0.11.0 - 2026-11-11
This minor release focuses on operational excellence with zero-downtime certificate management, enhanced troubleshooting capabilities for production environments, improved security controls for multi-cluster deployments, and
performance improvements through concurrent request processing.
There have been tons of bug fixes and other improvements in this release - and most of all, a whole bunch of new contributors! This is very exciting, and the project would like to thank all individuals who have contributed to this release. You people rock!
The 0.11 release of argocd-agent is supporting the Argo CD 3.6 release stream.
Highlighted features
Hot TLS Certificate Reloading (#1168, #1125)
This feature enables zero-downtime certificate rotation for both agent and principal components. When TLS certificates are updated - whether through automated systems like cert-manager, SPIRE, or Vault, or through manual rotation - the gent and principal will automatically detect and apply the new certificates without requiring a restart.
This is particularly valuable for organizations with strict security policies requiring frequent certificate rotation, or those using short-lived certificates. Previously, certificate rotation meant planned downtime or rolling restarts of agents, which could disrupt continuous deployment operations. Now, certificate lifecycle management becomes truly seamless, with no service interruption and no manual intervention required. Agents maintain uninterrupted connectivity to the principal server even as certificates are rotated in the background.
Thanks to @cjcocokrisp for the principal part and @sathwick-p for the agent part of this awesome feature!
Runtime Debug Settings Toggle (#1111)
Operators can now enable or disable debug logging and performance profiling on running agent and principal instances without restarting them. This dramatically improves the ability to troubleshoot production issues, especially transient problems that are difficult to reproduce.
When investigating an issue, operators can temporarily increase logging verbosity to capture detailed diagnostic information, enable profiling to identify performance bottlenecks, and then return to normal settings - all without any service disruption. This eliminates the trade-off between running with verbose logging "just in case" (which impacts performance and storage) versus having insufficient information when problems occur. The feature makes incident response faster and more effective while maintaining normal production performance characteristics.
Thanks to @chetan-rns for contributing this valuable feature!
AppProject destinationServiceAccounts Rewriting (#1179)
This feature ensures that security controls defined in AppProjects work correctly when applications are deployed to agent-managed clusters. Specifically, it properly handles the destinationServiceAccounts field, which controls which Kubernetes service accounts can be used when deploying applications to specific clusters.
Without this fix, security policies intended to restrict which service accounts can be impersonated during deployments might not apply correctly in agent-managed environments, potentially leading to authorization failures or overly permissive access. This change ensures that multi-cluster RBAC policies are enforced consistently, whether applications are deployed directly or through agents, maintaining your security posture across all deployment patterns.
Thanks to @Rizwana777 for contributing this excellent feature!
Complete changelog
โฐ๏ธ Features
- (agent) Reload client TLS certificate without restart (#1168) - (ddd88b9) by @sathwick-p
- (cli) Allow users to specify key type and size for key generation (#997) - (c37e3bf) by @jannfis
- (cli) Allow users to set certificate lifetime (#993) - (81fa5a9) by @jannfis
- (helm) Add heartbeatInterval to argocd-agent-agent Helm chart (#1005) - (421e2dd) by @NisaargPendal
- (helm) Add Principal component Helm chart (#947) - (aafcbda) by @enbiyagoral
- (helm) Improve agent helm (#911) - (d5296cc) by @C4tWithShell
