argoproj/argo-cd v3.4.1 on GitHub

Important

Following Helm 3.19.0 change in how Helm interprets K8s cluster version, this Argo CD release contains a change that aligns how Argo CD interprets K8s cluster version with Helm behavior.

Impact: Application Sets with Cluster Generators, that fetch clusters based on their Kubernetes version and use argocd.argoproj.io/auto-label-cluster-info on the cluster secret, need to be updated to use argocd.argoproj.io/kubernetes-version with the vMajor.Minor.Patch format instead of the previous Major.Minor format.

More details here: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.3-3.4/#cluster-version-format-change

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

05504d6 feat(appset): add Health field to ApplicationSet status (#25753) (Peter Jiang)
f83906d feat(appset): optimize appset controller performance when grabbing cluster secrets (#25624) (#25577) (rumstead)
ed6d2c5 feat(controller): Annotation to pause reconciliation for a specific cluster (#26442) (Drew Bailey, Drew Bailey)
3157fb1 feat(helm): support wildcard glob patterns for valueFiles (cherry-pick #26768 for 3.4) (#26919) (argo-cd-cherry-pick-bot[bot], Nitish Kumar)
5072899 feat(hydrator): making configurable authorName/Email used for hydration commit (#22847) (#25746) (Aditya Raj)
8ed52b2 feat(notification): add appProject access to notification templates (#26437) (#26470) (Aditya Raj)
e1aeb79 feat(ui): AppSet Slide Out Summary (#26490) (Peter Jiang, reggie-k)
5ab598e feat(ui): add annotation filtering support to applications list (#25590) (Ji Kwan)
1391e2f feat(ui): add appset tree-view details page (#26262) (Peter Jiang, reggie-k, Keith Chong)
7208578 feat(ui): appset list page and filters (#25837) (Peter Jiang)
ff45972 feat(ui): enable hydrator support in app create panel (#26485) (jwinters01, Alexandre Gaudreault)
1214946 feat(ui): support hydrator properties in summary tab (#26152) (jwinters01, Michael Crenshaw)
b414432 feat: Add application filter for operation status to UI (#25636) (Dylan Schlager)
408e99e feat: Allow custom User-Agent headers for Helm repository requests (#25473) (Yugan)
19b41b9 feat: ApplicationSet watch API (#26409) (Peter Jiang, nitishfy)
b442167 feat: Document and expose K8S API client environment variables(#8527) (#25145) (gami, Alexandre Gaudreault)
7a3d6f1 feat: Implement nmstate health checks (#26506) (#26507) (Sander Tervoert)
5859065 feat: add ApplicationSet listResourceEvents API (#25537) (Peter Jiang, Alexy Mantha)
2793097 feat: add OTEL instrumentation for authentication and handlers (#25296) (Mike Cutsail, Alexandre Gaudreault)
b7e2027 feat: add Prune and Delete as application level sync option (#23370) (Arthur Outhenin-Chalandre)
73b4d98 feat: add --no-install-recommends in argocd-base #25841 (#25852) (Jakub Rudnik, Nitish Kumar)
13bc5ae feat: add argocd account session-token command (#15277) (#24638) (Alex Eftimie, Alexandre Gaudreault, Peter Jiang)
d8635ca feat: add clear-all button to applications list filters (#26007) (Jaewoo Choi)
c2e594c feat: disable gRPC service config DNS TXT lookups by default (#26077) (Valentin Stoican, Valentin Stoican)
3cb4955 feat: expose notifications controller processors count via cmd params (#26798) (Kirill Bilchenko)
c0a2a57 feat: implement application cache synchronization in appset controller (#26578) (Alexander Matyushentsev)
ef75a2e feat: limit max certificates and known hosts in stream parsing (#25777) (Ankit Pramanik)
f85ad11 feat: remove unused reposFilter from Applications list (#24667) (Jaewoo Choi)
6f0de8b feat: update health checks for Numaflow resources (#25698) (Dillen Padhiar)

