skipped when newer commit arrives during sync (cherry-pick #​28692 for 3.5) (#​29224) (@​rumstead)
• 961ee40: fix(ui): remove kind filter from appset page (#​29310) (#​29311) (cherry-pick 3.5) (#​29314) (@​crenshaw-dev)
• cc1f3ee: fix(ui): show operation state on applications list page (cherry-pick release-3.5) (#​29344) (@​antonu17)
• 5accee3: fix: don't degrade Cluster API Cluster health while Ready is False during provisioning (cherry-pick #​29237 for 3.5) (#​29273) (@​argo-cd-cherry-pick-bot[bot])
• 4d99c52: fix: recover from kubectl panic in AuthReconcile when SA is forbidden (cherry-pick #​28669 for 3.5) (#​29294) (@​alexymantha)

Dependency updates

• 8b9e270: chore(deps): update dependency dexidp/dex to v2.45.1 (#​29334) (@​nitishfy)

Other work

• e258ee2: chore: bump version to 3.5.2 on release-3.5 branch (#​29404) (@​github-actions[bot])
• a9d94d6: fix(notification-controller): deep-copy before mutating object from a shared cache (cherry-pick #​29350 for 3.5) (#​29354) (@​argo-cd-cherry-pick-bot[bot])
• cc1d7a2: fix(notification-controller): read appprojects from informer cache (#​28815) (cherry-pick release-3.5) (#​29345) (@​antonu17)

Full Changelog: argoproj/argo-cd@v3.5.1...v3.5.2

v3.5.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 33f3bc5: fix(appset): stop progressive sync reconciling in a tight loop (#​27577) (#​29139) (@​himeshp)
• d358e75: fix(appset): verify terminating Applications against the API server (#​29042) (#​29138) (@​himeshp)
• ecf3737: fix(controller): cherry-pick treat timeout.reconciliation=0 as disabled soft expiry (#​27683) (#​29007) (@​aali309)
• 978fa65: fix(controller): reuse server-side diff result when masking Secret data (#​27858) (#​29074) (@​1ovsss)
• f399c84: fix(controller): use diff cache when timeout.reconciliation is disabled (cherry-pick #​29073 for 3.5) (#​29158) (@​argo-cd-cherry-pick-bot[bot])
• 960bed7: fix(server): prevent SSD CLI secret mask spoofing (cherry-pick #​29089 for 3.5) (#​29130) (@​argo-cd-cherry-pick-bot[bot])
• 9f360f4: fix(ssd): hide secret in last-applied-configuration annotation (#​28989) (#​29052) (@​pjiang-dev)

Other work

• 109ca7c: chore: bump version to 3.5.1 on release-3.5 branch (#​29165) (@​github-actions[bot])
• b44fbbc: fix(manifest-generate-paths): Consistent gen manifest cache key (#​28074 and #​29037) (#​29049) (@​agaudreault)

