0.10.0 - 2026-08-26
⛰️ Features
- (cli) Allow users to specify key type and size for key generation (#997) - (c37e3bf) by @jannfis
- (cli) Allow users to set certificate lifetime (#993) - (81fa5a9) by @jannfis
- (helm) Add heartbeatInterval to argocd-agent-agent Helm chart (#1005) - (421e2dd) by @NisaargPendal
- (helm) Add Principal component Helm chart (#947) - (aafcbda) by @enbiyagoral
- (helm) Improve agent helm (#911) - (d5296cc) by @C4tWithShell
- (helm) Add missing params to agent helm chart (#888) - (83f3243) by @C4tWithShell
- (helm/agent) Add deploymentAnnotations value for Deployment metadata annotations (#1043) - (1c1c283) by @runderwoodcr14
- (metrics) Add Grafana dashboards for principal and agent monitoring (#996) - (4797313) by @jparsai
- Add SPIFFE/SPIRE integration for automated mTLS authentication (#1049) - (e0ea180) by @jparsai
- Add TLS certificate blocklist to revoke agent access by fingerprint (#1027) - (1a8fb4d) by @jparsai
- Utility to verify sync behaviour correctness (#1066) - (4b45334) by @jgwest
- Translate AppProject roles in autonomous agent mode (#1041) - (6b7b773) by @jgwest
- Allow buffering of Application events at informer to reduce event volume (#937) - (cc649ac) by @jgwest
- Add error event type and use it for when application adoption policy is never (#1007) - (5c48539) by @cjcocokrisp
- Enhance informer/event/action logging (#991) - (a5b3e6c) by @jparsai
- Deduplicate unsent event writer events for spec/statusupdate (#938) - (fdc1890) by @jgwest
- Adopt existing applications on agent in managed mode (#987) - (a07d28a) by @cjcocokrisp
- Improve ha snapshot cleanup safety (#960) - (bcbd0c5) by @drewbailey
- Track dropped EventWriter events in metrics (#969) - (bafc148) by @jparsai
- Add additional logging/detail granularity to logging (#914) - (d50982a) by @jparsai
- Agent informer sync timeout configurable (#955) - (bcf0519) by @muzcategui1106
- Add metrics for worker queues (#931) - (6fc59b3) by @jannfis
- Source uid mismatch policy (#927) - (0556aff) by @drewbailey
- Allow sizing recv and send queues independently (#916) - (dcdc499) by @jannfis
- Sync credential templates to managed agents (#878) - (b7453bd) by @jparsai
- Allow setting the event queue size (#882) - (bc73cb0) by @jannfis
- Extend label selectors to other agent resources (#875) - (7bf3298) by @chetan-rns
🐛 Bug Fixes
- (agent) Return error on nil item in sender instead of calling Done(nil) (#995) - (4a2c614) by @immanuwell
- (build) Add BuildKit cache mounts and pin alpine version (#901) - (9aedb77) by @enbiyagoral
- (ci) Harden GitHub Actions workflow security (#898) - (48b8edc) by @enbiyagoral
- (ctl) Correct flag name in jwt create-key error message (#1036) - (1b03a84) by @enbiyagoral
- (ctl) Support ca output in agent print-tls (#992) - (084ae3c) by @immanuwell
- (ctl) Allow certificate chains in TLS secret validation (#907) - (fc3481f) by @EvannDev
- (dev-env) Align in-cluster dev env namespaces with deployed components (#982) - (aaaa9de) by @immanuwell
- (e2e) Flaky GPG key and self-registration e2e tests (#932) - (7c3709d) by @jparsai
- (helm) Prevent resource name collisions on long release names (#1024) - (073fd8c) by @chickenbeef
- (helm) Restore ARGOCD_AGENT_INSECURE_PLAINTEXT env on agent deployment (#989) - (b5dea94) by @aplr
- (helm) Use appVersion as default image tag instead of latest (#895) - (e589ae1) by @enbiyagoral
- (informer) Check the correct underlying implementation for being synced (#910) - (1226ee0) by @jannfis
- (principal) Reconnect Subscribe on EventWriter send failures (#943) - (baa7be1) by @drewbailey
- (principal) Only accept agent connections after initialization is complete (#908) - (09a3d18) by @jannfis
- (redis-proxy) Fallback to principal redis for local apps in namespace-based mapping mode and hybrid architecture (#956) - (8765d38) by @lvkins
- (resource-proxy) Correctly resolve OLM relationships (#1021) - (6ac78ea) by @jannfis
- (test) Fix intermittent Test_ApplicationManagementAPI failure (#1015) - (d65f119) by @chetan-rns
- Prevent unbounded growth in workqueue Add (#1078) - (acb60cd) by @chetan-rns
- Adopt pre-installed AppProject in-place instead of delete and recreate (#1072) - (7d6ab87) by @chetan-rns
- Preserve notifications state on the principal across agent updates (#1059) - (3c3ba48) by @benelser
- Skip mapping an app to an agent that isn't actually connected (#1061) - (e8b8ccb) by @mikeshng