- (helm) Add missing params to agent helm chart (#888) - (83f3243) by @C4tWithShell
- (helm/agent) Add deploymentAnnotations value for Deployment metadata annotations (#1043) - (1c1c283) by @runderwoodcr14
- (metrics) Add Grafana dashboards for principal and agent monitoring (#996) - (4797313) by @jparsai
- (tls) Add hot reloading for tls client cert and ca on principal (#1125) - (9041035) by @cjcocokrisp
- (tls) Configure curve preferences (#1137) - (3c9a553) by @akhilnittala
- Rewrite AppProject destinationServiceAccounts for agents (#1179) - (12c9acb) by @Rizwana777
- Warn that namespace-based mapping is deprecated (#1185) - (cf7d2c8) by @Gabrielandre02
- Support custom labels in self-registration cluster secret (#1124) - (6163a19) by @jparsai
- Process resource requests concurrently and deliver responses without polling (#1110) - (3be079e) by @chrodrigues
- Toggle debug settings during runtime (#1111) - (cb1542e) by @chetan-rns
- Secure HA admin endpoints with mTLS authentication (#1076) - (8e916bf) by @jparsai
- Add SPIFFE/SPIRE integration for automated mTLS authentication (#1049) - (e0ea180) by @jparsai
- Add TLS certificate blocklist to revoke agent access by fingerprint (#1027) - (1a8fb4d) by @jparsai
- Utility to verify sync behaviour correctness (#1066) - (4b45334) by @jgwest
- Translate AppProject roles in autonomous agent mode (#1041) - (6b7b773) by @jgwest
- Allow buffering of Application events at informer to reduce event volume (#937) - (cc649ac) by @jgwest
- Add error event type and use it for when application adoption policy is never (#1007) - (5c48539) by @cjcocokrisp
- Enhance informer/event/action logging (#991) - (a5b3e6c) by @jparsai
- Deduplicate unsent event writer events for spec/statusupdate (#938) - (fdc1890) by @jgwest
- Adopt existing applications on agent in managed mode (#987) - (a07d28a) by @cjcocokrisp
- Improve ha snapshot cleanup safety (#960) - (bcbd0c5) by @drewbailey
- Track dropped EventWriter events in metrics (#969) - (bafc148) by @jparsai
- Add additional logging/detail granularity to logging (#914) - (d50982a) by @jparsai
- Agent informer sync timeout configurable (#955) - (bcf0519) by @muzcategui1106
- Add metrics for worker queues (#931) - (6fc59b3) by @jannfis
- Source uid mismatch policy (#927) - (0556aff) by @drewbailey
- Allow sizing recv and send queues independently (#916) - (dcdc499) by @jannfis
- Sync credential templates to managed agents (#878) - (b7453bd) by @jparsai
- Allow setting the event queue size (#882) - (bc73cb0) by @jannfis
- Extend label selectors to other agent resources (#875) - (7bf3298) by @chetan-rns
๐ Bug Fixes
- (agent) Drop ownerReferences from repository secrets in managed mode (#1199) - (424faec) by @orshih6
- (agent) Keep the re-created app when the principal deletes and re-creates it (#1183) - (7e94846) by @Gabrielandre02
- (agent) Return error on nil item in sender instead of calling Done(nil) (#995) - (4a2c614) by @immanuwell
- (build) Add BuildKit cache mounts and pin alpine version (#901) - (9aedb77) by @enbiyagoral
- (ci) Harden GitHub Actions workflow security (#898) - (48b8edc) by @enbiyagoral
- (ctl) Reject agent names already used by another cluster (#1154) - (52c336a) by @ksdpmx
- (ctl) Correct flag name in jwt create-key error message (#1036) - (1b03a84) by @enbiyagoral
- (ctl) Support ca output in agent print-tls (#992) - (084ae3c) by @immanuwell
- (ctl) Allow certificate chains in TLS secret validation (#907) - (fc3481f) by @EvannDev
- (dev-env) Align in-cluster dev env namespaces with deployed components (#982) - (aaaa9de) by @immanuwell
- (e2e) Wait for agents to connect before running tests (#1176) - (874055f) by @Gabrielandre02
- (e2e) Flaky GPG key and self-registration e2e tests (#932) - (7c3709d) by @jparsai
- (helm) Update principal chart app version (#1150) - (b431631) by @sean0407
- (helm) Prevent resource name collisions on long release names (#1024) - (073fd8c) by @chickenbeef
- (helm) Restore ARGOCD_AGENT_INSECURE_PLAINTEXT env on agent deployment (#989) - (b5dea94) by @aplr
- (helm) Use appVersion as default image tag instead of latest (#895) - (e589ae1) by @enbiyagoral