Bug fixes

9fd02aa Revert "fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.4)" (#27402) (Michael Crenshaw)
f4e7a6e [release-3.4] fix: improve perf: switch parentUIDToChildren to map of sets, remove cache rebuild (#26863) (#27110) (Jonathan Ogilvie)
21e13a6 fix(UI): show RollingSync step clearly when labels match no step (cherry-pick #26877 for 3.4) (#26882) (argo-cd-cherry-pick-bot[bot], Atif Ali)
ede9229 fix(actions): Use correct annotation for CNPG suspend/resume (#26711) (Rouke Broersma)
6665f94 fix(appcontroller): application controller in core mode fails to sync when server.secretkey is missing (#26793) (#27476) (Anand Francis Joseph)
f45ee22 fix(appset): change appset resource status count to 5000 by default (#26249) (Peter Jiang)
bb894e8 fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (#25622) (OpenGuidou)
330077c fix(appset): fix post-generator selector ignoring labels in GoTemplate mode (#26717) (Josef Kolář)
bdc3447 fix(appset): update appset resources after creation (#26511) (Peter Jiang)
59f229b fix(ci): Add missing git-lfs installer checksum for ppc64le (#26835) (Oliver Gondža)
cbc7ecd fix(ci): Inconsistent use of IMAGE_REGISTRY and IMAGE_NAMESPACE Makefile variables (#25846) (#25860) (dudinea)
2253481 fix(ci): Remove stale label when Issue/PR is updated (#26452) (S Kevin Joe Harris)
e70034a fix(ci): add .gitkeep to images dir (cherry-pick #26892 for 3.4) (#26912) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
4a5d3a7 fix(ci): add gitops-engine unit tests to CI (#25863) (Peter Jiang)
92c5389 fix(ci): ensure cherry-pick commits include DCO sign-off (#26124) (Anagha S Devan)
aadf2af fix(ci): fix deleting files on linux in make build-ui (#26134) (#26135) (dudinea)
946a3ab fix(ci): fix make image DEV_IMAGE=true on non-amd64 architecture (#25897) (#25898) (dudinea, Nitish Kumar)
b7f9f6d fix(ci): run yarn install with --frozen-lockfile (cherry-pick #27099 for 3.4) (#27350) (dudinea)
a19a83a fix(cli): uses DrySource revision for app diff/manifests with sourceHydrator (#23817) (cherry-pick #24670 for 3.4) (#27483) (argo-cd-cherry-pick-bot[bot], Aditya Raj)
956a6a1 fix(controller): handle comma-separated hook annotations for PreDelete/PostDelete hooks (#26420) (Linghao Su)
f50abb6 fix(controller): reduce secret deepcopies and deserialization (#27049) (cherry-pick release-3.4) (#27132) (rumstead)
af05c56 fix(dashboards): Correct job label for the Controller Telemetry Panel (#26548) (Daniel Barnes)
986cdf0 fix(dev): skip Tilt rebuild on test file changes (#26624) (Nitish Kumar)
63698bd fix(dex): run as user 1001 (#26726) (#26757) (Michael Crenshaw)
8a507b7 fix(dex): run as user 1001 (#26726) (#26775) (Michael Crenshaw)
99e29c7 fix(docs): Fix manifest path in Source Hydrator docs (cherry-pick #27123 for 3.4) (#27166) (argo-cd-cherry-pick-bot[bot], Oliver Gondža)
3eeebd8 fix(docs): PR title guide from refactor to chore and reformat json (#26450) (Jaewoo Choi)
d66ad45 fix(docs): update other sections of feature maturity to match feature status in overview (#26411) (Kanika Rana)
1dc85e5 fix(engine): always preserve sync status for hooks (#25692) (Alexandre Gaudreault, Regina Voloshin, github-actions[bot], reggie-k, dependabot[bot], renovate[bot], Afzal Ansari, Blake Pettersson, Julie Vogelman, Michael Crenshaw)
a1d68ca fix(engine): correctly set prune confirmation message in setRunningPhase (#25915) (Arthur Outhenin-Chalandre)
95d19f2 fix(engine): improve operation phase messages (#25668) (Alexandre Gaudreault)
8259711 fix(health): app missing health only when all resources are missing (#23995) (#25962) (Alexandre Gaudreault, Peter Jiang)
a22f33d fix(health): configconnectorcontext and configconnector (#26308) (#26309) (Niclas Mietz)
6eea558 fix(health): use note.drySha when available (#26698) (Michael Crenshaw)
afdf99f fix(helm): Improve error message when helm cmd fails (#26159) (Oliver Gondža)
67d12eb fix(hook): Fixed hook code issues that caused stuck applications on "Deleting" state (Issues #18355 and #17191) (cherry-pick #26724 for 3.4) (#27257) (argo-cd-cherry-pick-bot[bot], Nikolaos Astyrakakis)
2283784 fix(hooks): always remove finalizers (#23226) (#25916) (Alexandre Gaudreault, Leonardo Luz Almeida)
67712c1 fix(hydrator): .gitattributes include deeply nested files (#25870) (#26011) (Michael Crenshaw)
3453367 fix(hydrator): Fix compilation error (#26024) (Oliver Gondža)
ef40ba8 fix(hydrator): empty links for failed operation (#25025) (#26014) (Michael Crenshaw)
6f21978 fix(hydrator): git fetch needs creds (#25727) (#25738) (Michael Crenshaw)
a439c6c fix(hydrator): hydrated sha missing on no-ops (#25694) (#25695) (Michael Crenshaw)
6994a42 fix(hydrator): pass destination.namespace to manifest rendering (#25478) (#25699) (Sean Liao)
33247b9 fix(hydrator): preserve all source type fields in GetDrySource() (cherry-pick #27189 for 3.4) (#27196) (argo-cd-cherry-pick-bot[bot], Alexandre Gaudreault)
0a2ae95 fix(hydrator): race when pushing notes (#25700) (Michael Crenshaw)
e5e00d3 fix(hydrator): use refresh paths from drySource when source hydration is enabled (#25516) (Codey Jenkins, pbhatnagar-oss, Alexandre Gaudreault)
fee6962 fix(makefile): Improve performance of make lint-local and dependent goals (#26025) (Oliver Gondža)
4fabbce fix(metrics): more consistent oci metrics (#25549) (Blake Pettersson)
de99b70 fix(reposerver): make temp dir cleanup best-effort in TestGenerateManifestsHelmWithRefs_CachedNoLsRemote (#26742) (Nitish Kumar)
8739f91 fix(reposerver): using timeouts in http transport for Github App authentication (#26762) (Anand Francis Joseph)
0a3f634 fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.4) (#27499) (argo-cd-cherry-pick-bot[bot], Taylor Thomas, Blake Pettersson)
a244f7c fix(server): Ensure OIDC config is refreshed at server restart (cherry-pick #26913 for 3.4) (#27115) (argo-cd-cherry-pick-bot[bot], OpenGuidou)
28b90a7 fix(server): OIDC config via secrets fails (#18269) (#26214) (Valéry Fouques)
5ed403c fix(server): fix find container logic for terminal (cherry-pick #26858 for 3.4) (#26933) (argo-cd-cherry-pick-bot[bot], Linghao Su)
d9c83da fix(server): invalidate JWT tokens on logout (#26388) (Anand Francis Joseph)
df3be1c fix(server): update resourceVersion on Terminate retry (#25650) (Michael Crenshaw)
24615c8 fix(state): fix(controller): display correct SyncWave for hook resources #26208 (#26240) (Linghao Su)
aced2b1 fix(ui): Improve message on self-healing disabling panel (#26977) (cherry-pick #26978 for 3.4) (#26980) (argo-cd-cherry-pick-bot[bot], Alberto Chiusole)
eecac8e fix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (cherry-pick #27097 for 3.4) (#27363) (argo-cd-cherry-pick-bot[bot], Karim Farid, Blake Pettersson)
971bf57 fix(ui): Parameters tab should correctly show dry source parameters (#26179) (jwinters01, Alexandre Gaudreault)
8e636b7 fix(ui): add previous option to download logs functionality (#26427) (Linghao Su)
96bfc1e fix(ui): convert yaml-editor to functional component (#24921) (Mike, Michael Crenshaw, Alexandre Gaudreault)
58a6f85 fix(ui): handle 401 error in stream (cherry-pick #26917 for 3.4) (#27228) (argo-cd-cherry-pick-bot[bot], Linghao Su)
ae34305 fix(ui): improve filter autocomplete performance for large app counts (#15087) (#26082) (Rohan K)
5deef68 fix(ui): include _-prefixed dirs in embedded assets (cherry-pick #26589 for 3.4) (#26909) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)
c9a5a7e fix(ui): make yaml editor outline button opaque (#25748) (Jaewoo Choi)
a903bc4 fix(ui): monaco-editor search scroll positioning fix (#26638) (#26639) (Oleksandr Saulyak)
84f9446 fix(ui): prevent crash when navigating between Applications and Appli… (#26245) (Peter Jiang)
716339c fix(ui): prevent log viewer crash on malformed stream packets issue #26023 (#26226) (Luis Baronceli)
cc3b88e fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.4) (#27564) (argo-cd-cherry-pick-bot[bot], Honglian You)
f5de841 fix(ui): relayout Monaco editor on window resize (#25784) (Jaewoo Choi)
fd3c884 fix(ui): remove createApplication option in write repo credential list (#23550) (Linghao Su)
93c736c fix(ui): remove excess dot (#25816) (Josh Soref)
2f4c5bb fix(ui): show filter-empty state on repos list (#26160) (Jaewoo Choi)
91e9b22 fix(ui): show full labels, projects, clusters, and namespaces on hover in sidebar (#7520) (#24723) (Aditya Raj, jwinters01)
