[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
quay.io/argoproj/argocd	Kustomization	major	v2.14.20 → v3.6.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

argoproj/argo-cd (quay.io/argoproj/argocd)

v3.6.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 94037c4: fix(ui): keep the sidebar layout in sync after toggling it (cherry-pick #​30762 for 3.6) (#​30771) (@​shimagrawal)
• abfc761: fix(ui): stop webpack minifying index.html so --rootpath/--basehref work (#​30763) (cherry-pick #​30767 for 3.6) (#​30768) (@​argo-cd-cherry-pick-bot[bot])

Other work

• c7c41d3: chore: bump version to 3.6.1 on release-3.6 branch (#​30769) (@​github-actions[bot])

Full Changelog: argoproj/argo-cd@v3.6.0...v3.6.1

v3.6.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• bac4616: feat(actions): add hibernate/rehydrate actions for CNPG Cluster (#​28478) (@​purisev)
• 0df1a4b: feat(appset): Add progressive sync metrics for AppSet (#​29202) (@​ranakan19)
• ad23d3a: feat(appset): Adding annotations on apps to force reconciliation before proceeding with progressive sync (#​27467) (@​ranakan19)
• 94564eb: feat(appset): add metrics for count of app refreshes triggered by appset during progressive sync (#​29244) (@​ranakan19)
• 9ef034e: feat(appset): expose workqueue rate limiter flags on applicationset-controller (#​28286) (@​om7057)
• 5899f89: feat(appset): surface progressive sync scenario into condition as reasons and messages (#​27820) (@​ranakan19)
• 4e8ea39: feat(ci): enable Zizmor to enforce secure config (#​27304) (@​crenshaw-dev)
• ec10f2e: feat(cli): optionally exclude status field when using argocd admin export command (#​29219) (@​nitishfy)
• 5c3637d: feat(controller): allow metrics label/condition flags via argocd-cmd-params-cm (#​28287) (@​edgrz)
• 5f8562e: feat(dex): Configure Dex TLS Cipher Suites and Curve Preferences (cherry-pick #​29658 for 3.6) (#​30217) (@​argo-cd-cherry-pick-bot[bot])
• d94bcb1: feat(dex): Configure TLS Minversion for Dex web (#​28712) (@​akhilnittala)
• 465d43b: feat(dex): Making Dex storage type and config configurable from argocd-cm configmap (#​28624) (@​akhilnittala)
• 2e2f4e4: feat(health): Implement kyverno health checks (#​27354) (@​sandert-k8s)
• 034ab61: feat(health): add built-in health check for TLSRoute (#​26596) (@​dnfwlq8054)
• 49aa0ea: feat(health): add health check for AWS ACK resources (#​29016) (@​philljie)
• e1145c6: feat(health): add health check for CloudNativePG Backup (#​28468) (@​yugstar)
• 643de0b: feat(health): add health check for CloudNativePG Database CRD (#​29511) (@​Matthiator)
• ff00ee7: feat(health): add health check for Kro resources (#​28743) (@​philljie)
• 3825b96: feat(health): add health check for MedusaBackupJob (issue #​28009) (#​28008) (@​mgross2)
• 309594b: feat(health): add health check for MedusaTask (issue #​28007) (#​28006) (@​mgross2)
• 6858a80: feat(health): add health check for Prometheus Operator Alertmanager (#​28446) (@​yugstar)
• 2338867: feat(health): add health check for Prometheus Operator ThanosRuler (#​28463) (@​yugstar)
• 831d77b: feat(health): add health check for cert-manager CertificateRequest (#​28465) (@​yugstar)