- (informer) Check the correct underlying implementation for being synced (#910) - (1226ee0) by @jannfis
- (principal) Reconnect Subscribe on EventWriter send failures (#943) - (baa7be1) by @drewbailey
- (principal) Only accept agent connections after initialization is complete (#908) - (09a3d18) by @jannfis
- (redis-proxy) Fallback to principal redis for local apps in namespace-based mapping mode and hybrid architecture (#956) - (8765d38) by @lvkins
- (resource-proxy) Correctly resolve OLM relationships (#1021) - (6ac78ea) by @jannfis
- (test) Fix intermittent Test_ApplicationManagementAPI failure (#1015) - (d65f119) by @chetan-rns
- (tls) Omit certificate signing usage from leaf certificates (#1117) - (6079f16) by @luiseterc
- Verify agent ownership of Applications on inbound events (#1191) - (5d969a8) by @chetan-rns
- Stop leaking redis subscription goroutines in agent and principal (#1173) - (2a6d913) by @Gabrielandre02
- Keep an autonomous agent's AppProject destinations on resync (#1167) - (e5dd395) by @jadhavgaurav
- Invalid loglevel should log an error instead of fatal (#1157) - (359e749) by @chetan-rns
- Restrict resource proxy NetworkPolicy to Argo CD server (#1129) - (49b51ae) by @Rizwana777
- Raise gRPC message limit on HA replication (#1135) - (87b5f6d) by @drewbailey
- Avoid orphaned resources when deletions race (#1127) - (a35ae2c) by @chetan-rns
- Process Delete event for app already deleted on the agent (#1101) - (2312d50) by @KR-Ravindra
- Rewrite ApplicationSet/Application namespace in cached resource tree for agent-owned apps (#1048) - (d76f89d) by @m3rryqold
- Add events to common application resources cluster role example (#1109) - (3038139) by @cjcocokrisp
- Prevent unbounded growth in workqueue Add (#1078) - (acb60cd) by @chetan-rns
- Adopt pre-installed AppProject in-place instead of delete and recreate (#1072) - (7d6ab87) by @chetan-rns
- Preserve notifications state on the principal across agent updates (#1059) - (3c3ba48) by @benelser
- Skip mapping an app to an agent that isn't actually connected (#1061) - (e8b8ccb) by @mikeshng
- Cleanup agent resources after the deletion of the agent cluster secret (#1034) - (0554ad8) by @chetan-rns
- E2e failures in cluster mode (#998) - (8cf8718) by @Rizwana777
- Migrate from deprecated golang.org/x/net/http2/h2c to net/http.Protocols (#1011) - (38df015) by @Rizwana777
- Temporarily disable data race detection (#1009) - (605f1f6) by @jgwest
- Apply
on-application-recreateaction during application recreation (#999) - (b1e2425) by @jparsai - Refresh self-registered cluster TLS data (#990) - (f89b78e) by @drewbailey
- Noisy warning logs for gitfiles redis key (#985) - (4c929f5) by @jparsai
- Managed app shows outofsync/missing after re-create from unauthorized delete (#959) - (1e5e58b) by @jparsai
- Destination mapping shouldn't require agent name in AppProject sourceNamespaces (#966) - (c1a0da3) by @chetan-rns
- Detect if unmanaged app exists on agent before principal creates one (#964) - (aedf084) by @cjcocokrisp
- UI navigation to child apps fails in autonomous app-of-apps (#962) - (caaf2e6) by @jparsai
- Check if resource being patched is managed (#957) - (90cf3d9) by @cjcocokrisp
- Agent should remap apps from the principal namespace to the agent namespace (#892) - (c4c7ff2) by @chetan-rns
- Principal should allow apps from its namespace in the app filter chain (#945) - (3f057ff) by @chetan-rns
- Prevent lingering connections on connect failures (#944) - (5b5674c) by @jannfis
- Optional Redis TLS secret mounts on vcluster (#930) - (9860734) by @Rizwana777
- Obey informer options (#925) - (5114fe9) by @jannfis
- Respect managed app finalizer updates (#926) - (086ac24) by @drewbailey
- Send sync operation in a separate event to prevent overwriting (#834) - (675e0fe) by @chetan-rns
- Memory leak at agent component (#890) - (63a79be) by @C4tWithShell
- Respect Argo CD custom resource tracking labels (#886) - (8293967) by @drewbailey
๐ฆ Dependency updates
- (deps) Bump google.golang.org/grpc from 1.84.0 to 1.85.0 (#1178) - (5bd44f9) by @dependabot[bot]