a76a876 fix(ui): standard resource icons are not displayed properly (#26216) (#26228) (Linghao Su)
d11c99a fix(ui): update AppSet UI for watch API and remove unused filters (#26631) (Peter Jiang)
6c043d3 fix: Fix excessive ls-remote requests on monorepos with Auto Sync enabled apps (26277) (#26278) (dudinea, Dan Garfield)
61c8ce2 fix: #25313 remove --client from helm version command (#25740) (Jesse Hitch)
054538b fix: AAD Domain Hint Improvement (fixes #18066) (#24639) (jhansi, pjmanda, Nitish Kumar, jhansireddy01)
696a18f fix: Add X-Frame-Options and CSP headers to Swagger UI endpoints (cherry-pick #26521 for 3.4) (#27153) (argo-cd-cherry-pick-bot[bot], Rohan Sood, rohansood10, Blake Pettersson, Copilot)
86e42fb fix: AppProject finalizer should consider apps in all allowed namespaces (#24347) (#26416) (Dhruvang Makadia)
f7b24ba fix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick #27265 for 3.4) (#27526) (argo-cd-cherry-pick-bot[bot], Xiangjing Li)
b66dea4 fix: Hook resources not created at PostSync when configured with PreDelete PostDelete hooks (cherry-pick #26996 for 3.4) (#26998) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)
f6d00b7 fix: Only show please update resource specification message when spec… (#25066) (Josh Soref)
472d50c fix: OpenTelemetryCollector health check shows 0/0 for mode: daemonset (#26391) (tank.500m)
e168d8a fix: Revert "fix(ci): ensure cherry-pick commits include DCO sign-off" (#26124) (#26243) (Kanika Rana)
f3d0c12 fix: Toggle automated.enabled to disable auto-sync for rollbacks (#25719) (Daniel Moran)
08602c2 fix: adds the missing source-name flag in app unset command (#26712) (Papapetrou Patroklos)
2232707 fix: allow automatedSyncPolicy fields to be changed to false (#26763) (Peter Jiang)
1488a13 fix: allow docker dhi helm charts to be used (#25835) (Blake Pettersson)
bcea79b fix: avoid stale informer cache in RevisionMetadata handler (cherry-pick #27392 for 3.4) (#27395) (argo-cd-cherry-pick-bot[bot], Soumya Ghosh Dastidar)
c32286a fix: close response body on error paths to prevent connection leak (#25824) (QingHe, chentiewen, Claude Sonnet 4.5)
8f9ee6d fix: compressedLayerExtracterStore+isCompressedLayer - allow tar.gzip suffixes (#26355) (erin)
4d66a20 fix: consider Replace/Force sync option on live resource annotations (#26110) (Alexandre Gaudreault)
ed4c63b fix: controller incorrectly detecting diff during app normalization (cherry-pick #27002 for 3.4) (#27014) (argo-cd-cherry-pick-bot[bot], Alexander Matyushentsev)
bde6f66 fix: correct typos across codebase (#25959) (Ekene Chris)
e017145 fix: create events with argocd namespace (#26667) (Papapetrou Patroklos)
2c5f731 fix: enable and fix modernize linter (#26352) (Matthieu MOREL)
6a10ffe fix: ensure compatibility of kubeversion.version with what helm reeturns (#26469) (Papapetrou Patroklos)
6cd65b4 fix: error sending generate manifest metadata cmp server (#25891) (Papapetrou Patroklos)
0671907 fix: fix GetAppdetails to show data from refs to other git repos (#26440) (#26544) (dudinea)
f0c694d fix: fix generator bug with templating of parameters in values (#25342) (#26696) (dudinea)
b320854 fix: fix image functionality breakage caused by --no-install-updates option in Dockerfiles (#25972) (#25999) (dudinea)
2b3eae6 fix: fixes output of argocd proj windows list PROJ - USEANDOPERATOR was missing (#26273) (Papapetrou Patroklos)
d099c24 fix: fixes the already exists error when syncing apps with replace (#26791) (Papapetrou Patroklos)
8550f60 fix: force attempt http2 with custom tls config (#26975) (cherry-pick #26976 for 3.4) (#27073) (argo-cd-cherry-pick-bot[bot], Max Verbeek)
bf1f836 fix: get app resources tree view (#26166) (Papapetrou Patroklos)
5e6449f fix: handle parse errors in ReadLocalConfig properly (#26597) (Takuma Shibuya)
f8c0d7e fix: health check doesn't detect resource deletion during sync operation (#26286) (Christopher Coco, Alexandre Gaudreault)
3a4b0a0 fix: helm flaky test (#26805) (Nitish Kumar)
275c5de fix: improves the Rabbit MQ resouce customization to better handle unknown conditions (#25941) (Papapetrou Patroklos)
4519fdf fix: include Depth field in Repository.Sanitized() response (#26572) (HARSHIL GARG)
c4f3bb8 fix: integrate split button (#25993) (#25994) (jwinters01)
4e997f0 fix: invalid error message on health check failure (#26040) (#26039) (dudinea)
cbbb19d fix: make config key optional (#26701) (Michael Crenshaw)
57e9e5e fix: manifest-generate-paths for multisource git+helm (#25531) (Artem Vdovin, Alexandre Gaudreault)
3c01ab1 fix: missing gpg-agent in argocd image (#25935) (#25937) (dudinea)
f4e667f fix: missing import (cherry-pick #27491 for 3.4) (#27504) (argo-cd-cherry-pick-bot[bot], Michael Crenshaw)
d2cb56d fix: modernize slice initialization syntax in util/argo/argo.go (#26001) (Ekene Chris)
8877365 fix: multi-level cross-namespace hierarchy traversal for cluster-scoped intermediates (#26408, #24379) (#26410) (Jonathan Ogilvie, Alexandre Gaudreault)
429fc1f fix: nil and empty ignoredifferences (#25980) (Blake Pettersson)
2d762e4 fix: optimize cli server-side diff with parallel dynamic batching (#25550) (afarbos)
ced9402 fix: panic during OIDC logout with empty token (#25874) (Papapetrou Patroklos)
401b1a8 fix: parent-child httpproxy health checking (#25714) (Greg Barasch)
dfa079b fix: pass repo.insecure flag to helm dependency build (cherry-pick #27078 for 3.4) (#27082) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
a061d1c fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.4) (#27229) (argo-cd-cherry-pick-bot[bot], Atif Ali, Keith Chong)
822a0e4 fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick #27589 for 3.4) (#27594) (argo-cd-cherry-pick-bot[bot], Blake Pettersson)
43ea991 fix: register pprof endpoints in repo-server using the params config map (#26237) (Papapetrou Patroklos)
739bc58 fix: remove deprecated --client flag from helm version (Malik Draz)
06310bc fix: remove resourceVersion from ssd (cherry-pick #27406 for 3.4) (#27461) (argo-cd-cherry-pick-bot[bot], Peter Jiang)
be08693 fix: remove stale reposFilter references (#26310) (Jaewoo Choi)
2f7d36b fix: resolve flaky TestSync_SyncWaveHookError test (#26080) (Aditya Raj)
b85887f fix: return error when cache is unavailable (#26053) (Nitish Kumar)
19a74df fix: return missing information in cluster get API (#25566) (Papapetrou Patroklos)
d7a8170 fix: revert autosync event message format change (cherry-pick #27387 for 3.4) (#27390) (argo-cd-cherry-pick-bot[bot], Soumya Ghosh Dastidar)
79b0981 fix: show pruning button when only Prune=confirm is present (#23326) (Arthur Outhenin-Chalandre, Alexandre Gaudreault)
043544c fix: skip namespace check on cluster scoped rbac resources for auth reconcile (#26403) (Christopher Coco)
6df1a5b fix: skip token refresh threshold parsing in unrelated components (#26803) (Soumya Ghosh Dastidar)
984a29c fix: skip unnecessary git state clean (#26714) (Alexander Matyushentsev)
226178c fix: stack overflow when processing circular ownerrefs in resource graph (#26783) (cherry-pick #26790 for 3.4) (#26878) (argo-cd-cherry-pick-bot[bot], Jonathan Ogilvie, Copilot)
b648248 fix: trigger app sync on app-set spec change (cherry-pick #26811 for 3.4) (#27131) (argo-cd-cherry-pick-bot[bot], Papapetrou Patroklos)
18efd0c fix: trim whitespaces when retrieving source refresh paths (#26400) (Nitish Kumar)
fee1c56 fix: update Jsonnet field tag to avoid jsonnet: {} in manifests (#25625) (Shubham Singh, Omar Nasser, shubham singh mahar)
3250327 fix: use InstanceName for cache cleanup on Application deletion (#26741) (Takuma Shibuya)
305ecb6 fix: use certificate fingerprints to deduplicate TLS certs (#25779) (Nitish Kumar)
7180deb fix: use csapgrade to patch managedFields for client-side apply migration (#26289) (Peter Jiang)
6e89ed9 fix: use force flag in copyutil symlink to prevent repo-server crashes (#26613) (ManvithaP, manvitha92)
0a29bfd fix: use unique names for initial commits (cherry-pick #27171 for 3.4) (#27198) (argo-cd-cherry-pick-bot[bot], Sean Liao)
f44ddc6 fix: wrap lines toggle causes log lines to overflow container - Fixes [Issue #27586] (cherry-pick #27627 for 3.4) (#27670) (argo-cd-cherry-pick-bot[bot], Knicholas Kennedy)
249b91d fix: wrong installation id returned from cache (cherry-pick #26969 for 3.4) (#27028) (argo-cd-cherry-pick-bot[bot], Zach Aller)

