Argo CD v3.2.0 — Release Notes & Engineering Impact

## Quick Start ### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/install.yaml ``` ### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/ha/install.yaml ``` ## Release Signatures and Provenance All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify. ## Release Notes Blog Post For a detailed breakdown of the key changes and improvements in this release, check out the [official blog post](https://blog.argoproj.io/argo-cd-v3-2-release-candidate-4c939b63d9c4). ## Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. > Please note that users operating large monorepos may encounter repo-server lock contention requiring pod restarts. A [fix](https://github.com/argoproj/argo-cd/pull/25127) is under review and will be included in the next patch release. ## Changelog ### Features * be8e79eb310a0768c9045cc43754e2dd249ef262: feat(appset): add pprof endpoints (cherry-pick #25044 for 3.2) (#25051) (@rumstead) * 79f152c1ba98112f388cb3fe2df8c89c24f1d780: feat(appset): deleting applications in order when Progressive sync enabled on applicationSet (#23465) (@ranakan19) * b1a9fab70c6467040bf579cab8b7beb20b654b91: feat(appset): enhance ApplicationSet status debugging logs (#23869) (@somln) * a5c6898655b1a6ce365a3aa9daeba09ac83a4fda: feat(appset): increase concurrent reconcile maximum to max int64 (#23721) (@rumstead) * 6a2077642e29d7a5c6017d496dae861230cfa7e5: feat(cli): Support Server-Side Diff CLI (#23978) (@pjiang-dev) * 69f7d397174b90e02eca0b8cf08d022c649a3f3c: feat(cli): add 'get-resource' command (#23196) (#23609) (@cjcocokrisp) * 853b8dddd383dc4c65554e353b0bc6083438e943: feat(cli): support password prompt input when --password is not provided in bcrypt cli (#23906) (@gyu-young-park) * 5a8b427322179e30f5e42a2ef92afa4a964184be: feat(controller): Permit using newer revision when retrying failed sync (#11494) (#23038) (@olivergondza) * 5c9a5ef9a65f8e04e729fbae54a9310c0a42f6c2: feat(health): Add healthCheck for CRD DatadogMetric (#23464) (@Nicolas-Richard) * d3de4435ce86f3f85a4cc58978b2544af2ac4248: feat(health): CronJob health and suspend, resume and terminate Job actions (#23991) (@agaudreault) * 36f1a59c09ad4ef384689fa0699ff7eba60f4a20: feat(health): add health checks for GitOps Promoter (#23663) (@crenshaw-dev) * 99fea7c12e03c45c938284d30414585cda5714c7: feat(helm): upgrade to 3.18.3 (#23618) (@crenshaw-dev) * e8e39a996e847972beb6c5eac465af09e37e7fe5: feat(helm): upgrading helm to 3.18.4 (#23724) (@mubarak-j) * 6f6c39d8f42bab2bdae7ffc768fc22509020b083: feat(hydrator): Commit message templating (#23679) (#24204) (@pbhatnagar-oss) * e85e353b81effb2edf8ded13e146fe4f72ad82f3: feat(hydrator): Credential template to source hydrator (#23999) (@pbhatnagar-oss) * 562194b35ccb1fe71dff51d3b4f8c5a3f5c89048: feat(hydrator): add .gitattributes file to hydrated repo root (#23678) (#23725) (@FourFifthsCode) * 8b2799c51c34e91bd83a3fa4ae4122bd614ade66: feat(hydrator): parallelize repo-server calls (#24451) (#24436) (@crenshaw-dev) * a6a78ef8d623b8e47fd453d10cf716b4b6fea1d4: feat(kustomize): upgrade to 5.7.0 (#23619) (@crenshaw-dev) * d954789d47276354371556ff97e6a7c3840440e0: feat(server): 3scale health checks (#24327) (#24326) (@ammachado) * 5b8e4b57aca5ad47d16713f40bfe519c5904b57f: feat(server): pass authenticated userId as header to extensions (#24356) (@agaudreault) * 2229f9d6fceb173240f8c4a14bae798bf84dab90: feat(ui): Add hydration in status to dashboard application tiles (#24319) (@adityaraj178) * 13c47ee244c72f34b57f07d427d34e35fef88446: feat(ui): Added repo connection state message (#24175) (@surajyadav1108) * 72d054d7721e80cf8ca27adb25f36bd2aadfbc4d: feat(ui): Requests info for Cpu and Mem added to Pod details (#20637) (@surajyadav1108) * 762114c6dfae3000dd0e0ce542b1fe337ac84892: feat(ui): Sort by application-sync-order in the list page (#23521) (#24191) (@downfa11) * 97af89a3b3d8a812579fa722d6ee80ebc0db514f: feat(ui): add prune option to application rollback (#23861) (#23932) (@anthisfan) * 8d018bbf2e768c5adc05bc5b8ed45aed85be45e1: feat(ui): add sortable columns to application list (#24213) (#24535) (@downfa11) * 6212ea2afb4140625f8672d42bef7dd6a2beb301: feat(ui): adjust line-height and spacing for multi-line text in details row (#24173) (@jiwlee97) * 26b970b5bd28d344b05d042432f322033494f1cf: feat: Add gRPC health check in argocd-server (#24276) (@krapie) * dcf1965c529790855647f036e4e7ea0323fbf812: feat: Add health checks for Coralogix (#23853) (@daniel-leinov) * 4e63bc756394d93c684b6b8e8b3856e0e6b3f199: feat: Adding ExtensionService health-check (#23576) (@solomon-kibret) * be042c4474d2591593b4c106d59e8ea456827bf8: feat: AppSet PR generator return 0 results upon repo not found instead of failing (#23447) (@reggie-k) * 3401d3bf924c2b1a9ba157c484519ad55083fab2: feat: Export metrics to track number of users (#20801) (#23343) (@sathiya06) * c447628913da1c0134bbb1d21a9ae366804b4a8e: feat: Implement Altinity clickhouse-operator CRD health checks (#24017) (@acze) * 6028dea3a5dd58bf6561f65166557b172c3c7489: feat: add OpenTelemetry trace context propagation for HTTP requests (#23029) (@yafeiaa) * 3af3a056a2d4ba6a007c7c42bc1dbc08eba7682a: feat: add sso-host flag for OAuth2 login configuration (#22738) (#22784) (@PaleHazy) * feab307df3c74fde25e056c646c4dae42fdbd900: feat: add status.resourcesCount field to appset and change limit default (#24698) (#24711) (@alexmt) * 29df864ae1ae069cd5814339c6ed2d71ab9b1f74: feat: add title matching filter for Pull Request Generator (#23569) (@nitishfy) * fca42e3fd46d86fa48d824e601cdca78822e3aa3: feat: log a warning instead of debug when repository webhook does not match an application (#23939) (@fernandocarletti) * 7ae14c89d949d4aa634c5e16e40a558ba319cc88: feat: preserve non-hydrated files during hydration (#24129) (@nitishfy) * c012702ce0019db112f8def3286963423855f318: feat: read argocd password from stdin (#23520) (@nitishfy) * 07bd5e0f9e8952e7fa88d688762c34e25342546d: feat: show operation state UI (#23589) (@Aaron-9900) * 14a22ad926195633b2b835cce1e795385b2f4403: feat: update unpause action for Numaproj CRDs (#24036) (@dpadhiar) ### Bug fixes * 48a7030125510980871db96a7554f0721ea9e435: fix(UI): Add missing icon colors to auto-sync (#23962) (@surajyadav1108) * aff3ae3f4d4186e785718cc82361a66b076a2852: fix(api): `app create --upsert` should not error on invalid current destination (#23922) (@agaudreault) * fb94cad141ecd89305314ac46a8d3a4ecc082e09: fix(applications): update application navigation URLs (#22671) (#23285) (@Ruby-rc) * 460111f7bcc376fa0db33b59eb0940f0f4da0fcf: fix(applicationset): Git generator: Don't append default object to literal empty json array (#23500) (#23513) (@ChristianCiach) * ac4ae1779e6d7b0a7fc972e27a25548cb010e3bb: fix(appset): When Appset is deleted, the controller should reconcile applicationset #23723 (#23823) (@sangdammad) * 31e0f428e895ff92cc1b41fe10290738d1e3fbb6: fix(appset): add applicationset