• dec470a: feat(health): add health check for cert-manager trust-manager Bundle (#​28615) (@​yugstar)
• fdf6751: feat(health): add health check for flink.apache.org/FlinkSessionJob (#​26626) (@​sivchari)
• 21ac508: feat(health): add health checks for Tekton PipelineRun and TaskRun (#​28467) (@​yugstar)
• 180061c: feat(health): add health checks for Velero Backup, Restore, and Schedule (#​28464) (@​yugstar)
• 5708801: feat(health): add health checks for cert-manager ACME Order and Challenge (#​28466) (@​yugstar)
• 291bfab: feat(health): enable a Pipeline labeled 'recyclable-expired' to be deleted (#​28532) (@​juliev0)
• 463f39a: feat(health): support ListenerSet.gateway.networking.k8s.io (#​28388) (@​root30)
• ffe66ff: feat(health): support custom deletion messages (#​27595) (#​27596) (@​crenshaw-dev)
• 5e8ed63: feat(health): support various policies _.microgateway.airlock.com (#​28268) (@​root30)
• 961bd43: feat(hydrator): add metrics to app info (#​29512) (#​29514) (@​crenshaw-dev)
• 2d71dc6: feat(hydrator): sign hydrated commits (Alpha) (#​28239) (#​28271) (@​mladjan-gadzic)
• c2df91b: feat(impersonation): allow to disable strict enforcement (#​27084) (#​27573) (@​agaudreault)
• e2b719a: feat(otel): add spans with configurable sampling (#​28396) (@​blakepettersson)
• b2e6d1d: feat(perf): configurable serialization and compression for cached manifests (#​26897) (#​28600) (@​adityaraj178)
• e5eb504: feat(perf): count apps per cluster in a single pass (#​29570) (@​rumstead)
• 4c36558: feat(perf): drop two redundant application copies from the refresh path (#​29581) (@​rumstead)
• 37273e3: feat(perf): partial json unmarshalling (#​29378) (@​blakepettersson)
• 0f901d1: feat(perf): resolve the destination server without copying the cluster (#​29573) (@​rumstead)
• 0c2545d: feat(perf): reuse matrix child params when the generator is unchanged (#​29582) (@​rumstead)
• 54a740e: feat(resource_customizations): support ignored status for victoriametrics healthcheck (#​29351) (@​AndrewChubatiuk)
• 4abcbcf: feat(server): Add support for redirect to selected Dex connector (Alpha) (#​24221) (@​antonu17)
• e4470c5: feat(server): add configHash field to Cluster (#​25311) (#​27657) (@​matmil-dev)
• c2e39d8: feat(server): log username on login attempts (cherry-pick #​29841 for 3.6) (#​29859) (@​argo-cd-cherry-pick-bot[bot])
• fc848eb: feat(server): set X-Robots-Tag to prevent indexing of the UI (#​28359) (@​yugstar)
• 0141bf0: feat(tls): Make TLS Curve prefereneces configurable while setting TLS options for repo-server and server. (#​28846) (@​akhilnittala)
• ba47c6b: feat(ui): Implement virtual scrolling for Apps list/tiles view when all is selected (#​29542) (@​aali309)
• bf984ea: feat(ui): Lazy loading (#​29087) (@​jwinters01)
• ac01194: feat(ui): add regex search toggle to application(sets) list (#​27857) (#​27889) (@​rickbrouwer)
• 8073201: feat(ui): add resources explorer view (#​28098) (@​agaudreault)
• 5b4b5de: feat(ui): add search bar and pagination to settings pages (#​28305) (@​agaudreault)
• e2a605e: feat(ui): add server-side name filter to applications list and watch (#​29106) (#​29242) (@​rickbrouwer)
