Impact Score: 5/10
Argo CD v2.14.16 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: argocd · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Argo CD v2.14.16. Source highlight: There was an issue with immutable releases for v2.14.16 which caused some release steps to fail (uploading provenance and SBOMs). There should be nothing _wrong_ with v2.14.16, but v2.14.17 is equivalent with a fully-successful release.
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
✨ New Features & Capabilities (1)
- d77ecdf113d2d0a135097bcac5cb411e63d6edb8: chore: adds all components in goreman run script (cherry-pick #23777) (#23790) (@gcp-cherry-pick-bot[bot])
🔧 Bug Fixes & Patches (6)
- 5d0a4f0dd329098db016b44d6bad0dfdcfccaa2c: fix(appset): When Appset is deleted, the controller should reconcile applicationset #23723 (cherry-pick ##23823) (#23832) (@rumstead)
- d95b710055a92c2a17776de53f52fb0370576512: fix(controller): get commit server url from env (cherry-pick #23536) (#23543) (@gcp-cherry-pick-bot[bot])
- 72e2387795a4118924b05a632588b88fee6047a8: fix(security): repository.GetDetailedProject exposes repo secrets (#24389) (@crenshaw-dev)
- 8a3b2fdd2bf69bb47d440cf41f5d733c146cbf55: fix(server): infer resource status health for apps-in-any-ns (#22944) (#23707) (@crenshaw-dev)
- ddb6073e52e7c76d36c6bc5fac108dbeb492647c: fix: improves the ui message when an operation is terminated due to controller sync timeout (cherry-pick #23657) (#23673) (@gcp-cherry-pick-bot[bot])
- f8eba3e6e9a64d0fc782a2e147546d12b1028a55: fix(cherry-pick-2.14): custom resource health for flux helm repository of type oci (#24339) (@adberger)
📄 View Raw Release Notes (Original Developer Log)
## Quick Start
### Use v2.14.17
There was an [issue](https://github.com/argoproj/argo-cd/issues/24407) with immutable releases for v2.14.16 which caused some release steps to fail (uploading provenance and SBOMs). There should be nothing _wrong_ with v2.14.16, but v2.14.17 is equivalent with a fully-successful release.
### Non-HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.16/manifests/install.yaml
```
### HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.16/manifests/ha/install.yaml
```
## Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify.
## Upgrading
If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation.
## Changelog
### Bug fixes
* 5d0a4f0dd329098db016b44d6bad0dfdcfccaa2c: fix(appset): When Appset is deleted, the controller should reconcile applicationset #23723 (cherry-pick ##23823) (#23832) (@rumstead)
* d95b710055a92c2a17776de53f52fb0370576512: fix(controller): get commit server url from env (cherry-pick #23536) (#23543) (@gcp-cherry-pick-bot[bot])
* 72e2387795a4118924b05a632588b88fee6047a8: fix(security): repository.GetDetailedProject exposes repo secrets (#24389) (@crenshaw-dev)
* 8a3b2fdd2bf69bb47d440cf41f5d733c146cbf55: fix(server): infer resource status health for apps-in-any-ns (#22944) (#23707) (@crenshaw-dev)
* ddb6073e52e7c76d36c6bc5fac108dbeb492647c: fix: improves the ui message when an operation is terminated due to controller sync timeout (cherry-pick #23657) (#23673) (@gcp-cherry-pick-bot[bot])
### Other work
* 510b77546e9683f41d954c93b7e5eb9abe2bdcfc: chore(cherry-pick-2.14): replace bitnami images (#24289) (@nitishfy)
* d77ecdf113d2d0a135097bcac5cb411e63d6edb8: chore: adds all components in goreman run script (cherry-pick #23777) (#23790) (@gcp-cherry-pick-bot[bot])
* f9bb3b608ee68c974ca748397598dcd6d113b121: chore: update Go to 1.24.6 (release-2.14) (#24091) (@thevilledev)
* f8eba3e6e9a64d0fc782a2e147546d12b1028a55: fix(cherry-pick-2.14): custom resource health for flux helm repository of type oci (#24339) (@adberger)
**Full Changelog**: https://github.com/argoproj/argo-cd/compare/v2.14.15...v2.14.16
<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>