v3.3.9

Important

This release contains a security fix to a critical vulnerability: GHSA-3v3m-wc6v-x4x3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 8178655: fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.3) (#27501) (@argo-cd-cherry-pick-bot[bot])
• c89b3a9: fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.3) (#27565) (@argo-cd-cherry-pick-bot[bot])
• 96107fe: fix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick #27265 for 3.3) (#27525) (@argo-cd-cherry-pick-bot[bot])
• 741a6f5: fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick #27589 for 3.3) (#27593) (@argo-cd-cherry-pick-bot[bot])

Documentation

• 5a3a892: docs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick #27608 for 3.3) (#27612) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

• 0a2ba7c: chore(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 8.0.0 (cherry pick #27602 to release-3.3) (#27610) (@dudinea)
• 184b8a9: chore(deps): bump go version to resolve CVEs (#27509) (@crenshaw-dev)

Other work

• fd7ecb3: Merge commit from fork (@alexmt)

Full Changelog: v3.3.8...v3.3.9