Quick Start
Important
A potential bug with application reconciliation has been identified in this release. The application controller may fail to refresh applications, causing an application to not sync / show resources as out of sync.
Issue: #27344 – Application controller not refreshing applications
Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/install.yamlHA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/ha/install.yamlRelease Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the official blog post
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
- ea51bd8: [release-3.3] fix: improve perf: switch parentUIDToChildren to map of sets, remove cache rebuild (#26863) (#27108) (@jcogilvie)
- 4d2f261: fix(ci): run yarn install with --frozen-lockfile (cherry-pick #27099 for 3.3) (#27351) (@dudinea)
- 671efff: fix(controller): reduce secret deepcopies and deserialization (#27049) (cherry-pick release-3.3) (#27129) (@rumstead)
- a77c150: fix(docs): Fix manifest path in Source Hydrator docs (cherry-pick #27123 for 3.3) (#27167) (@argo-cd-cherry-pick-bot[bot])
- f0b924f: fix(server): Ensure OIDC config is refreshed at server restart (cherry-pick #26913 for 3.3) (#27114) (@argo-cd-cherry-pick-bot[bot])
- 7eedc7a: fix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (cherry-pick #27097 for 3.3) (#27365) (@argo-cd-cherry-pick-bot[bot])
- b0e0415: fix(ui): handle 401 error in stream (cherry-pick #26917 for 3.3) (#27227) (@argo-cd-cherry-pick-bot[bot])
- 3b12b2e: fix: Add X-Frame-Options and CSP headers to Swagger UI endpoints (cherry-pick #26521 for 3.3) (#27154) (@argo-cd-cherry-pick-bot[bot])
- 4939e1f: fix: force attempt http2 with custom tls config (cherry-pick #26976 for 3.3) (#27358) (@SamyDjemai)
- e372a7f: fix: pass repo.insecure flag to
helm dependency build(cherry-pick #27078 for 3.3) (#27083) (@argo-cd-cherry-pick-bot[bot]) - 99e88e0: fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.3) (#27230) (@argo-cd-cherry-pick-bot[bot])
- 2512512: fix: trigger app sync on app-set spec change (cherry-pick #26811 for 3.3) (#27130) (@argo-cd-cherry-pick-bot[bot])
- e451591: fix: use force flag in copyutil symlink to prevent repo-server crashes (cherry-pick #26613 for 3.3) (#27057) (@argo-cd-cherry-pick-bot[bot])
- b948ff0: fix: use unique names for initial commits (cherry-pick #27171 for 3.3) (#27197) (@argo-cd-cherry-pick-bot[bot])
Dependency updates
- 899c5e8: chore(deps): bump fast-xml-parser from 4.5.3 to 4.5.6 in /ui - 3.3 (#27360) (@keithchong)
- 7fd134a: chore(deps): bump go-jose from 4.1.3 to 4.1.4 (cherry-pick #27101 for… (#27208) (@blakepettersson)
- 2daefc0: chore(deps): update notifications-engine dependency in release-3.3 to v0.5.1-0.20260316232552-d27ba0152c1c (#27093) (@pasha-codefresh)
Other work
- 45cbc84: test(e2e): add e2e tests for reverse deletionOrder when progressive sync enabled (cherry-pick #26673 for 3.3) (#27340) (@ranakan19)
Full Changelog: v3.3.6...v3.3.7