• f495ca5: feat(ui): advanced settings view (#​28383) (@​agaudreault)
• 4fa944e: feat(ui): enable React Compiler in the build (@​jwinters01)
• 1433359: feat(ui): show last scheduled and successful times for CronJob in summary panel (cherry-pick #​30690 for 3.6) (#​30748) (@​dudinea)
• 9cf8d7c: feat(ui): sidebar anchors (#​28527) (@​blakepettersson)
• 91f7adc: feat(ui): use anchors instead of divs in app/appset tiles and tablerows (#​28005) (@​blakepettersson)
• 73bf020: feat(webhook): Add manifest-generate-paths annotation support for BitBucket Server (#​27552) (@​adityaraj178)
• ca3139e: feat(webhook): add webhook support for harbor (#​27810) (#​27884) (@​adityaraj178)
• 7bdadbf: feat(webhooks): add webhook support for DockerHub (#​28022) (@​nitishfy)
• 79b0815: feat: Add deprecation warning when using --signature-keys (#​28941) (@​kuci-JK)
• b5d698a: feat: Add health check for pulumi.com/Stack (#​28534) (@​guineveresaenger)
• 0703fca: feat: Add health check resource customizations for Envoy Gateway Extension CRDs (#​27291) (@​obliadp)
• 34427a6: feat: Add reporting component to events list (#​25684) (#​27678) (@​Suven-p)
• 816fcd0: feat: Allow pod healthcheck to ignore restart policy via annotation (#​15317) (Alpha) (#​28249) (@​jskrill)
• 48f9461: feat: Default to SSD with SSA and remove SMD (#​29103) (@​pjiang-dev)
• 43637e4: feat: Persist and reuse client certificates if they were using in argocd login call (cherry-pick #​29718 for 3.6) (#​29781) (@​argo-cd-cherry-pick-bot[bot])
• 35238e3: feat: Replace SIGNATURE-KEYS with SOURCE-INTEGRITY in proj list (#​28920) (@​kuci-JK)
• 7a80e4c: feat: accept repository-style Azure keys in repo-creds (#​29414) (#​29415) (@​SHINMH)
• 1828831: feat: add tpl function to ApplicationSet go-templating (#​16302) (#​26614) (@​twobiers)
• 58d427f: feat: add a button to clear logs in the pod logs viewer (#​27149) (@​gcadoret)
• eb15eb4: feat: add bundled health check for KServe LLMInferenceService (#​29599) (#​29620) (@​sarfarazgit)
• dcdf8e4: feat: add clear all button to ApplicationSet filters (#​28593) (@​choejwoo)
• 619c642: feat: add configurable SSO login button text via ui.loginButtonText (#​28254) (@​NotKiwy)
• bcb771e: feat: add oci generator for applicationsets (#​26121) (@​robinlieb)
• 68b8af2: feat: add option to disable Swagger UI endpoint (#​28717) (@​smahadik-27)
• 79e1229: feat: add which resources caused the app health to change (#​28455) (@​agaudreault)
• e8e5ba2: feat: adds a server-proxy-url flag in cluster add command (#​28134) (@​ppapapetrou76)
• bcf1822: feat: allow optionally setting a prefix for redis keys (closes #​12978) (#​26169) (@​healthy-pod)
• 7cfc6cf: feat: allow to create Jobs from CronJobs with OwnerReferencesPermissionEnforcement admission (#​26009) (@​sathieu)
• 0984033: feat: support REDIS_SENTINEL and REDIS_SENTINELMASTER env vars (#​28391) (@​suii2210)
• 127dbe7: feat: support filtering out managed resources using label selector (#​29423) (@​alexmt)
• 9e9c2f1: feat: support ignore-differences annotation on resources (#​29616) (@​ranakan19)
• 7d05a39: feat: support separate RBAC permission for application rollback (#​28924) (@​ppapapetrou76)