- (deps) Bump golang.org/x/sync from 0.24.0 to 0.25.0 (#1217) - (3412e57) by @dependabot[bot]
- (deps) Bump github.com/go-jose/go-jose/v4 from 4.1.7 to 4.1.9 (#1216) - (6373e75) by @dependabot[bot]
- (deps) Bump github.com/go-jose/go-jose/v4 from 4.1.6 to 4.1.7 (#1184) - (844798a) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.5.5 to 3.5.6 (#1170) - (dc5293a) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.4.3 to 3.4.10 in /hack/sync-consistency-util (#1161) - (3588f4c) by @dependabot[bot]
- (deps) Bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 (#1159) - (5d58484) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.5.4 to 3.5.5 (#1153) - (2e7ef55) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.57.0 to 0.58.0 (#1148) - (5a30fd5) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.5.3 to 3.5.4 (#1147) - (35615ab) by @dependabot[bot]
- (deps) Bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0 (#1146) - (e159362) by @dependabot[bot]
- (deps) Bump github.com/alicebob/miniredis/v2 from 2.39.0 to 2.40.0 (#1145) - (031c866) by @dependabot[bot]
- (deps) Bump github.com/spiffe/go-spiffe/v2 from 2.8.2 to 2.9.0 (#1142) - (25e3fdb) by @dependabot[bot]
- (deps) Bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus from 1.1.0 to 1.1.1 (#1140) - (e3bc58b) by @dependabot[bot]
- (deps) Bump github.com/redis/go-redis/v9 from 9.22.0 to 9.23.0 (#1139) - (d482ef1) by @dependabot[bot]
- (deps) Bump golang.org/x/sync from 0.23.0 to 0.24.0 (#1141) - (ea53587) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.46.0 to 1.47.0 (#1134) - (e79b7b5) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.71.0 to 0.72.0 (#1133) - (8413199) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/sdk from 1.46.0 to 1.47.0 (#1132) - (1c20e43) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel from 1.46.0 to 1.47.0 (#1131) - (ee46d9b) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.79.3 to 1.83.2 in /hack/sync-consistency-util (#1123) - (75f660c) by @dependabot[bot]
- (deps) Bump github.com/spiffe/go-spiffe/v2 from 2.8.1 to 2.8.2 (#1122) - (aab1a3d) by @dependabot[bot]
- (deps) Bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 in /hack/sync-consistency-util (#1119) - (82a17b3) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.83.2 to 1.84.0 (#1118) - (b408d66) by @dependabot[bot]
- (deps) Bump github.com/alicebob/miniredis/v2 from 2.38.0 to 2.39.0 (#1115) - (bb778cc) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.5.2 to 3.5.3 (#1114) - (52beac1) by @dependabot[bot]
- (deps) Bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.3 to 2.3.4 (#1113) - (90b5fe2) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.55.0 to 0.57.0 (#1100) - (52fe4a7) by @dependabot[bot]
- (deps) Bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.5 (#1106) - (8595dac) by @dependabot[bot]
- (deps) Bump golang.org/x/sync from 0.22.0 to 0.23.0 (#1105) - (386e081) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.45.0 to 1.46.0 (#1094) - (9206fa1) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.5.1 to 3.5.2 (#1092) - (b0969e6) by @dependabot[bot]
- (deps) Bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 (#1103) - (64b70d7) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.70.0 to 0.71.0 (#1099) - (fe7cb71) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#1093) - (a7894bc) by @dependabot[bot]
- (deps) Bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 (#1091) - (a5fe093) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.45.0 to 1.46.0 (#1089) - (65835fa) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/trace from 1.45.0 to 1.46.0 (#1088) - (58daebc) by @dependabot[bot]
- (deps) Bump github.com/spiffe/go-spiffe/v2 from 2.7.0 to 2.8.1 (#1086) - (d3de08b) by @dependabot[bot]
- (deps) Bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 (#1071) - (c965ad3) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#1085) - (5570b86) by @dependabot[bot]
- (deps) Bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 (#1084) - (307da3f) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#1077) - (56aca27) by @dependabot[bot]