Documentation

11ec675 docs(rbac): add note documenting the role requirement for groups (#7952) (#26672) (Mathieu Garstecki)
af64957 docs: Add 'Netease Cloud Music' to USERS.md (#25922) (Ryan Wu)
726b764 docs: Add Bluesky badge to README (#25880) (Yuan Tang)
db8c801 docs: Add CodeQL in docs (#26645) (S Kevin Joe Harris)
b137439 docs: Add GitLab CI integration documentation with Dex configuration (#25413) (Afzal Ansari)
90ce178 docs: Add Imagine Learning to USERS.md (#26111) (Christian Oleson)
9e19a8f docs: Add ci prefixes for PR titles (#26471) (S Kevin Joe Harris)
fb56875 docs: Add release checklist step to reference the release-specific instructions file (#25854) (Revital Barletz, Peter Jiang, Regina Voloshin)
abde222 docs: Change heading for the complete example for argocd progressive rollout (#25878) (Barisa Obradovic, Alex Recuenco, Dan Garfield)
e682552 docs: Complements to the Gateway API ingress guide #25734 (#25739) (Quentin Ågren)
3e29c4c docs: Fix link (Seonghyeon Cho)
3dd71ea docs: Fix link correctly (Seonghyeon Cho)
d883412 docs: Fix some admonitions in docs (#26213) (Moulick Aggarwal, Moulick Aggarwal)
b911650 docs: Fix typo in Plugin generator description (#26051) (José Maia)
e3f616d docs: Fix wrong default value for applicationsetcontroller.enable.scm.providers (#26162) (Fan Zhang)
b8d4216 docs: Fixed broken links (#26083) (S Kevin Joe Harris, Regina Voloshin)
5e974b0 docs: Proposal: Source Integrity Policies (#25148) (Oliver Gondža, jannfis)
4edc1a9 docs: Revise TLS settings to include argocd-applicationset-controller and argocd-notifications-controller (#25872) (Alex Recuenco)
a6cc7ad docs: Revise web terminal setup instructions for Argo CD (#25992) (Dan Garfield, Nitish Kumar)
feab8bd docs: Set installation to match the quick-start guide in the installation section (#26259) (Alex Recuenco)
bea1139 docs: Typo synching -> syncing (#26275) (Gaston Festari)
5cce5fe docs: Update Linux host IP detection in Toolchain guide - to avoid hardcoded eth0 (#25800) (Shubham Singh, shubham singh mahar)
30e30a1 docs: Update shallow clone section for clarity (#26697) (Dan Garfield)
312a841 docs: Use udp to find preferred outbound ip address (#25812) (Josh Soref)
e7aa9b0 docs: Volunteer FourFifthsCode for v3.4 release champion (#25881) (Codey Jenkins)
7879dc0 docs: add SAP Signavio to USERS.md (#26164) (Mo Sahihi Benis)
d9b38a8 docs: add faq entry for marshaling error (#25851) (Nitish Kumar)
a66fe2a docs: add information on handling ambiguous revisions (#26052) (Nitish Kumar, Afzal Ansari)
3b24d33 docs: add infos around username for access token with bitbucket (#25588) (Nolan Emirot)
510af5c docs: add missing prefixes for PR titles (#26464) (Nitish Kumar)
faf0b75 docs: added 3.2 to 3.3 upgrade overview section (#25671) (Regina Voloshin)
b8e6a79 docs: added custom health checks section to 3.3-3.4 upgrade guide (#26812) (Regina Voloshin)
088ef94 docs: change manifests master reference to stable reference (#26035) (Regina Voloshin, argoproj-renovate[bot])
3e26594 docs: cherry-pick process (#26109) (Michael Crenshaw)
34e8935 docs: clarify that updating customLabels in ArgoCD requires a restart to the Controller to take effect (#25693) (Julie Vogelman, Michael Crenshaw)
912e216 docs: clarify the parent for syncOptions (#25989) (Josh Soref)
458837e docs: clarify v prefix in cluster version related docs for CMP Plugins and CLI (#26852) (Regina Voloshin)
2653860 docs: document dependency upgrade policy (#26826) (Michael Crenshaw)
8fb9168 docs: fix cluster generator version docs (#26847) (Regina Voloshin)
5d790e5 docs: fix description of argocd_oci_request_duration_seconds metric (#25918) (Piyush Khobragade)
43dd717 docs: fix garbled text in cluster bootstrapping helm example (#25940) (Alexander)
b40a443 docs: fix grammar, typos, and improve clarity in documentation (#26498) (Rishabh P, Nitish Kumar)
d8f9ed9 docs: fix help-wanted label link (#25839) (Jakub Rudnik)
205241f docs: fix namePrefix/nameSuffix description to reflect override behavior (shibatch, Claude (claude-sonnet-4-5))
0fe5b7e docs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick #27608 for 3.4) (#27613) (argo-cd-cherry-pick-bot[bot], Jaewoo Choi)
774f48e docs: fix typos in documentation (#25844) (Illia Oleksiuk)
69c2620 docs: fixing typo in Config Management Plugins docs (#26150) (Aidan O'Gorman)
b92b7a6 docs: grafana-org-operator healthcehck to upgrade manual (#25672) (Regina Voloshin)
4832c5e docs: improve managedNamespaceMetadata section with details on tracki… (#25536) (Afzal Ansari, Blake Pettersson)
3d97fc9 docs: instruct to enable ClientSideApplyMigration in 3.3.2 (#26547) (Regina Voloshin)
2f9bea6 docs: link to source hydrator (#25813) (Josh Soref)
fc6379b docs: recommend cluster generator in cluster boostrapping page (#26084) (Kostis (Octopus Deploy))
d655bf6 docs: rewrite [here] links (#26282) (Matt Warren, Papapetrou Patroklos)
6535078 docs: small fixes for mkdocs warnings (#26112) (Michael Crenshaw, Nitish Kumar)
03556db docs: update MAINTAINERS.md (#26496) (Jaewoo Choi)
f7dbfbd docs: updated upgrade guide 3.3-3.4 and cluster generator doc with the changed cluster version format (#26837) (Regina Voloshin)
6a3a540 docs: vscode settings recommendation is outdated (#25925) (Alex Recuenco)