Full Changelog: argoproj/argo-cd@v3.5.0...v3.5.1

v3.5.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• be19446: feat(Jitter): Add Configurable Jitter for Webhook-Triggered application Refreshes (#​25433) (@​adityaraj178)
• 5b30739: feat(appset): add concurrency when managing applications (#​26642) (@​rumstead)
• 29fd8db: feat(appset): filtering repos by archived status #​20736 (#​21505) (@​prune998)
• 57942ce: feat(cli): Add support for Source Integrity configuration (#​26997) (@​olivergondza)
• 3cc6ba7: feat(cli): add --app-namespace flag to missing argocd app subcommands (#​27942) (@​Mangaal)
• 0e729cc: feat(cli): add appset-namespace for appset command (#​27022) (@​Mangaal)
• 744983b: feat(health): Add healthcheck for gardener "Shoot" resources (#​25750) (@​Sven1410)
• 6cc786d: feat(health): add GatewayClass health check (#​26591) (@​dnfwlq8054)
• eabd4d6: feat(health): add pause and unpause actions to psmdb resource (#​27616) (@​KyriosGN0)
• daadf86: feat(health): additional promoter.argoproj.io health checks (#​27170) (@​crenshaw-dev)
• 4b69a7f: feat(health): finalizer messages for Promoter checks (#​27478) (@​crenshaw-dev)
• 289a4c0: feat(health): support BackendTLSPolicy.gateway.networking.k8s.io (#​27385) (@​snorwin)
• 4cdc650: feat(helm): support wildcard glob patterns for valueFiles (#​26768) (@​nitishfy)
• f7a7deb: feat(hydrator): dynamically manage README template from argocd-cm ConfigMap [updated] (#​19067) (#​24309) (@​gyu-young-park)
• 86936e2: feat(hydrator): make manifest hydration queue concurrency configurable (#​27926) (#​27948) (@​GuruduGanesh)
• 2308e17: feat(hydrator): opt-in source integrity verification for dry sources (Alpha) (#​19302) (#​28084) (@​mladjan-gadzic)
• bf1591d: feat(hydrator): support syncSource repoURL for separate destination repo (#​27011) (@​boostrack)
• 41b6fee: feat(impersonation): allow to disable strict enforcement (#​27084) (cherry-pick #​27573 for 3.5) (#​28595) (@​argo-cd-cherry-pick-bot[bot])
• 0c0140c: feat(metrics): add parallelism limit repo server (#​27911) (@​pjiang-dev)
• 7d2eb77: feat(renovate): clean up config and remove github app (#​27738) (@​rumstead)
• 153ec67: feat(resource_customizations): add health checks for VictoriaMetrics (#​27451) (@​megative)
• 6b84ea9: feat(server): drop objects from non-allowed namespaces before they enter the cache. (#​28018) (@​christianh814)
• 224b75a: feat(server): use typed Argo CD EventList for event-listing APIs (#​25767) (#​26322) (@​chansuke)
• 64a0417: feat(ui): Add AppSet to Application Resource Tree (#​26601) (@​pjiang-dev)
• b035a77: feat(ui): ApplicationSet Preview Apps tab in UI (#​27799) (@​pjiang-dev)
• 566c172: feat(ui): add GitOps Promoter resource icon (#​26894) (@​crenshaw-dev)
• 0dd8874: feat(ui): add nauth.io resource icon (#​28226) (@​choufraise)
• f16d08a: feat(ui): add repo url as filter in home page (#​26670) (#​27418) (@​adityaraj178)
• 91e7664: feat(ui): per-application notice banner and info icon (#​14405) (#​27719) (@​gdsoumya)
• 1b405ce: feat(ui): search filter by target revision (#​24038) (@​choejwoo)
• 706a037: feat(ui): support creating multi-source applications in New App panel [CONTINUED..] (#​27095) (@​aali309)
• 2fcf104: feat(ui): support spec.sourceHydrator.drySource.repoURL (@​crenshaw-dev)
• 74d1fe0: feat(ui): use toggle-auto-sync resource action in app details page (#​21564) (#​27226) (@​shiiyan)
• db7d672: feat(webhooks): add webhook support for GHCR (#​26462) (@​nitishfy)
• 6d92e17: feat: Add ProvideClusterInfo and Config fields to ExecProviderConfig (#​24282) (#​27976) (@​mikeshng)
• 022f935: feat: Add basic support for git tag path prefixes (#​27290) (@​k4r1)
• aad3422: feat: Add suspend/resume actions for MariaDB (#​27675) (#​27674) (@​mgross2)
• 586430c: feat: Migrate from Helm 3 to Helm 4 (#​28076) (@​reggie-k)
• c61c1dc: feat: Render Helm ValuesObject as YAML in log output instead of binary (#​18342) (#​27649) (@​subhramit)
• 9a19735: feat: Support Azure Service Principal authentication for Azure DevOps repositories (#​25324) (@​allanyung)
• 97082e8: feat: add Gateway API support to network view (#​26188) (@​tete17)
• 603c900: feat: add action to delete recyclable Numaflow pipelines (#​25900) (@​dpadhiar)
• de94161: feat: add action to restart StrimziPodSet (#​27266) (@​KyriosGN0)
• a2b91ce: feat: add depth option to ui (#​26618) (@​blakepettersson)
• 1dc2ad0: feat: add health check for karpenter.sh/NodeClaim (#​26876) (@​Navneet072300)
• 611fcb0: feat: add sync overrun option to sync windows (#​25361) (#​25510) (@​puskunalis)
• 48f18e2: feat: add toggle-auto-sync resource action for Application (#​21564) (#​26477) (@​vikasrao23)
• 2df5f75: feat: adds mTLS support in repo-server (#​26715) (@​ppapapetrou76)
• 4d02fc2: feat: expose Appset UI and fix pie chart summary (#​26666) (@​pjiang-dev)
• a889f46: feat: make appset proxy-url param a native flag (#​27788) (@​ppapapetrou76)
• ad310c2: feat: replace error message in webhook handler with metrics (#​27215) (@​alexmt)
• 01187d1: feat: support Azure AD groups claims overflow via Microsoft Graph API (#​27397) (@​gravufo)
• f71239c: feat: support destinationServiceAccounts in global projects (#​23059) (@​enneitex)
• f460a3c: feat: surface root cause in sync failure message and cache discovery errors (#​27750) (@​ppapapetrou76)
• 3eebbcb: feat: use impersonation for server operations (logs, delete, etc) #​22996 (#​26898) (@​alexymantha)

