Argo CD v2.7.4 — Release Notes & Engineering Impact

## Quick Start ### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.4/manifests/install.yaml ``` ### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.4/manifests/ha/install.yaml ``` ## 🛑 Known Issues [Sidecar-installed Config Management Plugin discovery may fail](https://github.com/argoproj/argo-cd/issues/13940) for Applications whose `spec.source.path` is not `""` or `"."`. If you use sidecar Config Management Plugins which rely on running discovery rules in the Application's specified path, your Application may fail to refresh with an error about no supported plugins being found, or the CMP may incorrectly claim that it does support the app, and **it may produce unpredictable manifests, including _no manifests_, which will prune all your resources**. If you are affected, use >= 2.7.5. ## Release Signatures and Provenance All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify. ## Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ## Changelog ### Features * 23a07991348d0fc573006539220888ccd4372d82: feat: add css to support external custom style (#13279) (#13746) (@gcp-cherry-pick-bot[bot]) * ed828e9ddbd66972b58accab19fdc1f66fac5f64: feat: add ssh.github.com to SSH known hosts (#13592) (#13765) (@gcp-cherry-pick-bot[bot]) ### Bug fixes * f4848bbaaa1d1268c7cef6e3601836e570dad721: fix(appset): add ApplicationSet ProgressiveSync handling to clean up old appStatus entries when Applications are removed or RollingSync is disabled (#13419) (#13759) (@gcp-cherry-pick-bot[bot]) * 7562607e2b6b042c813e2ccebac42f9089a22da6: fix(appset): Post selector with Go templates in ApplicationSet (cherry-pick #13584) (#13822) (@m13t) * 9697cbf1e9a07c7d2dfb63a3e1ed08aef6b0c14a: fix(appset): allow cluster urls to be matched (#13715) (#13770) (@blakepettersson) * 25d5ad97a052dc89d027b0cf7ed859538050aba0: fix(doc): deep links example fix (#13855) (#13857) (@gcp-cherry-pick-bot[bot]) * 419ac0e7536a18c8c3ef84bef5336d9b841bb080: fix(kustomize): allow using build env in images (#13745) (#13756) (@gcp-cherry-pick-bot[bot]) * 7c9b1c5d78125f21d094c0db5c69653539806dd6: fix(ui): Fix Link warnings (#13694) (#13854) (#13890) (@gcp-cherry-pick-bot[bot]) * f1c4ed2d7b2603a94c2bbfed63825bde8476672a: fix(ui): Patch Resource missing appNamespace (#13839) (#13840) (@gcp-cherry-pick-bot[bot]) * 2db86afb78745066cee44b286b1cacfe4f7fd97a: fix(ui): Stop using the deprecated url format for gitlab instances (#13687) (#13767) (@gcp-cherry-pick-bot[bot]) * b3f0979e71b59a19dcad4a222cfec08f2ccb377b: fix: CMPv2 does not allow symlinks to adjacent files in same git repo. Fixes #13342 (#13360) (#13669) (@gcp-cherry-pick-bot[bot]) * ca5aced6d340fd462543a796be6b8698a969c131: fix: CVE-2023-1732 (#13748) (#13893) (@jmeridth) * 0bf029a0e3ac1fc81bbf4bcb30b0caa398bbd874: fix: Regression in signature verification for git tags (#12797) (#13113) (@gcp-cherry-pick-bot[bot]) * 07f9c542aa4adc0085990fe3351c4caabce35eb0: fix: argocd app sync/wait falsely failed with completed with phase: Running (#13637) (#13672) (@gcp-cherry-pick-bot[bot]) * f74235726a6ad23a967ddc702e08043b70ce714e: fix: do not replace namespaces (#13758) (#13769) (@blakepettersson) * 8c2b8634776279c3b764732543ebbda4be779b53: fix: ensure repositories are correctly marked with `inherited` creds in CLI output (#13428) (#13789) (@gcp-cherry-pick-bot[bot]) ### Documentation * 7b428e9ff75ee4939bc69130466d21a6feda4f7e: docs: Fixed titles in app deletion doc (#13469) (#13782) (@gcp-cherry-pick-bot[bot]) * 97cf0bf7360f7468dce4b453b622e63322f2f49f: docs: Update disaster_recovery.md to reflect quay.io as docker container registry (#13520) (#13790) (@gcp-cherry-pick-bot[bot]) * 80c2912805c21df02b0a4456b075d7fcd2c68233: docs: add helm values declarative syntax (#13661) (#13778) (@gcp-cherry-pick-bot[bot]) * 3f33817b6ad915c5f3ca8ac53c70e88a4c8cae78: docs: correct indentation for gke ingress (#13680) (#13761) (@gcp-cherry-pick-bot[bot]) * 8d23f51340c509b3bf66085cb759c343076bb252: docs: fix deep links docs formatting (#13747) (#13837) (@gcp-cherry-pick-bot[bot]) * 0e7ce4d43273c1e66b69566b4ab2ace9eb0c4b68: docs: fix incorrect instructions for site documentation (#13209) (#13773) (@gcp-cherry-pick-bot[bot]) * 6f4b4d321239ed5bd8a7e85ef4e7c12693c5dfe1: docs: redirect old CMP page to new one (#13877) (#13878) (@gcp-cherry-pick-bot[bot]) * fb2e33ba3af29a2e154d328a7bed69d232a0b522: docs: update openunison authChainName (#13531) (#13793) (@gcp-cherry-pick-bot[bot]) ### Other work * afe3b81fe16866b08674655f69d4f276e3eab788: fix(appset) [ISSUE-13501] adjust NotIn operator behavior of AppSet Progressive Syncs to match documentation (#13551) (#13760) (@gcp-cherry-pick-bot[bot]) **Full Changelog**: https://github.com/argoproj/argo-cd/compare/v2.7.3...v2.7.4 <a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>