Argo CD v3.3.19 โ Release Notes & Engineering Impact
Component: argocd ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-02.
Argo CD v3.3.19 delivers various bug fixes and improvements addressing proxy handling, Crossplane and CNRM health assessments, and ApplicationSet generation. This patch release enhances overall system stability and reliability for existing installations.
๐ป Software Engineers & Devs
You can benefit from resolved issues regarding proxy configurations for gRPC-web connections and more reliable ApplicationSet generator behaviors.
๐ Product & Engineering Leads
This patch release ensures smoother user experiences through better resource health reporting and credential validation refinements.
โ๏ธ DevOps & Security
Review and apply this patch release to address stability issues, including corrected SIGTERM signal handling for cancelled git commands and updated health checks for Kubernetes custom resources.
โก Performance & Enhancements (2)
- Refined validation and handling for write credentials in repository settings
- Allowed unauthenticated access for gRPC health checks
๐ง Bug Fixes & Patches (17)
- Fixed list Rollout actions when Rollout has no status
- Prevented ApplicationSets from exposing reserved cluster annotations as parameters
- Refreshed GitLab pull request generators configured with project paths
- Honored HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections
- Allowed terminating operations blocked by sync windows
- Prevented goroutine leaks when commands time out without waiting
- Sent SIGTERM before SIGKILL when git commands are cancelled
- Handled Crossplane Providers missing Installed or Healthy conditions
- Reported inactive Crossplane ManagedResourceDefinitions as Healthy
- Used status.healthy for customize.core.cnrm.cloud.google.com resources
- Accepted IP and port as OCI Helm repository URLs
- Fixed badge widths for short revisions
- Honored UserInfo cache limit when response omits expires
- Prevented panics in glob.MatchStringInList for root sourceNamespaces entries
- Skipped dollar escaping when DEX_EXPAND_ENV is disabled
- Waited for current SealedSecret generation before reporting health
- Fixed race condition on empty-uid backfill in gitops-engine