Bug fixes

• b982144: Revert "fix: prevent automatic refreshes from informer resync and status updates" (#​27562) (@​agaudreault)
• c5d1c91: fix(UI): show RollingSync step clearly when labels match no step (#​26877) (@​aali309)
• c52bf66: fix(appcontroller): application controller in core mode fails to sync when server.secretkey is missing (#​26793) (@​anandf)
• e81969f: fix(applicationset): include repo URL in git file generator errors (#​28075) (@​morning-verlu)
• e4fe7f6: fix(appset): don't release finalizer while children still terminate (cherry-pick #​28999 for 3.5) (#​29006) (@​argo-cd-cherry-pick-bot[bot])
• 06fae9d: fix(appset): fall back to create when patch returns NotFound (#​17312) (cherry-pick #​28645 for 3.5) (#​28716) (@​argo-cd-cherry-pick-bot[bot])
• 45a84df: fix(ci): add .gitkeep to images dir (#​26892) (@​blakepettersson)
• 4c42071: fix(ci): openssf scorecard doesn't allow global vars (#​27203) (@​crenshaw-dev)
• 36f4ff7: fix(ci): pin goreman version used in ci-build.yaml (#​27062) (#​27061) (@​dudinea)
• 25b3037: fix(ci): pnpm sbom generation (#​27337) (#​27339) (@​crenshaw-dev)
• 99c51df: fix(ci): renovatebot action uses floating image tag (#​27023) (#​27024) (@​dudinea)
• fb82b16: fix(ci): run yarn install with --frozen-lockfile (#​27098) (#​27099) (@​dudinea)
• b403f5c: fix(cli): hide unsupported --tls-server-name kubectl REST flag (#​27694) (#​27711) (@​SAY-5)
• 60b878d: fix(cli): hide unsupported kubectl REST flags (#​25875) (#​25977) (@​HyejunKoo)
• 21fe1fb: fix(cli): honor --kube-context when creating core-mode REST config (#​12883) (#​27661) (@​ystkfujii)
• 52f7b3b: fix(cli): print clear timeout message when argocd app wait times out (#​28274) (@​pncloud)
• f48091a: fix(cli): return immediately from 'app wait' when app is already in desired state (#​12211) (#​27503) (@​jheyduk)
• 6256abf: fix(cli): uses DrySource revision for app diff/manifests with sourceHydrator (#​23817) (#​24670) (@​adityaraj178)
• c3c12c1: fix(commitserver): Static analysis fixes (#​27085) (@​olivergondza)
• 5a20f9b: fix(controller): gracefully handle k8s resource size limit for applications (#​27802) (@​nitishfy)
• 32f23a4: fix(controller): reduce secret deepcopies and deserialization (#​27049) (@​rumstead)
• 4051511: fix(controller): replace removed kubectl PodRequestsAndLimits (#​27895) (@​mfacenet)
• 5ec0603: fix(controller): requeue source hydration on periodic refresh timeout (#​27009) (@​boostrack)
• a62624a: fix(diff): don't drop manager-owned descendant fields when filtering webhook mutations (cherry-pick #​28819 for 3.5) (#​28895) (@​argo-cd-cherry-pick-bot[bot])
• e960635: fix(docs): Fix formatting and clarity about requestedScopes in Keycloak integration docs (#​27019) (@​todaywasawesome)
• d449294: fix(docs): Fix manifest path in Source Hydrator docs (#​27123) (@​olivergondza)
• 2f48cfb: fix(docs): revert bogus 3.3-3.4 upgrade guide changes in #​26322 (@​dudinea)
• c2044db: fix(health): PromotionStrategy stuck Progressing after no-op re-hydration (#​28124) (#​28125) (@​crenshaw-dev)
