# Argo CD v2.4.0 — Release & Upgrade Intelligence
- **Product:** Argo CD (https://argo-cd.readthedocs.io)
- **Version:** v2.4.0
- **Released:** Jun 10, 2022
- **Impact Score:** 7/10
- **Breaking Changes:** Source flagged
- **Canonical Analysis:** https://changelogs.us/argocd/updates/v2.4.0/

## Executive Summary (TL;DR)
Argo CD v2.4.0. Source highlight: kubectl create namespace argocd

## Breaking Changes & Deprecations
- See the [Breaking Changes blog post](https://blog.argoproj.io/breaking-changes-in-argo-cd-2-4-29e3c2ac30c9) or the [2.3-to-2.4 upgrade guide](https://argo-cd.readthedocs.io/en/latest/operator-manual/upgrading/2.3-2.4/) before upgrading to understand breaking changes which may impact you.

## New Features
- feat: add --app-hard-resync flag to controller (#8928)
- feat: add caching to application js bundle since it has a unique name (#9008)
- feat: Add filter pathdoesntexist in scm generator (#9150)
- feat: add gke auth command to argocd-k8s-auth (#9190)
- feat: add printout of what has been deleted (#8894)
- feat: add support for Bitbucket Server (SCM + PR); add filters for PR (#9049)

## Improvements
- chore: Improve otel grpc traces adding span correlation (#9371)
- chore: Improve application logs adding message context (#9435)

## Bug Fixes
- CRITICAL: Argo CD will trust invalid JWT claims if anonymous access is enabled (GHSA-r642-gv9p-2wjj)
- LOW: Login screen allows message spoofing if SSO is enabled (GHSA-xmg8-99r8-jc2j)
- MODERATE: Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server (GHSA-6gcg-hp2x-q54h)
- fix: Add Content-Security-Policy configuration option (#8943)
- fix: add sh256 hashes for arm on osx for m1 cpus (#9186)
- fix: add writable /tmp mount for the applicationset controller (#9183)