Impact Score: 5/10
Argo CD v3.1.2 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: argocd · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Argo CD v3.1.2. Source highlight: There was an issue with immutable releases for v3.1.2 which caused some release steps to fail (uploading provenance and SBOMs). There should be nothing _wrong_ with v3.1.2, but v3.1.3 is equivalent with a fully-successful release.
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (6)
- fe6efec8f456db7ed7bbe2bbc05807b6c3e9228c: fix(appset): add applicationsets to the built-in readonly role (#24190) (#24318) (#24321) (@crenshaw-dev)
- 30d8ce66e28e993e9bc9a331f60a358a70f660ce: fix(appset): prevent idle connection buildup by cloning http.DefaultTransport in Bitbucket SCM/PR generator (#24264) (@anandf)
- 7982a746005e9ea7832c7f878b4a437a81936983: fix(discovery): add missing lua syntax and return to discovery (fixes #24257) - 3.1 (#24268) (@jan-mrm)
- 60c62a944b155702e6d89cbef4c04ff0f525692f: fix(security): repository.GetDetailedProject exposes repo secrets (#24391) (@crenshaw-dev)
- 20447f7f575125aa45e4efad7e64b619dbae5ef2: fix: downgrade go-git (#24288) (release-3.1) (#24317) (@blakepettersson)
- ed9149beead1d373423797c8627dbb59449587b1: fix(cherry-pick-3.1): custom resource health for flux helm repository of type oci (#24341) (@adberger)
📄 View Raw Release Notes (Original Developer Log)
## Quick Start
### Use v3.1.3
There was an [issue](https://github.com/argoproj/argo-cd/issues/24407) with immutable releases for v3.1.2 which caused some release steps to fail (uploading provenance and SBOMs). There should be nothing _wrong_ with v3.1.2, but v3.1.3 is equivalent with a fully-successful release.
### Non-HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.2/manifests/install.yaml
```
### HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.1.2/manifests/ha/install.yaml
```
## Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify.
## Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the [official blog post](https://blog.argoproj.io/announcing-argo-cd-v3-1-f4389bc783c8)
## Upgrading
If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation.
## Changelog
### Bug fixes
* fe6efec8f456db7ed7bbe2bbc05807b6c3e9228c: fix(appset): add applicationsets to the built-in readonly role (#24190) (#24318) (#24321) (@crenshaw-dev)
* 30d8ce66e28e993e9bc9a331f60a358a70f660ce: fix(appset): prevent idle connection buildup by cloning http.DefaultTransport in Bitbucket SCM/PR generator (#24264) (@anandf)
* 7982a746005e9ea7832c7f878b4a437a81936983: fix(discovery): add missing lua syntax and return to discovery (fixes #24257) - 3.1 (#24268) (@jan-mrm)
* 60c62a944b155702e6d89cbef4c04ff0f525692f: fix(security): repository.GetDetailedProject exposes repo secrets (#24391) (@crenshaw-dev)
* 20447f7f575125aa45e4efad7e64b619dbae5ef2: fix: downgrade go-git (#24288) (release-3.1) (#24317) (@blakepettersson)
### Other work
* b3ad040b2cfb33837a910599e96c8026d86412b6: chore(cherry-pick-3.1): replace bitnami images (#24101) (#24286) (@nitishfy)
* ed9149beead1d373423797c8627dbb59449587b1: fix(cherry-pick-3.1): custom resource health for flux helm repository of type oci (#24341) (@adberger)
* 6de4f7739b9350832971931247f4eb5a75cd8f7f: fix(cherry-pick-3.1): handle missing resources on UI (#24357) (@pjiang-dev)
**Full Changelog**: https://github.com/argoproj/argo-cd/compare/v3.1.1...v3.1.2
<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>