- (deps) Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#1083) - (f7d46e1) by @dependabot[bot]
- (deps) Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (#1075) - (2b093d1) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.5.0 to 3.5.1 (#1074) - (b9fc6ba) by @dependabot[bot]
- (deps) Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#1073) - (dbd8181) by @dependabot[bot]
- (deps) Bump Argo CD from v3.4.4 to v3.5.0 (#1069) - (d27e611) by @chetan-rns
- (deps) Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.69.0 to 0.70.0 (#1068) - (99870f0) by @dependabot[bot]
- (deps) Bump github.com/redis/go-redis/v9 from 9.21.0 to 9.22.0 (#1067) - (7daa9c5) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.43.0 to 1.45.0 (#1065) - (8241768) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.44.0 to 1.45.0 (#1063) - (6abb74a) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.82.1 to 1.83.0 (#1054) - (37e8201) by @dependabot[bot]
- (deps) Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 (#1050) - (8b3c963) by @dependabot[bot]
- (deps) Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0 (#1045) - (cc598fc) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#1039) - (9383ed6) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#1033) - (8f14949) by @dependabot[bot]
- (deps) Bump golang.org/x/sync from 0.21.0 to 0.22.0 (#1029) - (952ace9) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.4.3 to 3.4.4 (#1023) - (2470db4) by @jannfis
- (deps) Bump google.golang.org/grpc from 1.81.1 to 1.82.0 (#1022) - (8eaf7d4) by @dependabot[bot]
- (deps) Bump github.com/redis/go-redis/v9 from 9.20.0 to 9.21.0 (#1018) - (f203340) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.67.0 to 0.69.0 (#1020) - (3797792) by @dependabot[bot]
- (deps) Bump github.com/rs/zerolog from 1.35.0 to 1.35.1 (#919) - (6fb91d8) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.50.0 to 0.53.0 (#988) - (5187a60) by @dependabot[bot]
- (deps) Bump golang.org/x/sync from 0.20.0 to 0.21.0 (#983) - (bf03e6d) by @dependabot[bot]
- (deps) Bump github.com/alicebob/miniredis/v2 from 2.37.0 to 2.38.0 (#978) - (5acf589) by @dependabot[bot]
- (deps) Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.43.0 to 1.44.0 (#974) - (15ad3e7) by @dependabot[bot]
- (deps) Bump github.com/redis/go-redis/v9 from 9.18.0 to 9.20.0 (#972) - (0b07449) by @dependabot[bot]
- (deps) Bump google.golang.org/grpc from 1.81.0 to 1.81.1 (#971) - (adda7d9) by @dependabot[bot]
- (deps) Bump Argo CD from v3.3.9 to v3.4.3 (#970) - (d5d7903) by @chetan-rns
- (deps) Bump google.golang.org/grpc from 1.80.0 to 1.81.0 (#936) - (0c64964) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.3.8 to 3.3.9 (#934) - (f8f4160) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.3.7 to 3.3.8 (#923) - (5dfc8b5) by @dependabot[bot]
- (deps) Bump github.com/argoproj/argo-cd/v3 from 3.3.6 to 3.3.7 (#909) - (2331cd0) by @dependabot[bot]
- (deps) Bump golang.org/x/net from 0.52.0 to 0.53.0 (#893) - (d253a47) by @dependabot[bot]
- (deps) Bump golang.org/x/crypto from 0.49.0 to 0.50.0 (#884) - (d7ac642) by @dependabot[bot]
๐ Refactor
- Move event targets to new package (#986) - (a6ef9ec) by @jparsai
- Use %w instead of %v for error wrapping in fmt.Errorf calls (#965) - (605fa30) by @immanuwell
๐ Documentation
- (agent-mapping) Clarify destination-based mapping's parity with traditional Argo CD (#1038) - (a822ce1) by @mikeshng
- (getting-started) Use server-side apply for install manifests (#1016) - (ea5eaa7) by @jonmosco
- (helm agent-agent) Fix the helm install oci path (#1098) - (c8b68c6) by @flbla
- (kind) Fix networkpolicy patch and update guide for destination-based mapping (#1079) - (bcc1c18) by @mikeshng
- Deprecate shared resources integration pattern (#1144) - (68fc7e3) by @jannfis
- Update README and docs to reflect current status (#1143) - (6ca5e4e) by @jannfis
- Refactor agent mode behaviours to child topics (#1126) - (49514ef) by @jgwest
- Remove applicationset warning and fix typos in migration doc (#1128) - (a935317) by @jgwest
- Clarify hybrid architecture enables app-of-apps in managed mode (#1080) - (a51fc40) by @mikeshng