leader election to roles and clean up (#14369) (#23976) (@rumstead) * d269e6f936ba1e23d361550a84c8138c8e14aa01: fix(appset): add applicationsets to the built-in readonly role (#24190) (#24318) (@crenshaw-dev) * 6ec1aa1b843b6b91ee6aea1d32c9a36d8da4d156: fix(appset): do not remove progressive sync conditions (#23506) (@agaudreault) * 03ac864ddee6e93c049512c34f549b2b04e19635: fix(cli): avoid panic in configure command when no local config exists (#23085) (#23967) (@krapie) * 7f5ef5c0877391ccda007d05a834b931067e11e1: fix(cli): correct typo in bcrypt error message (#23849) (@gyu-young-park) * 70c8f4612fcc20c9e5522c101cdfa408a5fc21ae: fix(cli): honor ALL_PROXY and other proxy environment variables (#24177) (@SinnoLn) * f13aa46e7f1e5273c75809623081867da208de2b: fix(cli): respect refresh type when running with specified revision (#22463) (#22462) (@thejoeejoee) * c4d99bb2249220ee8205ff3dc712ad1268e28e49: fix(controller): expose ARGOCD_SYNC_WAVE_DELAY as configurable parameter (#24536) (@u-kai) * e9811678fac83619850600f424424a504dd577c9: fix(controller): get commit server url from env (#23536) (@nobbs) * 83d553ca51c884dccf1b56722439a5d40a31aa5a: fix(controller): impersonation with destination name (#23309) (#23504) (@crenshaw-dev) * e0f4b001264430844c1505a447ad7ccffdb277a0: fix(darwin): remove the need for cgo when building a darwin binary on linux (#23507) (@rumstead) * d7364b466226f129d8fd22a6fcc7efdb00009855: fix(dashboard): Allow quantile label as float and integer (#24087) (@adberger) * b20fd4342f6b7212607d9493c3bb9a8fe8848a3b: fix(discovery): add missing lua syntax and return to discovery (fixes #24257) (#24262) (@jan-mrm) * 614c85cb728d43f5f7bda5dacca385aba1be9adf: fix(docs): fix applicationsetcontroller.enable.github.api.metrics to false in docs cm (#23516) (@reggie-k) * 4501ebb93f9e722f92f42042f289fbf7d3e53557: fix(docs): include v3.1 upgrade docs (#23529) (@mubarak-j) * 786b24e2c43bbd2da04d1e087ab029f5e6385318: fix(health): CRD health check message (#23690) (#23691) (@crenshaw-dev) * f4c4c66f3865bb75e61284e985d7962fbf943fb2: fix(health): add logic for disabled policies (#21347) (@dhaiducek) * 91b8bba570eb53f5711874e4002cb79b5ac72de3: fix(health): custom resource health for flux helm repository of type oci (#24294) (@adberger) * 35e3897f61122769b043c575c272149dad81b20e: fix(health): incorrect reason in PullRequest script (cherry-pick #24826 for 3.2) (#24828) (@argo-cd-cherry-pick-bot[bot]) * 8fa3e47d174d6fb58072aa3462ca6a953b1c7e7f: fix(health): remove CronJob progressing/suspended status (#24430) (@agaudreault) * 4821d71e3d4634cbeac1d1b4ed26184a55947b75: fix(health): typo in PromotionStrategy health.lua (cherry-pick #24726 for 3.2) (#24760) (@argo-cd-cherry-pick-bot[bot]) * c68ec277d4653094fd0ccc6fb458ee0099f51183: fix(health): undeclared var used in ChangeTransferPolicy check (#23912) (@crenshaw-dev) * d1251f407a0d2372f783ea9dcefef2ad53226250: fix(health): use promotion resource Ready condition regardless of reason (cherry-pick #24971 for 3.2) (#24973) (@argo-cd-cherry-pick-bot[bot]) * 56320a7b082a626b0d505960cab208f526962e87: fix(hydrator): handle empty path (#24349) (@crenshaw-dev) * 4d16fdcea4dd2d7e18c37e2c1860a6219bbebe20: fix(hydrator): normalize repo URL when grouping (#23564) (#23565) (@crenshaw-dev) * c60a727524b34699669d44eff6d851174f265c65: fix(hydrator): omit Argocd- trailers from hydrator.metadata (#23463) (@crenshaw-dev) * 02de363d9cc3cbdf4de0b56ff21eb6d4c7cc3ca1: fix(metrics): grpc prometheus stats missing (#23877) (#23838) (@pbhatnagar-oss) * 50531e6ab36905de18fca3c65f3bc84d6a55808b: fix(oci): loosen up layer restrictions (cherry-pick #24640 for 3.2) (#24648) (@argo-cd-cherry-pick-bot[bot]) * b96401bb764c704a9e0bbaee77ec69bab21e00f2: fix(project): Do not block project update when a cluster referenced in an App doesn't exist (#23659) (@OpenGuidou) * e8f86101f5378662ae6151ce5c3a76e9141900e8: fix(security): repository.GetDetailedProject exposes repo secrets (#24387) (@crenshaw-dev) * 796f72c3d4b419537910ebaae4f9eb9e4d4a1ecc: fix(server): Send Azure DevOps token via git extra headers (#23478) (#23631) (@mikebordon) * 1ba3929520ea4bcee62bb004884c7dd878e9f223: fix(server): ensure resource health status is inferred on application retrieval (#24832) (cherry-pick #24851 for 3.2) (#24865) (@argo-cd-cherry-pick-bot[bot]) * f420cce7a5fbdf8a73a51fef4ecb7cb4c7f5ba0a: fix(server): make parameterized resource actions backwards-compatible (#23695) (@crenshaw-dev) * 0a1572b9d90ba9beb84d19cc3e9f106c6cce7908: fix(server): preserve webhook secret references on server restart (#22588) (#23905) (@somln) * 8c8902b93f7ed1a4136d98ad7f308e65cfc78253: fix(server): validate new project on update (#23970) (#23973) (@agaudreault) * 1fbd63d095d3cadbdcb047a4a7b52f720707544e: fix(sync): auto-sync loop when FailOnSharedResource (#23357) (#23641) (@agaudreault) * 65a082b12c17f3d0370eb68ca083676aa132d312: fix(sync): do not retry when sync timeout has elapsed (#24020) (@agaudreault) * 9dfa9db097db17df6afe9c9568e5aba01304d8d6: fix(sync): operations in errors without status cause infinite auto-sync loop (#23356) (@agaudreault) * 3349949835a763f5a33f30ff379e776646e530d2: fix(test): TestFailKustomizeBuildPatches fails on MacOS dev. env (#23737) (@dudinea) * 965c83e0165d53524f961cd8faafe406d7ee6fcd: fix(test): Test_SSHCreds_Environ_TempFileCleanupOnInvalidProxyURL fails on Macos dev. env. (#23755) (@dudinea) * c880373aaee28fb5a33ef965cd27d4943e5cc944: fix(tests): race condition creating the sync id (#23460) (@agaudreault) * 8884b2738181585eee51a942c46008354268eb85: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (cherry-pick #24802 for 3.2) (#25123) (@argo-cd-cherry-pick-bot[bot]) * d54c8afc09ddc6d7c4e89bb9b8ea11b07d47aa90: fix(ui): Made App name font bolder in applications-list rows (#24256) (@surajyadav1108) * 1bc9adb134cd4e7a5230b9855f892bb0bc582a90: fix(ui): account detail page crashes for accounts with empty capabilities (#23787) (@hanxiaop) * 04d1ca4733c459a37a3751865644f4cb2bcaab1a: fix(ui): catch AbortError during data fetch cancellation (#24054) (@youhonglian) * 24b0ecc657335b73eec5da1bc9398f09db39c0c1: fix(ui): convert GroupWrapper to a functional component (#23796) (@jiwlee97) * 564e507dd78cd1cdfb962cf434262d88e3fb8a4f: fix(ui): convert PolicyWrapper component to functional component (#23809) (@jiwlee97) * dd1547fcb4e69d763cd801f1b8e0e4dd7e85687e: fix(ui): convert RevisionFormField components to functional components (#23813) (@chansuke) * d6ecc6621682f472eb5ef0b0362376a2e3fc322d: fix(ui): enable natural sort ordering for resources, add autocomplete attributes to login form #22853 (#23599) (@sea-gull-diana) * 3e6f11e08e709bb92b933106f8ca97e0ac6b3343: fix(ui): fix filter header label wrap (#23560) (@linghaoSu) * aa5d1395bc0248c3c64accc4a2adf79daf645178: fix(ui): fix misleading pointer cursor and animation click-block issue (#23688) (@choejwoo) * 88a32d6aab8a954d86144166df80eeb1a7816015: fix(ui): handle