Dependency updates

66835b6 chore(deps): Upgrade Kustomize to 5.8.1 (#26367) (Regina Voloshin)
11567f3 chore(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 8.0.0 (cherry-pick 27602 to 3.4) (#27606) (dudinea)
2de45e7 chore(deps): bump actions/cache from 5.0.0 to 5.0.1 (#25678) (dependabot[bot])
9147550 chore(deps): bump actions/cache from 5.0.1 to 5.0.2 (#26042) (dependabot[bot])
8c30738 chore(deps): bump actions/cache from 5.0.2 to 5.0.3 (#26183) (dependabot[bot])
4e827c8 chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#26123) (dependabot[bot])
4bfd624 chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#25726) (dependabot[bot])
796b722 chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 (#26635) (dependabot[bot])
f1c5201 chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 (#26801) (dependabot[bot])
667b7d6 chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 (#25950) (dependabot[bot])
d77f8d8 chore(deps): bump actions/setup-go from 6.2.0 to 6.3.0 (#26620) (dependabot[bot])
f76046f chore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 (#25997) (dependabot[bot])
6baa4bc chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#26675) (dependabot[bot])
3db8a41 chore(deps): bump actions/stale from 10.1.1 to 10.2.0 (#26474) (dependabot[bot])
8d24a9a chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#25679) (dependabot[bot])
38345d6 chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#26633) (dependabot[bot])
2615be4 chore(deps): bump axios from 1.12.2 to 1.13.5 in /ui-test (#26353) (dependabot[bot])
4e71de3 chore(deps): bump basic-ftp from 5.0.5 to 5.2.0 in /ui-test (#26617) (dependabot[bot])
01629cc chore(deps): bump code.gitea.io/sdk/gitea from 0.22.1 to 0.23.2 (#26231) (dependabot[bot])
67d425f chore(deps): bump codecov/test-results-action from 1.1.1 to 1.2.1 (#25703) (dependabot[bot])
40412aa chore(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 (#26414) (dependabot[bot])
c13ba1e chore(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 (#26433) (dependabot[bot])
560d428 chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#26706) (dependabot[bot])
d064cec chore(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#26172) (dependabot[bot])
3321498 chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#26689) (dependabot[bot])
dd97993 chore(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#25771) (dependabot[bot])
d8d7009 chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#26705) (dependabot[bot])
063d3b6 chore(deps): bump docker/setup-qemu-action from 3.6.0 to 4.0.0 (#26688) (dependabot[bot])
c212bb7 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.20.0 to 1.21.0 (#25975) (dependabot[bot])
040cc37 chore(deps): bump github.com/Azure/kubelogin from 0.2.13 to 0.2.14 (#25883) (dependabot[bot])
a8676ae chore(deps): bump github.com/Azure/kubelogin from 0.2.14 to 0.2.15 (#26560) (dependabot[bot])
6041e85 chore(deps): bump github.com/Azure/kubelogin from 0.2.15 to 0.2.16 (#26781) (dependabot[bot])
9182e66 chore(deps): bump github.com/alicebob/miniredis/v2 from 2.35.0 to 2.36.0 (#26103) (dependabot[bot])
e10a395 chore(deps): bump github.com/alicebob/miniredis/v2 from 2.36.0 to 2.36.1 (#26146) (dependabot[bot])
adf88c5 chore(deps): bump github.com/alicebob/miniredis/v2 from 2.36.1 to 2.37.0 (#26621) (dependabot[bot])
05620ce chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.29.9 to 1.32.7 (#26254) (dependabot[bot])
1f12498 chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.10 to 1.32.11 (#26679) (dependabot[bot])
47eb7ee chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.8 (#26492) (dependabot[bot])
9851b84 chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.8 to 1.32.9 (#26514) (dependabot[bot])
2ae64ba chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.9 to 1.32.10 (#26581) (dependabot[bot])
cd65bc0 chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.62 to 1.19.7 (#26251) (dependabot[bot])
abb60a9 chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.10 to 1.19.11 (#26680) (dependabot[bot])
f4852f7 chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.7 to 1.19.8 (#26495) (dependabot[bot])
f2fdc65 chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.8 to 1.19.9 (#26515) (dependabot[bot])
63ddc3c chore(deps): bump github.com/aws/aws-sdk-go-v2/service/codecommit from 1.33.10 to 1.33.11 (#26842) (dependabot[bot])
09fac7b chore(deps): bump github.com/aws/smithy-go from 1.24.0 to 1.24.1 (#26564) (dependabot[bot])
f50f88f chore(deps): bump github.com/aws/smithy-go from 1.24.1 to 1.24.2 (#26657) (dependabot[bot])
b4a52fc chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.1 to 4.9.2 (#25932) (dependabot[bot])
3811a30 chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.2 to 4.10.0 (#26144) (dependabot[bot])
d1089f8 chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 (#26782) (dependabot[bot])
acc4bb7 chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#26616) (dependabot[bot])
96f1266 chore(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7 (#25677) (dependabot[bot])
f1ce190 chore(deps): bump github.com/expr-lang/expr from 1.17.7 to 1.17.8 (#26459) (dependabot[bot])
60fed8b chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (cherry-pick #27101 for 3.4) (#27207) (argo-cd-cherry-pick-bot[bot], dependabot[bot])
fd1307d chore(deps): bump github.com/go-openapi/runtime from 0.29.2 to 0.29.3 (#26736) (dependabot[bot])
fe93731 chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 (#26171) (dependabot[bot])
9b10fe9 chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.88 to 0.9.89 (#26333) (dependabot[bot])
b337855 chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.89 to 0.9.91 (#26360) (dependabot[bot])
8aea561 chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.91 to 0.9.93 (#26563) (dependabot[bot])
564d17d chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.93 to 0.9.94 (#26656) (dependabot[bot])
a9da448 chore(deps): bump github.com/olekukonko/tablewriter from 1.1.2 to 1.1.3 (#26043) (dependabot[bot])
bd9c12c chore(deps): bump github.com/olekukonko/tablewriter from 1.1.3 to 1.1.4 (#26820) (dependabot[bot])
9285435 chore(deps): bump github.com/redis/go-redis/v9 from 9.17.2 to 9.17.3 (#26145) (dependabot[bot])
0c2fa1e chore(deps): bump github.com/redis/go-redis/v9 from 9.17.3 to 9.18.0 (#26475) (dependabot[bot])
b18d576 chore(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#26021) (dependabot[bot])
ca82ee1 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.10.0 to 1.11.0 (#25867) (dependabot[bot])
3ac7a0b chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.11.0 to 1.12.0 (#25934) (dependabot[bot])
