What's Changed
- chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 by @dependabot[bot] in #1619
- chore: test/ginkgo: bump image-updater from v1.1.1 to v1.2.0 by @dkarpele in #1628
- chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @dependabot[bot] in #1618
- chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in #1617
- chore(deps): bump argo-cd from 3.3.8 to 3.3.9 by @chengfang in #1632
- chore(deps): bump argo-cd from 3.3.9 to 3.4.1, go from 1.25.9 to 1.26.0, golangci-lint from 2.5.0 to 2.12.2 by @chengfang in #1636
- chore(ginkgo): remove role and rolebinding creation by @dkarpele in #1642
- fix(webhook): normalize ghcr repository casing by @FerasMaali in #1639
- fix(api): set
WriteBackConfig.Methodas optional in API by @dkarpele in #1647 - fix: allow webhook traffic through NetworkPolicy (#1544) by @ystkfujii in #1633
- chore(deps): bump argo-cd from 3.4.1 to 3.4.2 by @chengfang in #1650
- chore(deps): bump registry-scanner from v1.2.0 to v1.2.1 by @dkarpele in #1655
- fix(test): correct assert.Equal arg order and wrong webhook type in quay test by @immanuwell in #1663
- ci: add unit-tests flag to Codecov coverage uploads by @AdamSaleh in #1665
- chore(deps): bump argocd from 3.4.2 to 3.4.3 by @chengfang in #1671
- fix(webhook): align standalone webhook HTTP/2 hardening by @doup2001 in #1588
- chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 by @dependabot[bot] in #1670
- chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1 by @dependabot[bot] in #1666
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.29.0 by @dependabot[bot] in #1668
- chore(deps): bump image-updater from 1.2.0 to 1.2.1, and argocd-operator from 0.17 to 0.18 by @chengfang in #1674
- feat: support SourceHydrator applications for image updates by @julianderks in #1475
- chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-20230722181636-7b502560cad4 to 3.1.1 by @dkarpele in #1675
- feat(webhook): enforce mandatory webhook secret configuration by @dkarpele in #1678
- fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back by @chengfang in #1679
- feat(webhook): add Azure Container Registry (ACR) webhook handler by @ruturaj220 in #1681
- fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL by @chengfang in #1683
- ci: run CI tests on push to master by @AdamSaleh in #1676
- chore(deps): bump argocd from 3.4.3 to 3.4.4 by @chengfang in #1693
- chore(deps): bump ImageUpdater from 1.2.1 to 1.2.2 by @chengfang in #1705
- Add blank lines preservation on git writeback by @rvandernoort in #1702
- chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1711
- chore(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #1710
- chore(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #1709
- chore(deps): bump alpine from 3.23 to 3.24 by @dependabot[bot] in #1708
- chore(ci): add allow-unsafe-pr-checkout: true to actions/checkout@v7 to opt in to allow checkout of fork PRs by @chengfang in #1719
- fix(write-back): resolve correct git source for implicit kustomize in multi-source apps by @rvandernoort in #1703
- feat: implement image signature verification by @dkarpele in #1706
- chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 by @dependabot[bot] in #1714
- chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #1716
- chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.42.1 by @dependabot[bot] in #1718
- chore(e2e): install cosign to gh actions by @dkarpele in #1723
- feat: image verification to work with both modern registry signature lookup and legacy signature formats; test(e2e): image signature verification by @dkarpele in #1722
- feat(argocd): support Plugin source type with git write-back by @flobz in #1707
- chore(deps): bump argocd from 3.4.4 to 3.4.5 by @chengfang in #1726
- feat(pr): Avoid creating duplicate PRs for apps sharing the same write-back-target and updates by @chengfang in #1724
- docs: add chansuke to OWNERS reviewers by @chansuke in #1731
- fix: reject cross-namespace secret references in git write-back by @dkarpele in #1732
- fix: reject cross-namespace secret references in commonUpdateSettings.pullSecret by @dkarpele in #1733
- feat: preserve YAML formatting when writing back to Helm values files by @grahamalama in #1734
- feat(git): sign write-back commits via GitHub API with GitHub App creds by @josmo in #1728
- chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #1736
- chore(deps): bump github.com/google/cel-go from 0.27.0 to 0.29.0 by @dependabot[bot] in #1737
- feat(pr): skip git clone, checkout, commit and PR/MR creation if it already exists in the remote github or gitlab by @chengfang in #1738
- fix(docs): use current values of updateStrategy (semver, newest-build, digest and alphabetical) and de-emphasize deprecated values by @chengfang in #1740
- fix(log): pass the context to git commands by @dkarpele in #1742
- feat(plugin): support applications of type plugin and plugin env variables by @chengfang in #1741
- chore(deps): bump argocd from 3.4.5 to 3.4.6 by @chengfang in #1744
- chore(deps): bump github/codeql-action from 4 to 4.37.3 by @dependabot[bot] in #1755
- chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #1756
- chore(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.0 by @dependabot[bot] in #1751
- chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #1749
- chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 by @dependabot[bot] in #1748
- chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #1752
- chore(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.19.2 by @dependabot[bot] in #1750
- chore(ci): change to run CodeQL on cron schedule only by @chengfang in #1759
- feat: support custom CA certificates for registries by @w3lld1 in #1743
- chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.1 in /registry-scanner by @dependabot[bot] in #1754
- fix(semver): exclude pre-release tags when no semver constraint is set by @pujitha24 in #1758
- chore(deps): bump argocd from 3.4.6 to 3.5.0 by @chengfang in #1761
- chore(doc): remove obsolete breaking change labels by @dkarpele in #1762
- fix(digest): pick the right live image when multiple containers share the same image by @C4tWithShell in #1757
- test: add regression coverage for force-update image with empty registry tags by @pujitha24 in #1764
- chore(go-fix): modernize code with go fix command by @chengfang in #1765
- fix(kustomize): match images by alias to prevent cross-alias collisions by @pujitha24 in #1763
- fix(argocd): retain yaml document start if exists by @stphnlwlsh in #1767
- fix(helm): improve getHelmParamNames func to return defaults for image-name and image-tag param names by @chengfang in #1771
- chore(deps): bump argocd from 3.5.0 to 3.5.1 by @chengfang in #1772
- fix(git-writeback): only commit image-managed Helm parameters to .argocd-source override file by @pujitha24 in #1770
- fix(kustomize): reject mis-configured write-back target without kustomization prefix that is a standard kustomization.yaml by @pujitha24 in #1766
- chore(deps): bump registry-scanner from 1.2.1 to 1.3.0 by @chengfang in #1776
- Release 1.3.0 by @chengfang in #1777
New Contributors
- @FerasMaali made their first contribution in #1639
- @ystkfujii made their first contribution in #1633
- @immanuwell made their first contribution in #1663
- @AdamSaleh made their first contribution in #1665
- @doup2001 made their first contribution in #1588
- @julianderks made their first contribution in #1475
- @ruturaj220 made their first contribution in #1681
- @rvandernoort made their first contribution in #1702
- @flobz made their first contribution in #1707
- @josmo made their first contribution in #1728
- @w3lld1 made their first contribution in #1743
- @pujitha24 made their first contribution in #1758
- @C4tWithShell made their first contribution in #1757
- @stphnlwlsh made their first contribution in #1767
Full Changelog: v1.2.2...v1.3.0