missing resources on UI (#24355) (@pjiang-dev) * b18ea682c4b259aa94c3657aece66875fa657e1b: fix(ui): prevent undefined values in filter state causing checkbox corruption (#23733) (@choejwoo) * e24d8d40244df4809b171ef29eb3bb81976a27a3: fix(ui): resolve duplicate sync-policy (#24233) (@downfa11) * f3dbc6f9de693c823fefcd61d12f95e801bf4416: fix(ui): wrap log lines are wrapped to the next line (#23946) (@xfrnk2) * a8cae97da0f3a6065b9594aae7f367fd26e963a6: fix(util): Fix default key exchange algorthims used for SSH connection to be FIPS compliant (#24086) (@anandf) * 1b3ced9261779963dfe9564feb79328689af4377: fix: "admin cluster generate-spec" fails on missing "argocd-cm" (#10429) (#24088) (@ATGardner) * 001bfda068395d917e9e172d95822531af0a3783: fix: #24781 update crossplane healthchecks to V2 version (cherry-pick #24782 for 3.2) (#24784) (@argo-cd-cherry-pick-bot[bot]) * 5ee35ad707ba2923e6ce32eec024955dcf1e25db: fix: Address shellcheck detected shell warnings (#22686) (@olivergondza) * 58b0116d751480a5faf1046c1c95c99c6ce4cad8: fix: Allow metrics ingress for redis-ha-proxy (#23926) (#23928) (@JulesTriomphe) * 4e5b201ba500fec84fb9cc04d60f3106d9fca7fa: fix: ArgoCD CLI diff shows installationID annotations (#22409) (#22567) (@muma378) * 0793efb5e41bf15c3f137b101b7d0f40d0d2ae37: fix: Badge display revision for multiple-sources application #17986 (#22547) (@fpetr) * ef8ac49807185be5c91b09ad031aba9daed676ce: fix: Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (cherry-pick #24587 for 3.2 (#24716) (@aali309) * bb56b9ea673989f62a62752576e015752613fc4e: fix: Ensure application sets in custom namespace can be upserted (#23860) (@onematchfox) * df324c07d89990710d607ed37818fc28c86ff8eb: fix: Ensure that symlink targets are not made absolute on extracting a tar (#24145) (#24146) (@leh-ppi) * c94874fd18d845ee79b0a67aca32794ab561e82b: fix: HTTPProxy health-check update (#23575) (@solomon-kibret) * 6aa9c20e47724298187aeb0da52966a4ada75522: fix: Health status for HTTPRoute with multiple generations (#24958) (cherry-pick #24959 for 3.2) (#25039) (@lindeskar) * 7129a2c1474c7069a9e77b92b4ba82f32af05c93: fix: High Application Controller CPU Usage - Reduce calls to db.GetSettings (#24235) (@FourFifthsCode) * 87faf58733999f6e6338df49dcce3847870de79d: fix: Hydrator wipes out entire branch when multiple Applications hydrate to the same branch with different path (fixes #24179) (#24185) (@adityaraj178) * b8ac5ef63541cf330ed780fd46d93013e72b0e3d: fix: OCI client, avoid calling tags/list if revision is not a constraint #23580 (#23581) (@erdody) * 1453367645ff2c28d2a3f2ab89be370db4f6fb8f: fix: Progress Sync Unknown in UI (cherry-pick #24202 for 3.2) (#24641) (@argo-cd-cherry-pick-bot[bot]) * 12d3f5dba186e925598a24bf75efca71b708dfe7: fix: RunResourceAction: error getting Lua resource action: built-in script does not exist #24490 (#24491) (@FourFifthsCode) * 1c9bb478e85f826b54e973e6cf288bb5cdd4dc50: fix: Selecting repoType in dropdown doesn't do anything (#23747) (#23750) (@keithchong) * 8d47727d38a17c510efea3234cb3597c2a285b7f: fix: UI error with ApplicationSet in any namespace (#23601) (@jaqxues) * 45a7a18256c15c97588efaff4eb239ca416ce034: fix: `kustomize edit add component` check (#24100) (@blakepettersson) * 4c9291152bc9716670cb0477b2e49e413eec7154: fix: `syncPolicy.automated.enabled=false` does not disable automated sync (#24254) (@downfa11) * 2e4af5fa5a92a397e03a7aff4b32fa56160ff5b3: fix: autosync would not trigger for different sources (#23615) (#23655) (@agaudreault) * 1c5d7f1f65909631d2c91fa791bac5269f56f5bb: fix: cache external TLS cert to avoid `Loading TLS config` log spam (#17277) (#23965) (#24080) (@mtbennett-godaddy) * a1df57df93bbb188dfaf0a39f862fdae464b7a7c: fix: capture stderr in executil RunWithExecRunOpts (cherry-pick #25139 for 3.2) (#25140) (@argo-cd-cherry-pick-bot[bot]) * 670d383f69a79616a81a558ff37cd5cd5122d837: fix: change the appset namespace to server namespace when generating appset (#23900) (@nitishfy) * 3eb442ed823e5d453b977882fef5d0cd75af4a96: fix: correct misleading log and linter directive (#23824) (@augustkang) * ed752cb5407a016dd39ed1aa1fbbcb536d05d89d: fix: correct post-delete finalizer removal when cluster not found (#24415) (@aborilov) * 22c652cf97e8a1e534d30984e9235533037138af: fix: correct typo in applicationset/utils/utils.go (#24352) (@augustkang) * 51fa4e8a54319483964c2782183ffa4dcc3e0e76: fix: do not change CronJob to progressing (#24269) (@agaudreault) * b227ef1559d2bbff479fc8eb600b9688997ef687: fix: don't show error about missing appset (cherry-pick #24995 for 3.2) (#24997) (@argo-cd-cherry-pick-bot[bot]) * 7168674403860008ddd90377b93e4ec4fd29e5c0: fix: downgrade go-git (#24288) (@blakepettersson) * 42d4cfb8570ec340b5fd301d5083565d0c4445af: fix: existingWindows to treat all fields of the window instead of a small subset of them (#20712) (#23636) (@itaispiegel) * 9895f55781451f61b1ec8407e8bdc9da0f742c08: fix: helm GetTags cache writing (#23865) (@mclarke47) * a1f42488d9c13c377c798310d12732c01e762d5e: fix: hydration errors not set on applications (#24755) (#24809) (@agaudreault) * ba38778d8c9be223ce667bf3cd2ae8067b92dfaf: fix: improve CMP logging and error messages (#24022) (@korECM) * 8ed3a24d49ed1edcf2b2bf54fbc4ddeb49c2bd32: fix: improves message for diff-exit-code configuration option (#24039) (@ppapapetrou76) * a90c54599b9de5951d3ad6ab3429fb9af536cb6f: fix: improves the ui message when an operation is terminated due to controller sync timeout (#23657) (@ppapapetrou76) * 5c2b13f07cb2d50ab777528244021131440ec1bb: fix: incorrect source used in CompareAppState (#23630) (@agaudreault) * e37c3dbd40400de155a20c81af96b6c79c0989e2: fix: kustomize components + monorepos (#23486) (@blakepettersson) * 873c2fcfc7d614491a5424280e5fd3dd03242de2: fix: labels field is nil in values interpolation (#24501) (#24502) (@tonychg) * f3c8e1d5e36c38761a7c2b099f50dbe1b3838d45: fix: limit number of resources in appset status (#24690) (#24697) (@alexmt) * 3db95b1fbe32a24c3301b08f02a9262923be184f: fix: make webhook payload handlers recover from panics (cherry-pick #24862 for 3.2) (#24912) (@argo-cd-cherry-pick-bot[bot]) * b1b157068efae35112db841c27d3d288c044d944: fix: prevent idle connection buildup by cloning http.DefaultTransport in Bitbucket SCM/PR generator #24209 (#24210) (@portly-halicore-76) * 8b8d04ecfaeef46f030d6d42361ee0210edc264a: fix: propagate gRPC context to HTTP client in grpcproxy (#23840) (#24157) (@BHAVISHYA2005) * 8f23c885b61563104013956fc57650f23de0b27d: fix: remove mounting of host /tmp when running argocd-test-(client|server) images (#24025) (#24028) (#24024) (@dudinea) * aed63c628d3e6aff4df20303b5e7cf4149b4a443: fix: remove platform flag to fix multi-platform binary architecture of CLI tools #24549 (#24550) (@pinelibg) * 4dfab5d136cbea1ad42ce971b3b61c045e17d209: fix: remove tracking annotation from git manifest when performing hydration (#23857) (@nitishfy) * 