Argo CD v3.3.9 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: argocd · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

🔧 Bug Fixes 5

⚡ Executive Summary (TL;DR)

Argo CD v3.3.9. Source highlight: This release contains a security fix to a critical vulnerability: https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3

Visit Argo CD Official Site ↗ Official Release Source ↗ All Argo CD Releases 📡 Argo CD RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

🔧 Bug Fixes & Patches (5)

81786559682714d487536a919e2f37137f47f481: fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.3) (#27501) (@argo-cd-cherry-pick-bot[bot])
c89b3a96ae0b48f77a4edf821822059eb3d92188: fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.3) (#27565) (@argo-cd-cherry-pick-bot[bot])
96107fe7a3edbd1152468897a8f6433f3288b034: fix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick #27265 for 3.3) (#27525) (@argo-cd-cherry-pick-bot[bot])
741a6f59650ba4f892fbad276f097f2732718a38: fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick #27589 for 3.3) (#27593) (@argo-cd-cherry-pick-bot[bot])
5a3a892ed3b705bfb122df6173c44a8689a4f9f6: docs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick #27608 for 3.3) (#27612) (@argo-cd-cherry-pick-bot[bot])

📄 View Raw Release Notes (Original Developer Log)

> [!IMPORTANT] > This release contains a security fix to a critical vulnerability: https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3 ## Quick Start ### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/install.yaml ``` ### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/ha/install.yaml ``` ## Release Signatures and Provenance All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify. ## Release Notes Blog Post For a detailed breakdown of the key changes and improvements in this release, check out the [official blog post](https://blog.argoproj.io/argo-cd-v3-0-release-candidate-a0b933f4e58f) ## Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ## Changelog ### Bug fixes * 81786559682714d487536a919e2f37137f47f481: fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.3) (#27501) (@argo-cd-cherry-pick-bot[bot]) * c89b3a96ae0b48f77a4edf821822059eb3d92188: fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.3) (#27565) (@argo-cd-cherry-pick-bot[bot]) * 96107fe7a3edbd1152468897a8f6433f3288b034: fix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick #27265 for 3.3) (#27525) (@argo-cd-cherry-pick-bot[bot]) * 741a6f59650ba4f892fbad276f097f2732718a38: fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick #27589 for 3.3) (#27593) (@argo-cd-cherry-pick-bot[bot]) ### Documentation * 5a3a892ed3b705bfb122df6173c44a8689a4f9f6: docs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick #27608 for 3.3) (#27612) (@argo-cd-cherry-pick-bot[bot]) ### Dependency updates * 0a2ba7c4c16c711532e557bd8d796d7fda95c745: chore(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 8.0.0 (cherry pick #27602 to release-3.3) (#27610) (@dudinea) * 184b8a915ac2fc4b467395465912fc943fb5cdd7: chore(deps): bump go version to resolve CVEs (#27509) (@crenshaw-dev) ### Other work * fd7ecb33235498cc0913b9444d327a289a0ab218: Merge commit from fork (@alexmt) **Full Changelog**: https://github.com/argoproj/argo-cd/compare/v3.3.8...v3.3.9 <a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>

← Older Version Argo CD v3.2.11 Newer Version → Argo CD v3.1.16