Bug fixes

• 545bcb5: fix(SyncWindow): rename SyncWindow to InlineSyncWindow (#​29152) (@​adityaraj178)
• dcf0349: fix(UI): display sync option dropdowns on separate lines (#​28438) (@​adityaraj178)
• 99f4efc: fix(actions): list Rollout actions when the Rollout has no status (#​30291) (cherry-pick #​30331 for 3.6) (#​30652) (@​argo-cd-cherry-pick-bot[bot])
• d42eb20: fix(app): ensure deletion message is printed only for text output fomat (cherry-pick #​30600 for 3.6) (#​30618) (@​argo-cd-cherry-pick-bot[bot])
• 20ad5f9: fix(application): use server-side timeout query parameter via transport wrapper (#​28828) (#​28977) (@​luwangVMW)
• 3bc9cb6: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #​30448 for 3.6) (#​30481) (@​argo-cd-cherry-pick-bot[bot])
• 9bb3312: fix(appset): don't release finalizer while children still terminate (#​28999) (@​blakepettersson)
• 777f913: fix(appset): fail reverse deletion when a stale cache entry cannot be evicted (#​29042) (#​29140) (@​himeshp)
• fea95e6: fix(appset): fall back to create when patch returns NotFound (#​17312) (#​28645) (@​rickbrouwer)
• a619eb8: fix(appset): make ParametersGenerated condition message consistent (#​30405) (cherry-pick #​30438 for 3.6) (#​30577) (@​argo-cd-cherry-pick-bot[bot])
• d1a941e: fix(appset): refresh GitLab pull request generators configured with the project path (#​13766) (cherry-pick #​30578 for 3.6) (#​30623) (@​argo-cd-cherry-pick-bot[bot])
• a822683: fix(appset): restore ignoreApplicationDifferences after normalization (#​29070) (@​pjiang-dev)
• 3be2987: fix(appset): stop progressive sync reconciling in a tight loop (#​27577) (#​29044) (@​himeshp)
• 4891d4f: fix(appset): throw error when generated apps have empty name (#​28833) (@​nitishfy)
• 29faea2: fix(appset): verify terminating Applications against the API server (#​29042) (#​29043) (@​himeshp)
• 81cd93e: fix(chore): bump argo-ui for React 19 toast compatibility (#​28874) (@​choejwoo)
• 75bbd2a: fix(ci): authenticate gitops-engine tag push in release workflow (cherry-pick #​29744 for 3.6) (#​29755) (@​argo-cd-cherry-pick-bot[bot])
• 73661b8: fix(ci): exclude generated workflow from dependabot (#​28774) (@​crenshaw-dev)
• 7602290: fix(ci): expand image tag in staging deploy commit message (#​28773) (@​crenshaw-dev)
• 955378d: fix(ci): explicitly check out base repo and default branch for cherry-pick job (#​28413) (@​blakepettersson)
• 8268285: fix(ci): fix CI breakage: remove dependabot's changes to an agentic workflow compiled file (#​28772) (@​dudinea)
• 1af3199: fix(ci): fix readthedocs build by removing an invalid link (#​28449) (#​28450) (@​dudinea)
• 541db75: fix(ci): gitkeep so go builds work (#​28461) (@​crenshaw-dev)
• bef2051: fix(ci): regenerate manifests in Renovate helm post-upgrade tasks (#​29297) (@​crenshaw-dev)
• 2df94ae: fix(ci): remove unneeded and misnamed ui/dist/app/gitkeep (#​28447) (@​dudinea)
• ebcbc95: fix(ci): strip v prefix for helm and git-lfs renovate checksum tasks (#​29287) (@​crenshaw-dev)
• 9ae6085: fix(ci): use curl in kustomize checksum helper so Renovate can refresh checksums (cherry-pick #​29938 for 3.6) (#​30102) (@​argo-cd-cherry-pick-bot[bot])
• 780d540: fix(cli): accept write-repositories in 'argocd admin settings rbac can' (#​30457) (cherry-pick #​30458 for 3.6) (#​30550) (@​argo-cd-cherry-pick-bot[bot])
• 7b445c1: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #​29642 for 3.6) (#​30498) (@​argo-cd-cherry-pick-bot[bot])
• 67c4a12: fix(cli): send --header values when refreshing an expired auth token (#​30061) (#​30511) (@​nitishfy)
• bb33bb0: fix(cli): skip stale destinations in cluster stats (#​21808) (#​28786) (@​AkashKumar7902)
• 752958a: fix(cmp): clean up tgz stream temporary directories (#​29148) (cherry-pick #​29156 for 3.6) (#​29772) (@​argo-cd-cherry-pick-bot[bot])
• e76a5d8: fix(controller): allow terminating an operation blocked by a sync window (#​26395) (cherry-pick #​30267 for 3.6) (#​30505) (@​argo-cd-cherry-pick-bot[bot])
• adbc3dc: fix(controller): confirm project references before blocking deletion (cherry-pick #​29737 for 3.6) (#​29743) (@​argo-cd-cherry-pick-bot[bot])
• 5f4e24e: fix(controller): correct metrics flag help names. (#​28358) (@​siddiksawani)
• 28334d1: fix(controller): dropping refresh requests during reconcile (#​28603) (#​28414) (@​dudinea)
• d419d3b: fix(controller): honor manifest-generate-paths for shallow-cloned repositories (cherry-pick #​30485 for 3.6) (#​30565) (@​argo-cd-cherry-pick-bot[bot])
• cb99c80: fix(controller): reuse server-side diff result when masking Secret data (#​27858) (@​1ovsss)
• fcb97d8: fix(controller): rewrite resource tree when an app moves back to a controller (cherry-pick #​30313 for 3.6) (#​30382) (@​argo-cd-cherry-pick-bot[bot])
• f8c252b: fix(controller): show retry wait time in unambiguous format (#​29534) (@​nitishfy)
• b9e9d41: fix(controller): treat timeout.reconciliation=0 as disabled soft expiry (#​27683) (@​aali309)
• f4adccd: fix(controller): use diff

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.