2322cdc chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.12.0 to 1.13.0 (#25946) (dependabot[bot])
0da603d chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.13.0 to 1.14.0 (#25973) (dependabot[bot])
c626b20 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.14.0 to 1.16.0 (#26081) (dependabot[bot])
c757497 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.16.0 to 1.18.0 (#26143) (dependabot[bot])
9c108cb chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.18.0 to 1.19.0 (#26155) (dependabot[bot])
9d459c8 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.19.0 to 1.21.0 (#26165) (dependabot[bot])
e548ec7 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.21.0 to 1.23.0 (#26170) (dependabot[bot])
0a70881 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.23.0 to 1.25.0 (#26202) (dependabot[bot])
f255cef chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.25.0 to 1.26.0 (#26250) (dependabot[bot])
9cc0c77 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.26.0 to 1.27.0 (#26267) (dependabot[bot])
257ebc5 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.27.0 to 1.28.0 (#26292) (dependabot[bot])
7ccc6f9 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.28.0 to 1.28.1 (#26334) (dependabot[bot])
ad186cf chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.28.1 to 1.29.0 (#26358) (dependabot[bot])
e8539be chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.29.0 to 1.30.0 (#26384) (dependabot[bot])
a544bc0 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.30.0 to 1.31.0 (#26413) (dependabot[bot])
dcf0a15 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.31.0 to 1.34.0 (#26461) (dependabot[bot])
67c5fe2 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.34.0 to 1.35.0 (#26476) (dependabot[bot])
adbf9cd chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.35.0 to 1.36.0 (#26493) (dependabot[bot])
7db8ab2 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.36.0 to 1.39.0 (#26533) (dependabot[bot])
a4f9f57 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.39.0 to 1.41.0 (#26561) (dependabot[bot])
4ffad60 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.41.0 to 1.42.0 (#26605) (dependabot[bot])
9843065 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.42.0 to 1.43.0 (#26622) (dependabot[bot])
858f159 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.43.0 to 1.44.0 (#26634) (dependabot[bot])
91253dc chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.44.0 to 1.46.0 (#26655) (dependabot[bot])
89cd590 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.1 to 1.8.2 (#25676) (dependabot[bot])
106acda chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.8.2 to 1.9.0 (#25701) (dependabot[bot])
b5a91a1 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.9.0 to 1.9.1 (#25725) (dependabot[bot])
abf2233 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.9.1 to 1.10.0 (#25770) (dependabot[bot])
7825b4b chore(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#26649) (dependabot[bot])
6be8ac1 chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 (#26362) (dependabot[bot])
a195501 chore(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 (#25947) (dependabot[bot])
89fe752 chore(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 (#26361) (dependabot[bot])
5fff3b3 chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#26623) (dependabot[bot])
4524dc9 chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#26799) (dependabot[bot])
92e4b2c chore(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 (#26733) (dependabot[bot])
b3c5f4b chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 (#26734) (dependabot[bot])
93a7717 chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 (#25933) (dependabot[bot])
235bf2a chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 (#26357) (dependabot[bot])
d8b33bd chore(deps): bump golang.org/x/time from 0.14.0 to 0.15.0 (#26737) (dependabot[bot])
bac8c4b chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 (#25789) (dependabot[bot])
09b3856 chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 (#26432) (dependabot[bot])
8dfbdec chore(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 (#26458) (dependabot[bot])
37f29e5 chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 (#26735) (dependabot[bot])
ea71adb chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 (cherry-pick #26886 for 3.4) (#26952) (argo-cd-cherry-pick-bot[bot], dependabot[bot], Blake Pettersson)
a21fcf3 chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 (#26565) (dependabot[bot])
f46c387 chore(deps): bump immutable from 4.0.0 to 4.3.8 in /ui (#26690) (dependabot[bot])
5b8ce54 chore(deps): bump k8s.io/kubernetes from 1.34.0 to 1.34.2 in /gitops-engine (#25675) (dependabot[bot], reggie-k)
1a1b142 chore(deps): bump library/busybox from 2383baa to b86c79d in /test/e2e/multiarch-container (#26101) (dependabot[bot])
82ee09a chore(deps): bump library/busybox from b86c79d to e226d63 in /test/e2e/multiarch-container (#26122) (dependabot[bot])
b357063 chore(deps): bump library/busybox from d80cd69 to 2383baa in /test/e2e/multiarch-container (#25884) (dependabot[bot])
8ef0fd7 chore(deps): bump library/busybox from e226d63 to b3255e7 in /test/e2e/multiarch-container (#26229) (dependabot[bot])
0ee21af chore(deps): bump library/golang from 1.26.0 to 1.26.1 in /test/container (#26708) (dependabot[bot])
e4a28fa chore(deps): bump library/golang from 31c1e53 to 6cc2338 in /test/remote (#25847) (dependabot[bot])
23b387f chore(deps): bump library/golang from 36b4f45 to 31c1e53 in /test/remote (#25829) (dependabot[bot])
8866fcf chore(deps): bump library/golang from 6cc2338 to 8bbd140 in /test/remote (#25974) (dependabot[bot])
474d900 chore(deps): bump library/golang from a22b2e6 to 36b4f45 in /test/remote (#25680) (dependabot[bot])
79a11cb chore(deps): bump library/golang from e2ddb15 to c7e98cc in /test/container (#26780) (dependabot[bot])
21acbb8 chore(deps): bump library/redis from 8.2.1 to 8.2.2 in /test/container (#24859) (dependabot[bot])
6ab9426 chore(deps): bump library/redis from 8.6.0 to 8.6.1 in /test/container (#26579) (dependabot[bot])
2c6d97a chore(deps): bump library/redis from 5cb00b0 to 1c054d5 in /test/container (#26654) (dependabot[bot])
8c1a815 chore(deps): bump library/redis from dc123d5 to 5cb00b0 in /test/container (#26606) (dependabot[bot])
8b2ad9b chore(deps): bump library/ubuntu from 25.10 to 26.04 in /test/container (#26431) (dependabot[bot])
6a90202 chore(deps): bump library/ubuntu from 4095ef6 to fed6ddb in /test/container (#26494) (dependabot[bot])
559dc16 chore(deps): bump lodash from 4.17.21 to 4.17.23 in /ui (#26100) (dependabot[bot])