559744a65efa408d975733065050aa868418ebc3: fix: replace `:arrow_heading_up:` for MS teams (#22258) (#22725) (@chansuke) * c64183717bbb04a0147d3088146a3518e0b0b3a1: fix: replace grpc.NewClient (#19653) (#24188) (@Jack-R-lantern) * 6c38186f7fd32f94bb9ba79e20edf58a14c66d7b: fix: resolve argocd ui error for externalSecrets, fixes #23886 (#24232) (@raweber42) * 28510cdda692c067309d4753d4d16b4107599547: fix: resolve argocdService initialization issue in notifications CLI (cherry-pick #24664 for 3.2) (#24680) (@argo-cd-cherry-pick-bot[bot]) * fe6aaad4f0a4eebcdf2722d75f5b0bc9a6c36b7e: fix: resource tree endpoint doesn't have missing state (#23948) (@hanxiaop) * 22d3ef0ef67a8e01d37f7f5296047ac57e4adefc: fix: respect ignore differences for individual array elements in CRDs (#24197) (@nitishfy) * f78cddf73681b800dce45d2ce8f69c5e81002c43: fix: revert kubeVersion change to preserve trailing `+` (#24066) (@agaudreault) * 8c3b78ef888dbd507cb1153c3f0d7f76430eae9f: fix: set correct path to metadata for numa rollout pause actions (#24280) (@dpadhiar) * 16cc1b15af39ebf43a1714cfb522aed1d7c38059: fix: support dynamic field path based on Hydrator state in summary view (#23950) (@bianbbc87) * 51d88197d76ab61051772661c9e8f90c32c3d2a1: fix: the specified namespace is not taking effect in argocd-notifications (#23839) (@iawia002) * 262c8151ae5f80a35b79c6496b553b9b30e2e491: fix: typo err for GetConditions comment (#23807) (@warjiang) * 087378c6696000fc63074747cbd19650dd81ad7b: fix: update ExternalSecret discovery.lua to also include the refreshPolicy (cherry-pick #24707 for 3.2) (#24713) (@argo-cd-cherry-pick-bot[bot]) * bf9f927d55bfea7f60c2df9c38fe95bf9a5dcbf9: fix: use informer in webhook handler to reduce memory usage (cherry-pick #24622 for 3.2) (#24623) (@argo-cd-cherry-pick-bot[bot]) ### Documentation * 751550562cb00d4f103a7650ba7d966f883c608c: docs(actions): document parameterized resource actions (#24007) (@crenshaw-dev) * 5ac055d2a29de36d0e4c32aa25ae24350c458061: docs(cli): Add example usage for 'argocd repo rm' command (#23833) (@somln) * d83ef2c224cb512c59ea49ebb016a45d55b69183: docs(cli): add `argocd repo list` example (#23822) (@jemlog) * ce35b4c48484ef00bd5fdfc610f04fd3b2a24503: docs(cli): add command `argocd repo get` examples (#23843) (@downfa11) * 4024fe7c22db2f8a575a534be3295e21df2c2d23: docs(cli): improve example usage for argocd logout command (#24001) (@CHOUMnote) * d1546276818bbae8e472902db0b5c0b6b802adef: docs(hydrator): remove trailer that doesn't exist (#23923) (@crenshaw-dev) * 9e25f93e03e9b2448d0bff361c1d0bd0a9bfb16b: docs(images): add a note about missing images for 3.0 releases (#23612) (#23712) (@rumstead) * 313e8bf70f3a3ac3698d3ce530babf4757c32f30: docs(images): add a note about missing images for 3.0 releases (#23741) (@rumstead) * eaef25c3eb23ab3390aa5967da482d9134b4d168: docs(progressivesync): Proposal of Deletion strategy for progressive sync (#22843) (@ranakan19) * 4362e8ccb7772fe90da7f55fab7bb950e1cf731a: docs(users): Add 100ms to the list of users (#24265) (@ygit) * 1e4cfcc4a06859fe8333eaa992f295dfc89cef20: docs(users): Add Shock Media to users (#24538) (@sven-mollinga) * 90eae48c77d44a1925ff284d308ae448f543be0c: docs: 3.0 migration - added remediation for explicitly syncing apps that use ApplyOutOfSyncOnly=true (#23918) (@reggie-k) * 49f3c05d7dea5e40249719225f21733b4f7b1152: docs: Add Sophotech to adopters list (#24247) (@archy-rock3t-cloud) * e4eb86d2dbfed08fc163dae7fbe61a9952fb1c04: docs: Add code comment to explain relativizing all symlinks on extraction (#24514) (@leh-ppi) * 9fd0601e52cac035f67cb76274fd8d3a5f5a0e4e: docs: Add example of using argocd.argoproj.io/hook: Skip (#23505) (@jsoref) * 3df2883a4d6874a045e3af0c9e177e76a2dbff49: docs: Added Intel to USERS.md (#23596) (@charlesmcchan) * 2cfc70afa90c207fef4a174b4d92376f12d0b2eb: docs: Change reference URL for HA manifests to stable. (#24049) (@Kelketek) * 15a35daf16a06e354af965db5c9029d37055bc6b: docs: Clarifications in in user-guide/helm.md (#23281) (@HarHarLinks) * e8875bbe7b592b9fc0f670940a49ab8bb47a241a: docs: Correct a minor typo (#24566) (@looperunbalanced) * ee0de13be4c2d63652e0fe917d64f253cb556938: docs: Delete dangling word in Source Hydrator docs (cherry-pick #24601 for 3.2) (#24604) (@argo-cd-cherry-pick-bot[bot]) * bfe8b30d9a9dd828297175c3d858a2bac0eb784f: docs: Document ARGOCD_CONFIG_DIR env variable (#24193) (#24194) (@den-is) * ac49c6740317c660a3a333de9ed5119d6157c5d2: docs: Fix a typo in 3.0-3.1 upgrade manual (#23544) (@Chupaka) * 728674f922eda8bbecdd846ab79a2bfd4b338428: docs: Fix cluster bootstrapping documentation (#24353) (@FalseDev) * b834987db97f399bf318f9a68c281117abb123b2: docs: Fix typos in user guide documentation (#24548) (@choejwoo) * 79943d81892cf7774a5b2948965fb7b6e3aa644b: docs: Improve developer guide (#23669) (@reggie-k) * e5417e1eb383fa72f00f7a18bd29af3047ce4bf4: docs: Incorporate grafana service doc change (#24069) (@lrochette) * a74d8996b75420103b53b24770b9aeb18ea5627c: docs: Microsoft SSO requestedIDTokenClaims to be ApplicationGroup (#23711) (@DavidNorena) * 4393f7deb8bb648747d80517613b84adc23d474b: docs: PR generator title match (#24000) (@EmilyXinyi) * 7e868da310ad37d617f722175f618747e833b6ce: docs: RBAC: Fix typo and rephrase fine-grained action syntax (#24033) (@kwentine) * bc493296910496a957c47f9f14dbec9925a9f425: docs: Update Kustomize script in Custom Namespace Instructions (#23803) (@Jtango18) * bed3d56d170dd1ec77cd8e59277729a2051e861c: docs: Update command to check PKCE usage in ArgoCD (#24516) (@yuvraj9) * b0336b8f798613293931c77e53d2dd47a8eb967a: docs: Update how crd-install hook is handled in helm.md (#23452) (@todaywasawesome) * 928aee5dff0d3444fbd7e9f9a7afb3606a59f9d6: docs: Update rbac.md (#24224) (@huguesalary) * 5c10b47d277097077c2798909a476919e5b1e921: docs: Update rbac.md to include more examples for group policies: g, role:admin, role:readonly, ... (#24569) (@revitalbarletz) * db7acf8501f3ddb6534641ec41b96582255db149: docs: Use enabled in application example (#24448) (@gsalamin) * 5510bdfd7171d71cd47c6f67eebe4a56b950d16b: docs: add Content-Type header to example curl command in api doc (#24127) (@jessebot) * fed3c7eef76ba17658d3b751bf48f32cd2baf498: docs: add TLS configuration quick reference table for easier understanding (#23888) (@puretension) * ec80ebdf67abaea4c3f72a0041b91f62497cedd0: docs: add batumbu to USERS.md (#24035) (@gustysap) * d3bdc9d5f33275c850d8b857680568e5279c98fa: docs: add docs for Progressive Sync's deletionOrder feature (#24201) (@ranakan19) * 998253aa41bed92cf1a6a64aee478e3c14a526a7: docs: add notes related to Revision Cache Expiration settings (#23986) (#23963) (@dudinea) * 9aff76253115c39a577ac79f383e3ab86b152196: docs: add shipfox to argocd user list (#23771) (@noe-charmet) * 139debe3bb007882d7730ab65b763b326124edb3: docs: clarify `timeout.reconciliation` values (#24551) (@osoriano) * 23f3472f25b2788480d5cc03b2a4ea4d848b7510: docs: clarify manifest-generate-paths