- Cleanup agent resources after the deletion of the agent cluster secret (#1034) - (0554ad8) by @chetan-rns
- E2e failures in cluster mode (#998) - (8cf8718) by @Rizwana777
- Migrate from deprecated golang.org/x/net/http2/h2c to net/http.Protocols (#1011) - (38df015) by @Rizwana777
- Temporarily disable data race detection (#1009) - (605f1f6) by @jgwest
- Apply
on-application-recreateaction during application recreation (#999) - (b1e2425) by @jparsai - Refresh self-registered cluster TLS data (#990) - (f89b78e) by @drewbailey
- Noisy warning logs for gitfiles redis key (#985) - (4c929f5) by @jparsai
- Managed app shows outofsync/missing after re-create from unauthorized delete (#959) - (1e5e58b) by @jparsai
- Destination mapping shouldn't require agent name in AppProject sourceNamespaces (#966) - (c1a0da3) by @chetan-rns
- Detect if unmanaged app exists on agent before principal creates one (#964) - (aedf084) by @cjcocokrisp
- UI navigation to child apps fails in autonomous app-of-apps (#962) - (caaf2e6) by @jparsai
- Check if resource being patched is managed (#957) - (90cf3d9) by @cjcocokrisp
- Agent should remap apps from the principal namespace to the agent namespace (#892) - (c4c7ff2) by @chetan-rns
- Principal should allow apps from its namespace in the app filter chain (#945) - (3f057ff) by @chetan-rns
- Prevent lingering connections on connect failures (#944) - (5b5674c) by @jannfis
- Optional Redis TLS secret mounts on vcluster (#930) - (9860734) by @Rizwana777
- Obey informer options (#925) - (5114fe9) by @jannfis
- Respect managed app finalizer updates (#926) - (086ac24) by @drewbailey
- Send sync operation in a separate event to prevent overwriting (#834) - (675e0fe) by @chetan-rns
- Memory leak at agent component (#890) - (63a79be) by @C4tWithShell
- Respect Argo CD custom resource tracking labels (#886) - (8293967) by @drewbailey
📦 Dependency updates
- (deps) Bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 (#1071) - (c965ad3) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#1085) - (5570b86) by @dependabot[bot]
- (deps) Bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 (#1084) - (307da3f) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#1077) - (56aca27) by @dependabot[bot]
- (deps) Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#1083) - (f7d46e1) by @dependabot[bot]
- (deps) Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (#1075) - (2b093d1) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.5.0 to 3.5.1 (#1074) - (b9fc6ba) by @dependabot[bot]
- (deps) Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#1073) - (dbd8181) by @dependabot[bot]
- (deps) Bump Argo CD from v3.4.4 to v3.5.0 (#1069) - (d27e611) by @chetan-rns
- (deps) Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.69.0 to 0.70.0 (#1068) - (99870f0) by @dependabot[bot]
- (deps) Bump github.com/redis/go-redis/v9 from 9.21.0 to 9.22.0 (#1067) - (7daa9c5) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.43.0 to 1.45.0 (#1065) - (8241768) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.44.0 to 1.45.0 (#1063) - (6abb74a) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.82.1 to 1.83.0 (#1054) - (37e8201) by @dependabot[bot]
- (deps) Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 (#1050) - (8b3c963) by @dependabot[bot]
- (deps) Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0 (#1045) - (cc598fc) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#1039) - (9383ed6) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#1033) - (8f14949) by @dependabot[bot]
- (deps) Bump golang.org/x/sync from 0.21.0 to 0.22.0 (#1029) - (952ace9) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.4.3 to 3.4.4 (#1023) - (2470db4) by @jannfis
- (deps) Bump google.golang.org/grpc from 1.81.1 to 1.82.0 (#1022) - (8eaf7d4) by @dependabot[bot]
- (deps) Bump github.com/redis/go-redis/v9 from 9.20.0 to 9.21.0 (#1018) - (f203340) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.67.0 to 0.69.0 (#1020) - (3797792) by @dependabot[bot]
- (deps) Bump github.com/rs/zerolog from 1.35.0 to 1.35.1 (#919) - (6fb91d8) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.50.0 to 0.53.0 (#988) - (5187a60) by @dependabot[bot]
- (deps) Bump golang.org/x/sync from 0.20.0 to 0.21.0 (#983) - (bf03e6d) by @dependabot[bot]
- (deps) Bump github.com/alicebob/miniredis/v2 from 2.37.0 to 2.38.0 (#978) - (5acf589) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.43.0 to 1.44.0 (#974) - (15ad3e7) by @dependabot[bot]