b70d144 chore(deps): bump minimatch from 3.1.2 to 3.1.3 in /ui (#26604) (dependabot[bot])
5c2a417 chore(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#26102) (dependabot[bot])
d11d025 chore(deps): bump qs from 6.11.0 to 6.14.1 in /ui (#25828) (dependabot[bot])
5cfcd0f chore(deps): bump qs from 6.14.1 to 6.14.2 in /ui (#26444) (dependabot[bot])
43a9524 chore(deps): bump renovatebot/github-action from 44.0.5 to 44.2.0 (#25702) (dependabot[bot])
28beb3e chore(deps): bump renovatebot/github-action from 44.2.0 to 44.2.1 (#25781) (dependabot[bot])
fa6f5c6 chore(deps): bump renovatebot/github-action from 44.2.1 to 44.2.2 (#25818) (dependabot[bot])
93205a7 chore(deps): bump renovatebot/github-action from 44.2.2 to 44.2.3 (#25868) (dependabot[bot])
d08a879 chore(deps): bump renovatebot/github-action from 44.2.3 to 44.2.4 (#25949) (dependabot[bot])
8b1415a chore(deps): bump renovatebot/github-action from 44.2.4 to 44.2.5 (#26059) (dependabot[bot])
e42727b chore(deps): bump renovatebot/github-action from 44.2.5 to 44.2.6 (#26156) (dependabot[bot])
a7c771f chore(deps): bump renovatebot/github-action from 44.2.6 to 46.0.1 (#26203) (dependabot[bot])
39fcff7 chore(deps): bump renovatebot/github-action from 46.0.1 to 46.0.2 (#26336) (dependabot[bot])
53a5cd3 chore(deps): bump renovatebot/github-action from 46.0.2 to 46.1.0 (#26434) (dependabot[bot])
139ecf6 chore(deps): bump renovatebot/github-action from 46.1.0 to 46.1.1 (#26460) (dependabot[bot])
296100f chore(deps): bump renovatebot/github-action from 46.1.1 to 46.1.2 (#26562) (dependabot[bot])
5e3feb4 chore(deps): bump renovatebot/github-action from 46.1.2 to 46.1.3 (#26658) (dependabot[bot])
60ee213 chore(deps): bump renovatebot/github-action from 46.1.3 to 46.1.4 (#26730) (dependabot[bot])
b5a08fa chore(deps): bump renovatebot/github-action from 46.1.4 to 46.1.5 (#26839) (dependabot[bot])
cc302ba chore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.3.1-0.20251003215857-446d8398e19c to 6.3.2 (#26332) (dependabot[bot])
36e8c52 chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 (#26761) (dependabot[bot])
0af9b67 chore(deps): bump the otel group across 1 directory with 6 updates (#26668) (dependabot[bot])
20bf53f chore(deps): bump the otel group with 4 updates (#25553) (dependabot[bot])
1762a59 chore(deps): bump the otel group with 6 updates (#26731) (dependabot[bot], reggie-k)
49d0b48 chore(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.2 (#26359) (dependabot[bot])
0f069ee chore(deps): bump tj-actions/changed-files from 47.0.2 to 47.0.4 (#26491) (dependabot[bot])
14e69bf chore(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5 (#26676) (dependabot[bot])
3b34d2a chore(deps): bump tmp from 0.2.3 to 0.2.4 in /ui-test (#24058) (dependabot[bot], Blake Pettersson)
c34d44a chore(deps): bump ubuntu in gh actions to 24.04 and ubuntu in test/remote/Dockerfile to 25.10 (#25763) (Regina Voloshin)
7925bf7 chore(deps): migrated aws sdk v1 to v2 for EKS with argocd-k8s-auth (#26200) (Regina Voloshin, Papapetrou Patroklos)
3ddf722 chore(deps): update dependency @codecov/webpack-plugin to v0.0.1-beta.12 (#25385) (renovate[bot])
81d109f chore(deps): update dependency @types/deepmerge to v2.2.3 (#25609) (renovate[bot])
7f34ee8 chore(deps): update dependency @types/minimatch to v3.0.5 (#26139) (renovate[bot])
807ff53 chore(deps): update dependency @types/prop-types to v15.7.15 (#26140) (renovate[bot])
1b85a68 chore(deps): update dependency lodash-es to v4.17.23 [security] (#26099) (renovate[bot])
c19d046 chore(deps): update docker.io/library/golang:1.25.5 docker digest to 0f406d3 (#25951) (argoproj-renovate[bot])
4409ec0 chore(deps): update docker.io/library/golang:1.25.5 docker digest to 31c1e53 (#25831) (argoproj-renovate[bot])
ef21768 chore(deps): update docker.io/library/golang:1.25.5 docker digest to 581c059 (#25966) (argoproj-renovate[bot])
5598f87 chore(deps): update docker.io/library/golang:1.25.5 docker digest to 6cc2338 (#25838) (argoproj-renovate[bot])
5113f82 chore(deps): update docker.io/library/golang:1.25.5 docker digest to 97be073 (#25820) (argoproj-renovate[bot])
f8cab49 chore(deps): update docker.io/library/golang:1.25.6 docker digest to 06d1251 (#26256) (argoproj-renovate[bot])
46e9022 chore(deps): update docker.io/library/golang:1.25.6 docker digest to 0c87ea6 (#26235) (argoproj-renovate[bot])
1d66593 chore(deps): update docker.io/library/golang:1.25.6 docker digest to 4c973c7 (#26232) (argoproj-renovate[bot])
acb30b4 chore(deps): update docker.io/library/golang:1.25.6 docker digest to ce63a16 (#26056) (argoproj-renovate[bot])
f6b0c81 chore(deps): update docker.io/library/golang:1.26.0 docker digest to b39810f (#26603) (argoproj-renovate[bot])
58993ec chore(deps): update docker.io/library/golang:1.26.0 docker digest to fb612b7 (#26779) (renovate[bot])
82be819 chore(deps): update docker.io/library/redis:8.2.3 docker digest to c4316c4 (#26130) (renovate[bot])
d35a251 chore(deps): update docker.io/library/registry:3.0 docker digest to 6c5666b (#26217) (renovate[bot])
988e4f4 chore(deps): update docker.io/library/ubuntu:25.10 docker digest to 4a9232c (#26131) (renovate[bot])
cc0752d chore(deps): update group golang to v1.25.5 (#25723) (argoproj-renovate[bot])
23c021f chore(deps): update group golang to v1.25.6 (#26034) (argoproj-renovate[bot])
51327cb chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.10.1 (#26382) (argoproj-renovate[bot], Blake Pettersson)
1f6d54c chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (#26713) (argoproj-renovate[bot], reggie-k)
ffeacae chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (#26728) (argoproj-renovate[bot])
845d1c9 chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (#26771) (argoproj-renovate[bot])
38363f3 chore(deps): update module github.com/vektra/mockery/v3 to v3.6.2 (#25995) (argoproj-renovate[bot], Regina Voloshin)
42f09f7 chore(deps): update module github.com/vektra/mockery/v3 to v3.6.3 (#26029) (argoproj-renovate[bot])
630c6e8 chore(deps): update module github.com/vektra/mockery/v3 to v3.6.4 (#26445) (argoproj-renovate[bot])
0d22f39 chore(deps): update module github.com/vektra/mockery/v3 to v3.7.0 (#26716) (argoproj-renovate[bot], Regina Voloshin)
eedf6cc chore(deps): update module k8s.io/kubernetes to v1.34.2 [security] (#25682) (renovate[bot], reggie-k)
c879b6d chore(deps): update notifications-engine to fix GitHub PR comments nil panic (#26065) (John Soutar)
da042b7 chore(deps): update notifications-engine to v0.5.1-0.20251223091026-8c0c96d8d530 (#25785) (Pasha Kostohrys, pasha)
5ec3110 chore(deps): update to helm 3.19.4 due to cve : https://github.com/helm/helm/releases/tag/v3.19.4 (#25769) (Bryan Stenson)