annotation usage without webhooks (#24421) (@Aamir017) * 37b0f0f76771fd5017cc8f76f11752a46ccd4658: docs: document server-side diff requests being issued on resource change (#24299) (@stek29) * f953976d92133c87c1f7c2cd5b0beffe4c36dce9: docs: enhance orphaned resources documentation (#24243) (@ractive) * 9fffcd50d38a2885bf71b1d07eb2b1cd69fa556f: docs: fix TLS certificate installation guide link error (#23908) (@ruyut) * 2de68194225ec256c8442c4219ea2dda84593f83: docs: fix code block errors in web_based_terminal.md (#23892) (@alexandregv) * 4e72dd7c55d1ee8cad7668254094b75c1cdfad75: docs: fix missing closing parenthesis in onelogin (#23779) (@gyu-young-park) * dc309cbe0d0384023b2055635613bb8759733ed8: docs: fix typo in hydrator commit message template documentation (cherry-pick #24822 for 3.2) (#24827) (@argo-cd-cherry-pick-bot[bot]) * 0174fccf28749d9259c2fed90da0d8aa101f9dd8: docs: inform about #11104 in applicationset docs (#24533) (@nissessenap) * 20e3877633591766058dbfe51261ca967c7a9d86: docs: intersection of apps-in-any-namespace and parameter overrides clarification (#23810) (#23816) (@bittrance) * 0c82f4079b40c4453cdb44307f31237f3f34ee72: docs: mention that applicationsets resource can be used with project roles (#24182) (@Anthony-Fiddes) * 1d6ba890a8d935e91606849ced2cf493b02f50bb: docs: promote server-side diff from beta to stable (#24119) (@pjiang-dev) * 5e2a8a86d018e8869f7d9470805520b64f2bd225: docs: promote server-side diff stable (#24138) (@pjiang-dev) * b68601255c46ebef4d9b1ff7c527ed6ab0e03c71: docs: remove incorrect ignoreDifferences example (#24425) (@crenshaw-dev) * 01d00ac9522289817037e93612d85329cca78b51: docs: rewrite section on self-heal and autosync for clarity (#23812) (@dmgress) * e492587fb1082b9de6f5643c02c51cdc7ff704ba: docs: update Google OIDC connector to support Workload Identity (#23955) (@karahiyo) * 7f5072f28659a4d73c3c341419aa2282cf02536c: docs: update USERS.md adding Hotjar (#23971) (@alainrk) * ea31d17f53ff09870b69f92138c62bedf494e4e2: docs: update declarative-setup.md (azure auth) (#23408) (@CCOLLOT) ### Dependency updates * cb61611816e587e068ae29253043ea09804c1a55: chore(deps): bump SonarSource/sonarqube-scan-action from 5.2.0 to 5.3.0 (#23897) (@dependabot[bot]) * 35331553bfe12e03d6f87f5c5b79079310eb3d31: chore(deps): bump SonarSource/sonarqube-scan-action from 5.3.0 to 5.3.1 (#24358) (@dependabot[bot]) * 0984b0380597942dfba4d96025711ace9d5bbb6b: chore(deps): bump actions/cache from 4.2.3 to 4.2.4 (#24072) (@dependabot[bot]) * 90e21486671be2958530d6ad6aeba55c3b5051f1: chore(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 (#24052) (@dependabot[bot]) * ae16c009167eaba5c0f76d6c543c693d970edf80: chore(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (#24412) (@dependabot[bot]) * c7588ffb440da57ce2f828f3d7a1eb4a61b3aed5: chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 (#24384) (@dependabot[bot]) * 29805b0e8f3d381fa6274a34bf50ac2dad43c453: chore(deps): bump code.gitea.io/sdk/gitea from 0.21.0 to 0.22.0 (#24304) (@dependabot[bot]) * 86577983242c4e28712577c23910b90eb42c9f79: chore(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 (#24219) (@dependabot[bot]) * cb2b7faa6d4406d2e357863eb22f5be0e636b3ae: chore(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#24413) (@dependabot[bot]) * 390ea4ff5442869dccd4800434020a946ef06599: chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 (#24043) (@dependabot[bot]) * fd78d66f4d2f96d33cab74e2025026c988fd4400: chore(deps): bump form-data from 4.0.0 to 4.0.4 in /ui (#23876) (@dependabot[bot]) * 9cc960d07d7e4807cf20c567b4016e0d372dce01: chore(deps): bump form-data from 4.0.0 to 4.0.4 in /ui-test (#23875) (@dependabot[bot]) * 6f1e27e93ca6851643fe39f72294b18150a4ecc5: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.0 to 1.18.1 (#23759) (@dependabot[bot]) * 9928c906a26d73284b70d120c53a67d9abcfbec0: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.1 to 1.18.2 (#24013) (@dependabot[bot]) * 6265da106efc6ec10a3b4b0e5de8efaedb7a892e: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.2 to 1.19.0 (#24227) (@dependabot[bot]) * 41f664493e3e1173648afd83ab021f3581331f32: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.0 to 1.19.1 (#24527) (@dependabot[bot]) * ef8d03cea5a05d77b4bc87a42ae3e290c7631719: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.10.1 to 1.11.0 (#24050) (@dependabot[bot]) * 9567183b7cbca16ef3a16e4726e2d9402e385e51: chore(deps): bump github.com/Azure/kubelogin from 0.2.8 to 0.2.9 (#23551) (@dependabot[bot]) * 82391027d9d591bbdf5dee2da82519ef185a857d: chore(deps): bump github.com/Azure/kubelogin from 0.2.9 to 0.2.10 (#23825) (@dependabot[bot]) * 0a0176f4fd498f864ce0b05a0fbc9f03893a3657: chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0 (#23603) (@dependabot[bot]) * 733350ce7c854709968149cce1dc8039bebf750b: chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.8.1 to 4.9.0 (#23774) (@dependabot[bot]) * 7da3ecc08f4c07c0ee5318aa39f747c8a28963bd: chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.9.0 to 4.9.1 (#23960) (@dependabot[bot]) * d518f13b2aeaccd41778d127df39ab67edebf190: chore(deps): bump github.com/casbin/casbin/v2 from 2.107.0 to 2.108.0 (#23518) (@dependabot[bot]) * 276d92d4e0b0b011f4bf0db0bc6ab6310f128087: chore(deps): bump github.com/casbin/casbin/v2 from 2.108.0 to 2.109.0 (#23758) (@dependabot[bot]) * 635b9fe8fb3432e94ae9f3a4aa4ee9276836351a: chore(deps): bump github.com/casbin/casbin/v2 from 2.109.0 to 2.110.0 (#23895) (@dependabot[bot]) * 99710b5183bcb7cd2f2c1c69285a664c37909610: chore(deps): bump github.com/casbin/casbin/v2 from 2.110.0 to 2.111.0 (#24011) (@dependabot[bot]) * 2558e80f4122e233cc214537d5bdbebf9e21a716: chore(deps): bump github.com/casbin/casbin/v2 from 2.111.0 to 2.116.0 (#24073) (@dependabot[bot]) * 37b67fa4a55903ccc77bbf83803dc8a924942f1b: chore(deps): bump github.com/casbin/casbin/v2 from 2.116.0 to 2.118.0 (#24099) (@dependabot[bot]) * 2a0eac0ca90ddd32d7cb6437d02f92ab9f2f6f31: chore(deps): bump github.com/casbin/casbin/v2 from 2.118.0 to 2.119.0 (#24123) (@dependabot[bot]) * b74c0a0e1a53d8e2a5acbb1895ce7ae631f32d58: chore(deps): bump github.com/casbin/casbin/v2 from 2.119.0 to 2.120.0 (#24159) (@dependabot[bot]) * 24d4cb57c5f3d63f057b23627e0ea28b8b285496: chore(deps): bump github.com/casbin/casbin/v2 from 2.120.0 to 2.121.0 (#24302) (@dependabot[bot]) * c07768cd643708fd5e6996fecdfea2c33a18ac66: chore(deps): bump github.com/casbin/casbin/v2 from 2.121.0 to 2.122.0 (#24409) (@dependabot[bot]) * f4541a60c01bab5561003696d1ede45c906b32c1: chore(deps): bump github.com/casbin/casbin/v2 from 2.122.0 to 2.123.0 (#24557) (@dependabot[bot]) * ca6e205332fef0880a0c6447b6f74aeb60b4569c: chore(deps): bump github.com/casbin/govaluate from 1.7.0 to 1.8.0 (#23602) (@dependabot[bot]) * 2ed67e8facd27d6bbded0330913ba319a39b3e4e: chore(deps): bump github.com/casbin/govaluate from 1.8.0 to 1.9.0 (#23913) (@dependabot[bot]) * 05385b3dd816c08098e41955f61f0ebee1860ca2: