StackWatch

Argo CD

tool13 releases · 0 support lines

Releases

newest first
Argo CDv3.5.09d agosecuritybreaking
  • Helm upgraded from version 3 to version 4
  • Source Hydrator promoted from alpha to beta with improved dry source support
  • Impersonation feature promoted from alpha to beta
  • ApplicationSet in any namespace promoted from beta to stable
what breaks

Helm 3 to Helm 4 migration may affect users with custom Helm configurations or scripts that depend on Helm 3 behavior. Users must ensure their Helm charts and configurations are compatible with Helm 4.

to upgrade

If upgrading from a different minor version, be sure to read the upgrading documentation. Review Helm 4 compatibility for any custom Helm configurations.

advisories
CVE-2026-41240
changelog ↗
Argo CDv3.4.613d ago
  • Fixed application set patch operations falling back to create when patch returns NotFound
  • Fixed diff filtering to preserve manager-owned descendant fields during webhook mutations
  • Fixed Helm registry password handling to pass credentials through stdin
  • Fixed progressive sync and OIDC token refresh issues
changelog ↗
Argo CDv3.4.51mo ago
  • Fixed repository server to honor depth of referenced source instead of primary source
  • Fixed SSA (Server-Side Apply) to not run auth reconcile
  • Fixed auto-sync being skipped when newer commits arrive during sync with manifest-generate-paths
  • Fixed deleted resources being incorrectly shown in UI
changelog ↗
Argo CDv3.4.42mo ago
  • Fixed PromotionStrategy getting stuck in Progressing state after no-op re-hydration
  • Resolved RBAC regression affecting project-scoped resources in multi-namespace setups
  • Fixed diff errors on new objects in server-side diff mode
  • Fixed parsing of Dex passwords containing dollar signs
changelog ↗
Argo CDv3.4.33mo agosecurity
  • CLI 'app wait' command now returns immediately when the app is already in the desired state
  • UI no longer prefetches errors
  • Fixed nil pointer dereference error in webhook mutation handling
  • Various bug fixes for repository depth settings, label truncation, and application controller startup
advisories
CVE-2026-41240
changelog ↗
Argo CDv3.3.1313d agosecurity
  • Multiple bug fixes including health check improvements for ConfigConnector resources
  • Fixed Helm registry password handling to pass credentials through stdin
  • Corrected repository server behavior to honor depth of referenced sources
  • Fixed UI display of deleted resources and other reconciliation issues
advisories
CVE-2026-12143
changelog ↗
Argo CDv3.3.122mo ago
  • Fixed PromotionStrategy getting stuck in Progressing state after no-op re-hydration
  • Fixed cluster informer locking issue
  • Fixed parsing of Dex passwords containing dollar signs
  • Fixed repository depth setting handling in git operations
changelog ↗

← back to the digest