• 9c67c89: fix(health): add missing HPA degraded states for metric failures (#​26274) (@​rickbrouwer)
• 0b42a6d: fix(helm): pass registry passwords through stdin (Cherry-Pick) (#​28834) (@​nitishfy)
• ae10c0c: fix(hook): Fixed hook code issues that caused stuck applications on "Deleting" state (Issues #​18355 and #​17191) (#​26724) (@​nikos445)
• 4d2b6fa: fix(hydrator): align dry source validation cache keys with hydrator (#​27182) (@​agaudreault)
• 8c29202: fix(hydrator): fix race condition in status update with hydrate annotation (#​27183) (@​agaudreault)
• f298f45: fix(hydrator): preserve all source type fields in GetDrySource() (#​27189) (@​agaudreault)
• f73e136: fix(lint): unnecessary nesting (#​27815) (@​crenshaw-dev)
• 6a0457a: fix(makefile): Run goals with bind mounts on SELinux enabled host (build-ui,build-docs,serve-docs) (#​28003) (@​olivergondza)
• 7fa7d82: fix(normalizers): include resource context in failed normalization log (#​27769) (@​rafaelmfried)
• d0810e3: fix(oidc_userinfo): allow userInfo URL to be customized (#​27720) (@​the-technat)
• 87d79f9: fix(performance): add cache support for ResolveRevision to reduce Git operations (#​27193) (@​agaudreault)
• 5c1b930: fix(progressivesync): check if error == notfound (cherry-pick #​28663 for 3.5) (#​28670) (@​argo-cd-cherry-pick-bot[bot])
• 4f47dd0: fix(rbac): resolve RBAC regression for project-scoped resources in multi-namespace architecture (#​25289) (#​26573) (@​tcfwbper)
• 3b60b5e: fix(reposerver): honor depth of referenced source instead of primary source (cherry-pick #​28339 for 3.5) (#​28340) (@​alexandresavicki)
• f397bf6: fix(server): Avoid error when attempting a second delete operation (#​27495) (@​thomastaylor312)
• 382c507: fix(server): Cache glob patterns to improve RBAC evaluation performance (#​25759) (@​Sinhyeok)
• 4259f46: fix(server): Ensure OIDC config is refreshed at server restart (#​26913) (@​OpenGuidou)
• 91d83d3: fix(server): fix find container logic for terminal (#​26858) (@​linghaoSu)
• d6b2be8: fix(server): make server.glob.cache.size optional (#​28242) (#​28243) (@​crenshaw-dev)
• 1dd9075: fix(settings): only trigger reload for app.kubernetes.io/part-of=argocd secrets (#​27213) (@​EronWright)
• 212f51d: fix(sharding): fix log format verb and document intentional shard-0 fallback (#​27222) (@​nitishfy)
• 8feb146: fix(ssa): do not run auth reconcile with SSA (#​26175) (#​27601) (@​agaudreault)
• 134b428: fix(ssd): regression causing diff to error on new objects (#​27679) (#​27703) (@​agaudreault)
• 63a009e: fix(test): make fail message better for TestAuthReconcileWithMissingNamespace (#​26856) (@​cjcocokrisp)
• abf7311: fix(ui): Application Summary crashes on load for non-hydrator apps (#​28112) (@​agaudreault)
• b4af746: fix(ui): ApplicationSet detail view for non-default namespace (#​27928) (#​27931) (@​AsifAd)
• 25df43d: fix(ui): Improve message on self-healing disabling panel (#​26977) (#​26978) (@​bebosudo)
• 30efe53: fix(ui): OCI revision metadata never renders due to conflicting guard clause (#​26948) ([#​27

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.