chore(deps): bump github.com/casbin/govaluate from 1.9.0 to 1.10.0 (#24411) (@dependabot[bot]) * e039293b7e6f2703db8f0026cd139f21795d3073: chore(deps): bump github.com/expr-lang/expr from 1.17.5 to 1.17.6 (#24124) (@dependabot[bot]) * 54b3c95e8442b4aa23938f9a8a0e384db1f4031e: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 (#23585) (@dependabot[bot]) * 9a990b7e899c7c681675300be50862e91605272f: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.2 (#24032) (@dependabot[bot]) * 60adba2d5f8b25bf6280b2c4a887dc8353278466: chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.2 to 5.2.3 (#23802) (@dependabot[bot]) * b8decb798a301fef0c8cdfdb5c3a95dfeb149496: chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.3 to 5.3.0 (#24003) (@dependabot[bot]) * 7f3709374b427a039e6af1b11defd4a7bbf6281a: chore(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.7 to 0.7.8 (#23482) (@dependabot[bot]) * 98f2760d5097ac7ac720cce56f0962060a579846: chore(deps): bump github.com/jarcoal/httpmock from 1.4.0 to 1.4.1 (#24205) (@dependabot[bot]) * 5e5c4b7d03629d5f3a4c8a0f224478a0b4a122cb: chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.86 to 0.9.87 (#24383) (@dependabot[bot]) * 36345afeb2c7c875efbfffdffddd86b47e5c0fda: chore(deps): bump github.com/olekukonko/tablewriter from 1.0.7 to 1.0.8 (#23670) (@dependabot[bot]) * a78a61656617db0e6efdde66a39edc726107207f: chore(deps): bump github.com/olekukonko/tablewriter from 1.0.8 to 1.0.9 (#23982) (@dependabot[bot]) * 3f03097983411090e8ecca0e28b4a5f3eef9d971: chore(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 (#24012) (@dependabot[bot]) * c69d30e52d53a78e8761c0c1e4369c10200a92ad: chore(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 (#24442) (@dependabot[bot]) * 48faed19f1c78106b38822c17a65d9b9e269b6e8: chore(deps): bump github.com/r3labs/diff/v3 from 3.0.1 to 3.0.2 (#24098) (@dependabot[bot]) * 2ffaf43c1d77b8397254eeb23d211e44d80d5e64: chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#24362) (@dependabot[bot]) * 908c73255e80b6e56ae7abdcf45ea2468bb628af: chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 (#23826) (@dependabot[bot]) * 4a3884f5169c42cc1272a2cf6456b040e6d822c0: chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 (#24377) (@dependabot[bot]) * 9bc35de19dc503a295eb964c795b143e9162a132: chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#24248) (@dependabot[bot]) * d135f731603f351e3cd4c89625e8e42b6ace2204: chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#24306) (@dependabot[bot]) * 04794332d28e44c18c89b83e9c54f0bcd69bcc43: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.130.1 to 0.131.0 (#23634) (@dependabot[bot]) * 0864f1ac956c743702a73d1dca2ad590627759d5: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.131.0 to 0.132.0 (#23647) (@dependabot[bot]) * 09b5cbdda2264ed840a817af96e3620750b4e734: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.132.0 to 0.133.0 (#23656) (@dependabot[bot]) * ff019243a1fdbe3eb27c4c26e3f20eb1dd870d39: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.133.0 to 0.134.0 (#23681) (@dependabot[bot]) * 195b238a376268cb3234b3e55763f4d4d21178f6: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.134.0 to 0.137.0 (#23896) (@dependabot[bot]) * 34bc56352cd2287ea6e39246aae5650ebb1e941b: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.137.0 to 0.138.0 (#24125) (@dependabot[bot]) * 2b1f5959bd3b108e032e7d66e2d5f50fc2610e05: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.138.0 to 0.139.0 (#24141) (@dependabot[bot]) * 57cccb65c28fb39f91adc020e7725a85bd230e9b: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.139.0 to 0.139.2 (#24160) (@dependabot[bot]) * 7a2dc7e80f1b2eab086a6ad11d000474e3c7be7e: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.139.2 to 0.141.2 (#24216) (@dependabot[bot]) * 5ce60ca6e3df8b69b8c264ea31dca90a6cbebb91: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.141.2 to 0.142.0 (#24226) (@dependabot[bot]) * 08cd54775046c6ca7071ebe4f5d817f2658cd3c9: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.0 to 0.142.1 (#24249) (@dependabot[bot]) * e6a7c1d4e227e19e0d3d9e671e11c0ad00a2cb47: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.1 to 0.142.4 (#24316) (@dependabot[bot]) * 3e700332470cbc9ae3769a3b9928946634b11b7d: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.4 to 0.142.5 (#24361) (@dependabot[bot]) * 634ef6ff1cee2a58926ceafa57734d725896e305: chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.142.4 to 0.142.6 (#24373) (@dependabot[bot]) * ebff248ba84c5a92976a3c0e5aa0e57ae644ecdf: chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 (#23757) (@dependabot[bot]) * 88ce38e450a1324b5ca20221bd180150b103edea: chore(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 (#23756) (@dependabot[bot]) * 3c6449da8989782580d96830319a87b71b7e0c07: chore(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 (#24075) (@dependabot[bot]) * bc4775468af27fd4527e501909590060c410b82f: chore(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 (#24493) (@dependabot[bot]) * 1268dd9bfffcb83f4e8085604e4d7be131b6d08c: chore(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 (#24444) (@dependabot[bot]) * 69b1f0a33c2d0f95af7777cf5a1f241057882841: chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 (#23730) (@dependabot[bot]) * a60875307164c8be376b5c6f7748385676437dda: chore(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 (#24443) (@dependabot[bot]) * e452870b0e4b6fd74154952367f0d813bca810f0: chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 (#23729) (@dependabot[bot]) * f5a562ac3042283253cdd2e814d9b816b584865f: chore(deps): bump golang.org/x/term from 0.34.0 to 0.35.0 (#24472) (@dependabot[bot]) * 52683fdd3ee95fa7521689f9af4e5d485fd5dc97: chore(deps): bump golang.org/x/time from 0.12.0 to 0.13.0 (#24441) (@dependabot[bot]) * b090ee70a828e38a8d0df66286fc1cf5d7a212ce: chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 (#23827) (@dependabot[bot]) * 2e90919fe636ab163b65b0f73283f2a57b919cbf: chore(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 (#23894) (@dependabot[bot]) * 7ed0f2300eca0bf45a49c3a57096fb89d6644d6a: chore(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 (#24206) (@dependabot[bot]) * 17e5c1f68f3bef62001f85ca5389370b6403f819: chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.75.1 (#24511) (@dependabot[bot]) * ad2e4450f223304a66c0c57081b0e55942f35f32: chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 (#24077) (@dependabot[bot]) * 88fccc91c67eb9145691ae93e3b995d949ecd41c: chore(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 (#24218) (@dependabot[bot]) * 21ec075fd98900029c440df383d4a35996248b07: chore(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 (#24495) (@dependabot[bot]) * 940a489cfa81d9ca2f22b60d4c3a2e0574ffac4e: chore(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 (#24161) (@dependabot[bot]) * d2b881ae4adb0cb46c78feab490ff3177740fe11: chore(deps): bump