Impact Score: 5/10
Argo CD v2.8.4 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: argocd · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Argo CD v2.8.4. Source highlight: kubectl create namespace argocd
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (6)
- fix(appset): Revert applicationset-name labels (cherry-pick #15324)
- fix: handle annotations for resources with ':' in the name (#15101) (cherry-pick #15380)
- fix(appsets): gotemplate can cause panic from nil dereference (#15377) (cherry-pick #15378)
- fix: Stop appending :443 to the server address when using grpc-web (cherry-pick #15435)
- fix: extends clusterRole to allow cronjob and Argo workflows triggers (cherry-pick #15300)
- fix: Allow retrieving badges in other namespaces (#15468) [release-2.8]
📄 View Raw Release Notes (Original Developer Log)
## Quick Start
### Non-HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.4/manifests/install.yaml
```
### HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.4/manifests/ha/install.yaml
```
## Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify.
## Upgrading
If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation.
## What's Changed
* fix(appset): Revert applicationset-name labels (cherry-pick #15324) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15422
* fix: handle annotations for resources with ':' in the name (#15101) (cherry-pick #15380) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15414
* fix(appsets): gotemplate can cause panic from nil dereference (#15377) (cherry-pick #15378) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15434
* fix: Stop appending :443 to the server address when using grpc-web (cherry-pick #15435) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15470
* fix: extends clusterRole to allow cronjob and Argo workflows triggers (cherry-pick #15300) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15487
* fix: Allow retrieving badges in other namespaces (#15468) [release-2.8] by @jannfis in https://github.com/argoproj/argo-cd/pull/15482
* fix: Gitlab scm_provider - don't create transport from scratch (#15424) (cherry-pick #15425) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15471
* fix(controller): make managed namespaces more 'prune-proof' (cherry-pick #13999) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15488
* chore(deps): bump github.com/cyphar/filepath-securejoin from 0.2.3 to 0.2.4 (cherry-pick #15401) by @gcp-cherry-pick-bot in https://github.com/argoproj/argo-cd/pull/15492
* Bump version to 2.8.4 on release-2.8 branch by @github-actions in https://github.com/argoproj/argo-cd/pull/15493
**Full Changelog**: https://github.com/argoproj/argo-cd/compare/v2.8.3...v2.8.4