- Expand destination-based mapping documentation across all sections (#1052) - (cc6d723) by @chetan-rns
- Document agent self-registration (#778) - (db57149) by @jannfis
- Clarify that sync and terminate operations are allowed on autonomous apps from the hub (#1002) - (1bf8d9f) by @mikeshng
- Enhance repository management documentation with repo-cred details (#973) - (a1eb53f) by @jannfis
- Support for hybrid architecture (#946) - (5fd1a48) by @chetan-rns
- Fix typo (occured -> occurred) in CONTRIBUTING (#948) - (e9e4078) by @SAY-5
- Add doc for web-based terminal (#891) - (f37e7e0) by @jparsai
๐งช Testing
- (e2e) Run e2e tests with destination based mapping (#1028) - (cd1b550) by @chetan-rns
- (e2e) E2e failure due to race detector enabled (#1012) - (e4a4741) by @jparsai
- Resolve go vet warnings in test files (#980) - (031dd6e) by @immanuwell
- Separate E2E namespace names to detect translation bugs (#939) - (b2aabf0) by @Rizwana777
โ๏ธ Miscellaneous Tasks
- (build) Use helm-docs from a container (#896) - (6bbfea2) by @jannfis
- (ci) Helm Chart Add CI check to make sure chart version is bumped whenever agent chart is updated (#952) - (b71d4cc) by @anandrkskd
- (e2e) Pin goreman and use the go.mod toolchain in the e2e job (#1177) - (13a33ca) by @Gabrielandre02
- (helm) Add OCI chart release workflows for agent and principal (#1008) - (0396747) by @anandrkskd
- (rbac) Add examples for agent clusterroles that enhance permissions for the resource proxy (#1047) - (e51bc29) by @cjcocokrisp
- Upgrade to Argo CD 3.6 (#1210) - (0eb640b) by @jannfis
- Upgrade golang to 1.27.3 (#1209) - (a2b7f61) by @jannfis
- Add Route/FRP-based Reverse Tunnel (#1162) - (589f38e) by @jgwest
- Switch to quay.io-hosted redis (#1164) - (7f979d4) by @jgwest
- Remove E2E agent connection to principal repo server (#1160) - (5f241ac) by @jgwest
- Move SPIRE below cert-manager in TLS doc (#1120) - (a65de58) by @jgwest
- Fix the source object on which update actions are diffed, when full detail logging (#1081) - (f44a8d1) by @jgwest
- Run 'go fix' and audit changes (#1035) - (c7b48d8) by @jgwest
- Enable data race detection in argocd-agent 'dev-env' and E2E tests (#793) - (100a8c2) by @jgwest
- Reclaim disk space in GitHub runners (#1004) - (4b98694) by @jannfis
- Add unit-tests flag to Codecov coverage upload (#967) - (08f35e0) by @AdamSaleh
- Add @jparsai as maintainer (#935) - (2f8cd99) by @jannfis
- Harden Helm chart validation pipeline (#928) - (5230ede) by @C4tWithShell
- Improve event writer logging (#906) - (f190566) by @jannfis
- Add @drewbailey as maintainer (#897) - (9b36370) by @jannfis
โ๏ธ Revert
- (ci) Revert slsa generators to be referenced by tag on release pipeline (#900) - (790c7bc) by @cjcocokrisp
Build
Release
New Contributors โค๏ธ
- @github-actions[bot] made their first contribution in #1218
- @orshih6 made their first contribution
- @sathwick-p made their first contribution in #1168
- @Gabrielandre02 made their first contribution in #1185
- @jadhavgaurav made their first contribution in #1167
- @ksdpmx made their first contribution in #1154
- @sean0407 made their first contribution in #1150
- @chrodrigues made their first contribution in #1110
- @akhilnittala made their first contribution in #1137
- @KR-Ravindra made their first contribution in #1101
- @luiseterc made their first contribution in #1117
- @m3rryqold made their first contribution in #1048
- @flbla made their first contribution in #1098
- @benelser made their first contribution in #1059
- @runderwoodcr14 made their first contribution in #1043
- @enbiyagoral made their first contribution in #1036
- @chickenbeef made their first contribution in #1024
- @jonmosco made their first contribution in #1016
- @NisaargPendal made their first contribution in #1005
- @immanuwell made their first contribution in #995
- @aplr made their first contribution in #989
- @AdamSaleh made their first contribution in #967
- @lvkins made their first contribution in #956
- @muzcategui1106 made their first contribution in #955
- @SAY-5 made their first contribution in #948
- @EvannDev made their first contribution in #907