library/busybox from `f64ff79` to `f9a104f` in /test/e2e/multiarch-container (#23980) (@dependabot[bot]) * d737f8fe43adfa005f94a2ad2478d1d29f60676c: chore(deps): bump library/busybox from `f9a104f` to `ab33eac` in /test/e2e/multiarch-container (#24162) (@dependabot[bot]) * be2c243ac846a12caaf72975ad6c87fda1123b4a: chore(deps): bump library/golang from 1.24.4 to 1.24.5 in /test/container (#23930) (@dependabot[bot]) * cd11e44d8b3e981fd108f3ef5ef5f21f65204940: chore(deps): bump library/golang from 1.24.4 to 1.24.5 in /test/remote (#23699) (@dependabot[bot]) * 0e4201277841133eb6297a92a1d6cdf729fe64db: chore(deps): bump library/golang from 1.24.5 to 1.24.6 in /test/remote (#24061) (@dependabot[bot]) * a37a4d4073bca98effb043c012e00f20696b4897: chore(deps): bump library/golang from `14fd8a5` to `267159c` in /test/remote (#23898) (@dependabot[bot]) * 835c1fbd3c341237073739610d5086af509e79db: chore(deps): bump library/golang from `267159c` to `ef5b4be` in /test/remote (#23914) (@dependabot[bot]) * 4e69156e18ba38225fbe73c28cf0030f9240fce7: chore(deps): bump library/golang from `a9219eb` to `14fd8a5` in /test/remote (#23728) (@dependabot[bot]) * a4919edffbe82e79d3a25d8efd5bb311bbae167c: chore(deps): bump library/redis from 7.4.3 to 8.2.1 in /test/container (#24200) (@dependabot[bot]) * 6b6512ae30e8fa31ec072ba6b6baeb4348bb3462: chore(deps): bump library/registry from `1fc7de6` to `45fbac2` in /test/container (#23800) (@dependabot[bot]) * 6747cfa28d7df4d3154a129ca13379675fc9b16f: chore(deps): bump library/registry from `45fbac2` to `3725021` in /test/container (#23842) (@dependabot[bot]) * c67763b06906aa05f103705bbdbe3e8b38a297f3: chore(deps): bump library/ubuntu from 25.04 to 25.10 in /test/container (#23961) (@dependabot[bot]) * b88527cb3906ec7d4c565c78a4faaec3473d9053: chore(deps): bump library/ubuntu from `1041699` to `a61c057` in /test/container (#24382) (@dependabot[bot]) * 9bca4859e05edbec2826a8d08dfa7e22bf24add5: chore(deps): bump library/ubuntu from `10b61aa` to `fcdea13` in /test/container (#24158) (@dependabot[bot]) * 5d5d17ae35a44cc4a660f102d314ea7828fda00a: chore(deps): bump library/ubuntu from `acdb2d3` to `1041699` in /test/container (#24207) (@dependabot[bot]) * 1e5761c1d0576476374db6c30fc20d328df3946c: chore(deps): bump library/ubuntu from `fcdea13` to `acdb2d3` in /test/container (#24184) (@dependabot[bot]) * 76284738023cfb8077bd670e620644965b7dd19b: chore(deps): bump redis from 8.2.1 to 8.2.2 to address vuln (release-3.2) (#24891) (@carlosrodfern) * f401a0ee11e1fdc2c9a6d3db6118e98b651bdd90: chore(deps): bump renovatebot/github-action from 43.0.10 to 43.0.11 (#24476) (@dependabot[bot]) * 81da5ea7409f20b88467454fa2b1ac62c30b0128: chore(deps): bump renovatebot/github-action from 43.0.11 to 43.0.12 (#24559) (@dependabot[bot]) * 4445dbafb284e4a87eec3d8421d338f08ba25cbc: chore(deps): bump renovatebot/github-action from 43.0.8 to 43.0.10 (#24363) (@dependabot[bot]) * 986e1f858970e27d4430f17f3c61f13f74d9e837: chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 (#23567) (@dependabot[bot]) * 8eac64d54ca543925231d6a63ee6f0fcec9e638e: chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 (#23931) (@dependabot[bot]) * a1bcd4246e9f666f18f6b6df4fbb58d7dc2a8daa: chore(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#23530) (@dependabot[bot]) * be37e0aa3d9ff6fbff24086c9bbe53a8973f9ffa: chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 (#23841) (@dependabot[bot]) * a330ae4355884691bbed416b3e1c944d0eb9304d: chore(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 (#24558) (@dependabot[bot]) * cc39e63e245b4ef5769a21c87d8f39187736dacf: chore(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 (#24445) (@dependabot[bot]) * 9e804f99f00b70b3c76596f01168a5ee3a50b53a: chore(deps): bump the otel group across 1 directory with 2 updates (#24217) (@dependabot[bot]) * 04cf408264b92287d91fb32e7150728636e483e4: chore(deps): bump the otel group with 4 updates (#24364) (@dependabot[bot]) * cd3dc7a1cffba8b025da68705212ce940ca961b0: chore(deps): bump tj-actions/changed-files from 46.0.5 to 47.0.0 (#24560) (@dependabot[bot]) * 4dd9bc7642db5f60792374a44e49080da7b8d05c: chore(deps): update dependency gotestyourself/gotestsum to v1.12.3 (#23483) (@renovate[bot]) * d1113970cdb66ed36ff7aa63ae27b387289f9949: chore(deps): update dependency markdown to v3.8.2 (#23499) (@renovate[bot]) * 38ad19fd951e3c205e9a531d74e2a818f2df5bec: chore(deps): update dependency pymdown-extensions to v10.16.1 (#23974) (@renovate[bot]) * 414d9eb5dba31697f8782edeb54c7f4410623609: chore(deps): update docs dependencies (#23510) (@renovate[bot]) * 203e07c9a40cb7a40af9f8497a3f4d4d1ba01004: chore(deps): update module github.com/golangci/golangci-lint to v2.2.1 (#23598) (@renovate[bot]) * 5bd2d0d9174263517cf68da743de73952a8edf0b: chore(deps): update module github.com/golangci/golangci-lint to v2.2.2 (#23761) (@renovate[bot]) * d5383de5c5721d444eb1fa6848fb604932fd6327: chore(deps): update module github.com/golangci/golangci-lint to v2.3.0 (#23874) (@renovate[bot]) * 39b9e4f8c5cf569619596b2c0ae7cbc11c8c031d: chore(deps): update module github.com/vektra/mockery/v3 to v3.5.0 (#23632) (@renovate[bot]) ### Other work * 8f8a1ecacb4596da7170f16ea765f6b1a0f4247a: Merge commit from fork (@thevilledev) * 46409ae734d8998a299736a53480ce8652c3cb72: Merge commit from fork (@crenshaw-dev) * 5f5d46c78b131e079575000eebfce11e39237ebd: Merge commit from fork (@crenshaw-dev) * 722036d447790e9535be8bc1b3df508e4ebde0b5: Merge commit from fork (@crenshaw-dev) * 27b70cf56e1dc152d81e7fd5a84da73beab90bcf: chore(ci): Use default TARGETPLATFORM for base ArgoCD image to fix multi-platform builds (#24048) (@joshuabaird) * 346a749cdec4e0f50da1730e99ac8582aeff1612: chore(ci): allow make mockgen for renovate (#23633) (@crenshaw-dev) * 0fe2a2110c40708510520e3b33c98cc7f3346c77: chore(ci): cherry pick v2 (#24322) (@blakepettersson) * 2bba563a7681b4d8bbabba4a022c423893c0f0fc: chore(ci): cherry-pick workflow improvements (#24575) (@blakepettersson) * 1cec1748039024d4efc462bbfa2251244fb3af70: chore(ci): run e2e tests on CNCF runner (#24320) (@crenshaw-dev) * cd87a13a0de7d41c1742f784da921285cc718177: chore(ci): update github runners to oci gh arc runners (3.2) (#24632) (#24653) (@crenshaw-dev) * 7fafc99a7aa2f083ba1f6e7c81f0130f7b96108d: chore(ci): use existing label standard (#24543) (@crenshaw-dev) * 2e5601f932d4ca67f33708a1bf8aef72f8ae60dc: chore(cli): print groups when retrieving roles info (#24522) (@nitishfy) * 922e4596653938fd986f955499cfb3e970d2045f: chore(cli): rewrite supported formats (#24483) (@nitishfy) * adf89ea322978686abce9d1ba97e2200b57b3573: chore(cmd): remove duplicate code in argocd-notification (#23929) (@iawia002) * 68e5a4a12c05cab35d0cbd0f9f94cbe0cfaf61b5: chore(hydrator): simplify dupe destination detection (#23566) (@crenshaw-dev) * 6ead52c21c470ff662ce32bcd5a7bf671d55f419: chore(migrate): migrate otelgrpc pkg interceptor to stats handler(#18258) (#18366) (@Jack-R-lantern) * 