Other work

bbb13df Change to make codegen-local (Kevin Joe Harris)
e4a97bd Clarify database initialization/migration section (jcjveraa)
d60b41d Fixed broken links in USERS.md (Kevin Joe Harris)
ccdcf6f Merge branch 'master' into Fix-broken-links-in-users (S Kevin Joe Harris)
5e4a4ce Merge commit from fork (Alexander Matyushentsev)
987768c Merge pull request #26133 from Kevinjoeharris/Fix-broken-links-in-users (Papapetrou Patroklos)
650fa6a Merge pull request #26295 from jcjveraa/patch-2 (Papapetrou Patroklos)
ae08a3e Merge pull request #26519 from hokatabi/fix/kustomize-nameprefix-suffix-docs (Papapetrou Patroklos)
46ff85a Merge pull request #26546 from Kevinjoeharris/codegen-local (Papapetrou Patroklos)
973c3f2 Merge pull request #26569 from sh-cho/fix-docs-link (Papapetrou Patroklos)
1d50c48 Merge pull request #26590 from sh-cho/fix-docs-link-correctly (Papapetrou Patroklos)
9e9a49d Merge pull request #26643 from malikdraz/fix/helm-version-deprecated-flag (Papapetrou Patroklos)
bd284b1 [docs] Add database initialization instructions example-header (jcjveraa)
849815e chore(applicationset): Fix modernize linter (#26299) (Matthieu MOREL)
34ccf86 chore(applicationset): Fix modernize linter (#26320) (Matthieu MOREL)
2743392 chore(applicationset): Fix modernize linter (#26326) (Matthieu MOREL)
989fa6f chore(appset): basic progressive sync e2e tests (#26092) (Kanika Rana, krana limaDocker)
216611f chore(ci): migrate from deprecated codecov action (#25704) (Michael Crenshaw)
286c6b8 chore(cmd): Fix modernize linter (#26298) (Matthieu MOREL)
76162a9 chore(cmd): Fix modernize linter (#26321) (Matthieu MOREL)
b48ed49 chore(cmd): unify CLI names via common constants and simplify main dispatch (#24486) (jaehanbyun)
6b2b066 chore(cmpserver): Fix modernize linter (#26317) (Matthieu MOREL, Blake Pettersson)
ac83f1d chore(commitserver): Fix modernize linter (#26327) (Matthieu MOREL)
88223b0 chore(common): Fix modernize linter (#26312) (Matthieu MOREL, Blake Pettersson)
e2f7e7d chore(controller): Fix modernize linter (#26303) (Matthieu MOREL)
0c9039e chore(controller): Fix modernize linter (#26313) (Matthieu MOREL, Blake Pettersson)
326831a chore(docs): add 3.4 release approver and checklist (#26528) (Codey Jenkins)
6e0c949 chore(hack): Fix modernize linter (#26304) (Matthieu MOREL)
2e63883 chore(hydrator): improve error message (#25737) (Michael Crenshaw)
7ccb6ce chore(migration): migrate to aws-sdk-go-v2 (#26439) (Nitish Kumar)
2bea8c0 chore(pkg): Fix modernize linter (#26314) (Matthieu MOREL, Blake Pettersson)
ac0c63e chore(refactor): bump notifications-engine to include Teams adaptive card fix (#26449) (Jaewoo Choi)
342aea4 chore(reposerver): Fix modernize linter (#26315) (Matthieu MOREL, Blake Pettersson)
0cff632 chore(server): Fix modernize linter (#26324) (Matthieu MOREL)
a108a84 chore(server): Fix modernize linter (#26328) (Matthieu MOREL)
2e1d81d chore(test): Fix modernize linter (#26301) (Matthieu MOREL)
28ca821 chore(tilt): use manifest image name instead of kustomize override (#26190) (Codey Jenkins)
b912405 chore(ui): add qeId to paginate dropdown menus (#25929) (Jaewoo Choi)
a369ae2 chore(util): Fix modernize linter (#26300) (Matthieu MOREL)
1a62c87 chore(util): Fix modernize linter (#26316) (Matthieu MOREL, Blake Pettersson)
1d65d8b chore(util): Fix modernize linter (#26323) (Matthieu MOREL)
34eeede chore(util): Fix modernize linter (#26329) (Matthieu MOREL)
1b4398b chore(util): Fix modernize linter (#26342) (Matthieu MOREL)
847b8b2 chore(util): Fix modernize linter (#26344) (Matthieu MOREL)
e208035 chore: Add C.H. Robinson to USERS.md (#26825) (Anudeep Reddy)
76a1413 chore: Make links accessible + friendly (#26815) (Josh Soref)
91a1311 chore: Remove unnecessary "CD" suffix in MAINTAINERS.md (#25778) (Yuan Tang)
4c77f0c chore: add maintainers name in the MAINTAINERS.md file (#25685) (Nitish Kumar)
1049d40 chore: add tests to validate ConfigMap/Secret key removal in server-side diff (#25216) (pedro-cs-ribeiro, Pedro Ribeiro, Leonardo Luz Almeida)
6740282 chore: adds Pat and Reggie as release champion and approver for 3.5 (#26748) (Papapetrou Patroklos)
251c366 chore: bump argo-ui version (#26629) (jwinters01)
e8eebd7 chore: bump gitops-engine with force+replace test (#24508) (Alexandre Gaudreault)
7f877a6 chore: bumps dex version to 2.45.0 (#26609) (Papapetrou Patroklos)
b2df604 chore: bumps go redis client 9.17.2 (#25643) (Papapetrou Patroklos, dependabot[bot])
b1a93b4 chore: bumps golang version everywhere to the latest 1.25.5 (#25716) (Papapetrou Patroklos)
a2e0b6f chore: bumps golang version to 1.26 in all places (#26393) (Papapetrou Patroklos, Nitish Kumar)
08390e2 chore: bumps notification engine to the latest (#25887) (Papapetrou Patroklos)
b543e18 chore: bumps ubuntu base docker image to 25.10 (#25758) (Papapetrou Patroklos)
6a597c9 chore: fix make test running all the gitops-engine tests when requested to test specific ArgoCD module (#26089) (#26090) (dudinea)
0cdd44b chore: fix gitops-engine mod name so it can be referenced by external repos (#26407) (Leonardo Luz Almeida)
8515358 chore: improve app install ID error (#26178) (Michael Crenshaw)
7acd930 chore: install git-lfs 3.7.1 version using an install script (#26465) (Papapetrou Patroklos, Nitish Kumar)
d875c61 chore: make getRepositorySecret more readable (#26827) (Michael Crenshaw)
9213601 chore: migrate k8s.gcr.io to registry.k8s.io in install manifests (#25802) (Aya Hosni, Nitish Kumar)
9cfcd2d chore: placate Sonar by ignoring tetsdata files (#26371) (Regina Voloshin)
5959693 chore: stop using the deprecated fields of the cluster structure (#25745) (Papapetrou Patroklos)
4c59c3c chore: unify clientOpts usage in command parameters (#24251) (jaehanbyun, Nitish Kumar, Blake Pettersson)
b5e0921 chore: update generated files from codegen (shibatch)
c86e32b chore: update go-oidc to v3.17.0 (#26822) (Mike Cutsail)
5345a2a chore: update golangci-lint to v2.8.0 (#26354) (Matthieu MOREL)
a3b4c83 chore: update redis-ha chart to 4.35.10 (#26453) (Tuxthepirate, Blake Pettersson)
5e7bb39 chore: use base ref for cherry-pick prs (#26551) (Blake Pettersson)
18fe8c4 chore: use server-side apply for CRDs in Tiltfile to fix annotation size limit (#26419) (Linghao Su)
d63aa84 ci: Make codecov steps conditional on codecov secret existence and enable running them on forks (#25765) (Regina Voloshin)
b0488f5 ci: Revive CodeCov steps (#26350) (Regina Voloshin)
cf53ed7 ci: Skip CodeQL for documentation-only changes (#26602) (S Kevin Joe Harris, rumstead)
7477ecb ci: exclude gitops engine bumps from renovate (#26787) (Regina Voloshin)
1418e87 ci: exclude testdata from sonar.exclusions (#26398) (Regina Voloshin)
fdbe19a ci: label stale issues and PRs without auto-closing (#26318) (S Kevin Joe Harris)
a46baf4 ci: make Upload code coverage information to codecov.io step always run (#26379) (Regina Voloshin)
c85d655 ci: run pr-title-check on pull-request (#26662) (Regina Voloshin)
884b639 ci: test against k8s 1.34.2 (#25856) (Regina Voloshin)
e8895b8 ci: test against k8s 1.35.0 (#26062) (Regina Voloshin)
fb6a46c ci: upgrade codeql for go 1.26 support and give renovate post upgrade commands (#26446) (rumstead)
6facafc crate changelog with git instead of github (reggie-k)
afdb3fe docs(operator-manual): fix typos and improve clarity (#26542) (Rishabh Pandey)
ff83056 fix(repo-server): optimize repoLock on checkout for manifest-generate-paths (#26468) (Artem Vdovin)
b61b08d fix(repo-server): optimize short ref resolution in revision comparison (#26456) (Rodrigo Fior Kuntzer)
3ce6f14 refactor: remove helper pointer functions in pull_request tests (#26598) (Takuma Shibuya)
6795b80 refactor: replace ptr.To with new(expr) (#26534) (Takuma Shibuya)
499ba48 test only goreleaser and a dd an author template (reggie-k)
7ed8a8b test only goreleaser and a dd an author template (reggie-k)
2d19fa0 test(e2e): CMP test fails locally on Mac (#25901) (Alexandre Gaudreault)
95c17b6 test(e2e): ExpectConsistency was not consistent (#26778) (Alexandre Gaudreault)
b9c4c2b test(e2e): add e2e tests for reverse deletionOrder when progressive sync enabled (cherry-pick #26673 for 3.4) (#27263) (argo-cd-cherry-pick-bot[bot], Kanika Rana)
dab6f3b test(e2e): add isolation by ensuring unique name (#25724) (Alexandre Gaudreault)
b0e4e84 test(e2e): configurable tmp dir locally (#25780) (Alexandre Gaudreault, dependabot[bot], Pasha Kostohrys, pasha, Regina Voloshin, Shubham Singh, shubham singh mahar, github-actions[bot], CI, Josh Soref, argoproj-renovate[bot], Jakub Rudnik, Illia Oleksiuk, Aya Hosni, Nitish Kumar)
ee1bf89 test(e2e): fix TestDeletionConfirmation flakiness (#25902) (Alexandre Gaudreault)
e988c55 test(e2e): fix invalid AppSet test on master (#25939) (Alexandre Gaudreault)
0114636 test(e2e): oras binary not found locally if not installed in path (#25751) (Alexandre Gaudreault)
f8899ee test(e2e): unstable CMP e2e test when running locally (#25752) (Alexandre Gaudreault)
4aa2ba4 test(e2e): update local certs so they are valid on MacOS (#25864) (Alexandre Gaudreault)
9a777c6 test(engine): cleanup hook tests (#25673) (Alexandre Gaudreault)
48f01b5 test(engine): refactor engine tests to ignore dry-run results (#25674) (Alexandre Gaudreault)
9728b6c ci: replace goreleaser github api calls with git commands (cherry-pick #27706 for 3.4) (#27710) (argo-cd-cherry-pick-bot[bot], Regina Voloshin)

Full Changelog: v3.4.1...v3.3.9