Impact Score: 5/10
Argo CD v2.11.9 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: argocd · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Argo CD v2.11.9. Source highlight: kubectl create namespace argocd
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (1)
- bd78134a69335fb5acb58625222a6fccd52ce747: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20091) (@gcp-cherry-pick-bot[bot])
📄 View Raw Release Notes (Original Developer Log)
## Quick Start
### Non-HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.9/manifests/install.yaml
```
### HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.9/manifests/ha/install.yaml
```
## Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify.
## Upgrading
If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation.
## Changelog
### Bug fixes
* bd78134a69335fb5acb58625222a6fccd52ce747: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20091) (@gcp-cherry-pick-bot[bot])
### Dependency updates
* 54ac05b91ebc180e53be1860f59e22c457bc4969: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20017) (@gcp-cherry-pick-bot[bot])
* 93f7846dbb347467f8c40e71ad8f0ffe3b9e7d5d: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#19883) (#19989) (@chengfang)
* 8b791851344c7feeb7a17a55d69848399517e31b: chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#20055) (@ishitasequeira)
**Full Changelog**: https://github.com/argoproj/argo-cd/compare/v2.11.8...v2.11.9
<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>