- (deps) Bump github.com/redis/go-redis/v9 from 9.18.0 to 9.20.0 (#972) - (0b07449) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.81.0 to 1.81.1 (#971) - (adda7d9) by @dependabot[bot]
- (deps) Bump Argo CD from v3.3.9 to v3.4.3 (#970) - (d5d7903) by @chetan-rns
- (deps) Bump google.golang.org/grpc from 1.80.0 to 1.81.0 (#936) - (0c64964) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.3.8 to 3.3.9 (#934) - (f8f4160) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.3.7 to 3.3.8 (#923) - (5dfc8b5) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.3.6 to 3.3.7 (#909) - (2331cd0) by @dependabot[bot]
- (deps) Bump golang.org/x/net from 0.52.0 to 0.53.0 (#893) - (d253a47) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.49.0 to 0.50.0 (#884) - (d7ac642) by @dependabot[bot]
🚜 Refactor
- Move event targets to new package (#986) - (a6ef9ec) by @jparsai
- Use %w instead of %v for error wrapping in fmt.Errorf calls (#965) - (605fa30) by @immanuwell
📚 Documentation
- (agent-mapping) Clarify destination-based mapping's parity with traditional Argo CD (#1038) - (a822ce1) by @mikeshng
- (getting-started) Use server-side apply for install manifests (#1016) - (ea5eaa7) by @jonmosco
- (kind) Fix networkpolicy patch and update guide for destination-based mapping (#1079) - (bcc1c18) by @mikeshng
- Clarify hybrid architecture enables app-of-apps in managed mode (#1080) - (a51fc40) by @mikeshng
- Expand destination-based mapping documentation across all sections (#1052) - (cc6d723) by @chetan-rns
- Document agent self-registration (#778) - (db57149) by @jannfis
- Clarify that sync and terminate operations are allowed on autonomous apps from the hub (#1002) - (1bf8d9f) by @mikeshng
- Enhance repository management documentation with repo-cred details (#973) - (a1eb53f) by @jannfis
- Support for hybrid architecture (#946) - (5fd1a48) by @chetan-rns
- Fix typo (occured -> occurred) in CONTRIBUTING (#948) - (e9e4078) by @SAY-5
- Add doc for web-based terminal (#891) - (f37e7e0) by @jparsai
🧪 Testing
- (e2e) Run e2e tests with destination based mapping (#1028) - (cd1b550) by @chetan-rns
- (e2e) E2e failure due to race detector enabled (#1012) - (e4a4741) by @jparsai
- Resolve go vet warnings in test files (#980) - (031dd6e) by @immanuwell
- Separate E2E namespace names to detect translation bugs (#939) - (b2aabf0) by @Rizwana777
⚙️ Miscellaneous Tasks
- (build) Use helm-docs from a container (#896) - (6bbfea2) by @jannfis
- (ci) Helm Chart Add CI check to make sure chart version is bumped whenever agent chart is updated (#952) - (b71d4cc) by @anandrkskd
- (helm) Add OCI chart release workflows for agent and principal (#1008) - (0396747) by @anandrkskd
- (rbac) Add examples for agent clusterroles that enhance permissions for the resource proxy (#1047) - (e51bc29) by @cjcocokrisp
- Fix the source object on which update actions are diffed, when full detail logging (#1081) - (f44a8d1) by @jgwest
- Run 'go fix' and audit changes (#1035) - (c7b48d8) by @jgwest
- Enable data race detection in argocd-agent 'dev-env' and E2E tests (#793) - (100a8c2) by @jgwest
- Reclaim disk space in GitHub runners (#1004) - (4b98694) by @jannfis
- Add unit-tests flag to Codecov coverage upload (#967) - (08f35e0) by @AdamSaleh
- Add @jparsai as maintainer (#935) - (2f8cd99) by @jannfis
- Harden Helm chart validation pipeline (#928) - (5230ede) by @C4tWithShell
- Improve event writer logging (#906) - (f190566) by @jannfis
- Add @drewbailey as maintainer (#897) - (9b36370) by @jannfis
◀️ Revert
- (ci) Revert slsa generators to be referenced by tag on release pipeline (#900) - (790c7bc) by @cjcocokrisp
Build
Release
New Contributors ❤️
- @github-actions[bot] made their first contribution in #1087
- @benelser made their first contribution in #1059
- @runderwoodcr14 made their first contribution in #1043
- @enbiyagoral made their first contribution in #1036
- @chickenbeef made their first contribution in #1024
- @jonmosco made their first contribution in #1016
- @NisaargPendal made their first contribution in #1005
- @immanuwell made their first contribution in #995
- @aplr made their first contribution in #989
- @AdamSaleh made their first contribution in #967
- @lvkins made their first contribution in #956
- @muzcategui1106 made their first contribution in #955
- @SAY-5 made their first contribution
- @EvannDev made their first contribution in #907