1db5f2e618cd03a8e7bfe442c06d73543c2a885d: chore(migrate): migrate renovate to renovate GH action (#24253) (@nitishfy) * 3b1ac4b22d4dfb96ca7270e1655d8853e12df554: chore(refactor): project as SyncAppState parameter (#23629) (@agaudreault) * 5ca752429ee98dfda2d25310af1cbd0a4286fc19: chore(refactor): remove redundant rollback argument (#23627) (@agaudreault) * 6ec53193fd23894b2463dc4fbbfe48270679d612: chore(refactor): remove unused actions parameter fields (#24008) (@crenshaw-dev) * 2c4dd51e150cd89ebea33f93c8eb769197ea0b3d: chore(refactor): simplify auto-sync and alreadyAttemptedSync (#23628) (@agaudreault) * 7829e2c6c1fcc95e2de0d1c377eb1f4d2939b48f: chore(refactor): simplify hydrator manifest generation (#24427) (@crenshaw-dev) * f2233ccd67365b03fec87bc716ed19bcd88d164e: chore(refactor): simplify logic that generates server cert (#24335) (@crenshaw-dev) * abbdfa26fdbef5f8994a75071753d37e244b5128: chore(refactor): simplify selfHeal logic (#23626) (@agaudreault) * 324747421205b643a7af0b8961fa3bb5ea7bb357: chore(refactor): use contexts in hydration operations (#24431) (@crenshaw-dev) * 69f24f007b714e0ee31986f27839097785d45a19: chore(refactor): use new root.Mkdirall (#24298) (@crenshaw-dev) * 678f61b8d3a4ce4443a49983f7deae9c80ad8983: chore(reposerver): Remove last occurrences of deprecated otelgrpc interceptors (#23921) (@elafarge) * 5107ec1ce36374a4bb534600e75e6df17296c781: chore(sonar): Fix sonar warnings in applicationset/generators/cluster.go (#23210) (@olivergondza) * 7922c779919bb22cfaf5fe1fe63a0e2605756547: chore(test): prevent data race (#23488) (@blakepettersson) * a3eb4e722edd04ff745a1fa70e039d540fd61d86: chore(tilt): fix sync reference to argocd build file (#23749) (@FourFifthsCode) * d58ba040e9572decdc0151e29b745bba12cc2c1e: chore(ui): add jsx-no-useless-fragment lint rule (#23666) (@linghaoSu) * 1e2a66d5b246dddc92b287f9309f6bb14ba5aa13: chore(ui): convert ApplicationParametersSource components to functional components (#23769) (@chansuke) * 728262ac557b16a98d7dae22b160a889a6ec86ad: chore(ui/refactor): convert Login component to functional component (#23780) (@jiwlee97) * f44de4b8542450c7a8935a0ff3328d10cfb99240: chore: Add make test-local to tiltfile (#24325) (@todaywasawesome) * 3f44b85a77fad551f490d33de6bcdea864e112da: chore: Add unit test to cover apps health status in an app in any namespace context (#23693) (@OpenGuidou) * 48933252b4edde87f10384147e9101e10cf85348: chore: Adds an option to control what Docker network the virtualized … (#24174) (@anfly0) * d39c0083ea3d8032315d2a2a44f6e48d4429e00d: chore: Convert ProjectsList and VersionPanel components to functional components (#23606) (@olegt-codefresh) * 939d88c5c617c29e4213c8d49d88548772e88269: chore: Fix data race in TestLogAppProjEvent (#24528) (#24529) (@andrii-korotkov) * b9daeac44e9847c3b5f5cdb277f4b16f2e48b732: chore: Update PR title guide link in PR checklist (#23979) (@krapie) * 1b48f363bb372c6354b88db85a314047bf889c88: chore: Upgrade ubuntu base image to latest 25.04 digest (#23479) (#23514) (@dudinea) * df3a45ac02621d10c0d0c0bc26b917d3d3831a87: chore: add 42School to USERS.md (#23893) (@alexandregv) * 6d9b5bdf53660272a51bdfa65b540994499db70e: chore: add @nitishfy for v3.2 release champion (#24097) (@nitishfy) * f8aea4439848fed197ce8219b42e2561560b48d3: chore: add Close to USERS.md (#23904) (@vtomasr5) * 45c8fd9d2bdadc1f102e892cc15f3cf778ac12ae: chore: add `triage/pending` label to new issues (#24572) (@agaudreault) * 267eb2ff0f2b2720dba199b270beb78e505ab0a2: chore: add cli scoped approver role for argocd (#24006) (@nitishfy) * b2b6d9822b4f02c379d479d8d2305164a27b3625: chore: add oci env vars to manifests (#24113) (@blakepettersson) * 0f822ff801e0088f3cfbf14521392c8fe7decf47: chore: add renovate config to update mockery (#23388) (#23508) (@chansuke) * 54e2648b3fe7c1a8f645421c1ae5e96d38a4bb1f: chore: adds all components in goreman run script (#23777) (@ppapapetrou76) * 93148b52c401467ce0ff507d84b5f47998c4b858: chore: adds scripts to perform gitops-engine migration (#24291) (@ppapapetrou76) * a42ccaeeca4c3334a740f4e92b334d444f59e484: chore: bump gitops engine (#24864) (@pjiang-dev) * 660295f6560c2f6f1d15f66ecd123c781b2a2a45: chore: bump gitops engine + remove IterateHierarchyv1 (#23924) (@pjiang-dev) * 871b0b434c6eb00d56807f0265aec4223a447889: chore: bump gitops-engine w/ finalizer fix (#24348) (@agaudreault) * 993344e23238fd374bc77b60fa1647bfd8cc7634: chore: bump k8s 1.34 (#24405) (@pjiang-dev) * 4ac3f920d54d5bf750a9fb06e1c21c3c7f4ffd6b: chore: bumps redis version to 8.2.1 (cherry-pick #24523 for 3.2) (#24582) (@argo-cd-cherry-pick-bot[bot]) * a06dfeb8322373018a02fc21a2f202d0f21102cd: chore: check for `gotestsum` installation when running tests locally (#24271) (@nitishfy) * 24c08922e5455753a41e632d79ce552501a670ab: chore: enable exposedSyncMutex rule from go-critic (#24026) (@mmorel-35) * 56f8797a2bd0063fd1516704403e0057fd9cade3: chore: fix contradiction between function name and comment (#23736) (@chansuke) * 9922336968607ac37f2df2c8e7b6f8e7be8ba625: chore: fix some function names in comments (#24381) (@vetclippy) * 19415979e85d7c871b7ea96f7b7fad18f5e5e431: chore: improving e2e stability (#23587) (@oleksandr-codefresh) * 323f99381686b62daf6e70705f56f94d2b30aa3f: chore: local docker build on MAC with amd64 target (#23993) (@agaudreault) * 69d1d88807299383bc5326ce39532e9a7efa40ed: chore: remove ErrApplicationNotAllowedToUseProject from API (#23972) (@agaudreault) * 7dae82dfd3376157194058b6e8868a30792c46ee: chore: remove automaxprocs (#24164) (@blakepettersson) * c39fde74f0066835b25cea2d72e6e9207a524849: chore: replace bitnami images (#24101) (@nitishfy) * 90123bac044d7ba42d4729d34370debf5515ce37: chore: update Go to 1.24.6 (#24090) (@thevilledev) * da7f11a82686b2fcba691f3a49c124f6a229f57f: chore: upgrade to go 1.25 (#24148) (@blakepettersson) * 6a2df4380a6cdb9df54b49adbf99de3cf69c6950: ci(release): only set latest release in github when latest (cherry-pick #24525 for 3.2) (#24686) (@argo-cd-cherry-pick-bot[bot]) * 58d82bedb8855cd76e07f7bd8c3046b21a62c01f: ci: fix supported-version script (#23496) (@agaudreault) * fd4355baae217439b686543f6f7d0ef904ca3169: feat(health-check): Add resource_customizations for game.kruise.io (new) (#23558) (@qisongshi) * d75bcfd7b2aaf5e30c02d19017d1c29b4badbc43: fix(cherry-pick): server-side diff shows duplicate containerPorts (#24842) (@pjiang-dev) * 4cd4e5e74e26fa4b3851275f662575742e260595: fix(e2e-tests): ArgoCD E2E test logs print auth-token (#23696) (@aali309) * 0c1eb30b4d463f637e72748f9fc18fdccea65820: fix(fullscreen log): retain filters after fullscreen log (issue #23608) (#23614) (@lsq645599166) * 8e00df53267480217af8a84f9c1841c92d0c5b2e: fix(repo-server): support .argocd-source.yaml kustomize version (#23643) (#23644) (@crenshaw-dev) **Full Changelog**: https://github.com/argoproj/argo-cd/compare/v3.1.9...v3.2.0 <a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>