Impact Score: 5/10
Argo CD v3.5.5 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: argocd · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Argo CD v3.5.5. Source highlight: kubectl create namespace argocd
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (6)
- 3295d0cede4438315f1f42b019f7d9197a236d80: fix(ci): use curl in kustomize checksum helper so Renovate can refresh checksums (cherry-pick #29938 for 3.5) (#30100) (@argo-cd-cherry-pick-bot[bot])
- a32fb960058cb1676615987058ff20aec5f99f81: fix(hydrator): retry notes push on cannot lock ref errors (cherry-pick #28469 for 3.5) (#29905) (@argo-cd-cherry-pick-bot[bot])
- f0f6bdea7090f2ab188ab3f379aa56ed2670be58: fix(reposerver): stale manifests and goroutine leak after CMP failure (#29870) (cherry-pick #29874 for 3.5) (#30140) (@argo-cd-cherry-pick-bot[bot])
- 3d31f1a9bbef941f0149d3270d5fb3dcd93790fe: fix(server): fill event count and timestamps for events.k8s.io events (#30015) (cherry-pick #30017 for 3.5) (#30111) (@rickbrouwer)
- 33a47a550daf4ae407baf04f678a4b5918cb8069: fix(ui): show enableOCI only for Helm (cherry-pick #29974 for 3.5) (#30074) (@argo-cd-cherry-pick-bot[bot])
- a48be5aa0a2d89988be52bb817e7498f7c248947: fix: cache the OCI tag list (#30117) (cherry-pick #30118 for 3.5) (#30119) (@argo-cd-cherry-pick-bot[bot])
📄 View Raw Release Notes (Original Developer Log)
## Quick Start
### Non-HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.5/manifests/install.yaml
```
### HA:
```shell
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.5/manifests/ha/install.yaml
```
## Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify.
## Release Notes Blog Post
For a detailed breakdown of the key changes and improvements in this release, check out the [official blog post](https://blog.argoproj.io/argo-cd-v3-0-release-candidate-a0b933f4e58f)
## Upgrading
If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation.
## Changelog
### Bug fixes
* 3295d0cede4438315f1f42b019f7d9197a236d80: fix(ci): use curl in kustomize checksum helper so Renovate can refresh checksums (cherry-pick #29938 for 3.5) (#30100) (@argo-cd-cherry-pick-bot[bot])
* a32fb960058cb1676615987058ff20aec5f99f81: fix(hydrator): retry notes push on cannot lock ref errors (cherry-pick #28469 for 3.5) (#29905) (@argo-cd-cherry-pick-bot[bot])
* f0f6bdea7090f2ab188ab3f379aa56ed2670be58: fix(reposerver): stale manifests and goroutine leak after CMP failure (#29870) (cherry-pick #29874 for 3.5) (#30140) (@argo-cd-cherry-pick-bot[bot])
* 3d31f1a9bbef941f0149d3270d5fb3dcd93790fe: fix(server): fill event count and timestamps for events.k8s.io events (#30015) (cherry-pick #30017 for 3.5) (#30111) (@rickbrouwer)
* 33a47a550daf4ae407baf04f678a4b5918cb8069: fix(ui): show enableOCI only for Helm (cherry-pick #29974 for 3.5) (#30074) (@argo-cd-cherry-pick-bot[bot])
* a48be5aa0a2d89988be52bb817e7498f7c248947: fix: cache the OCI tag list (#30117) (cherry-pick #30118 for 3.5) (#30119) (@argo-cd-cherry-pick-bot[bot])
* ebf5ac7ff31f1dd6511cc0246e13da4de8125743: fix: correct scheduled-time format in CronWorkflow create-workflow action (#29915) (cherry-pick #29916 for 3.5) (#29953) (@argo-cd-cherry-pick-bot[bot])
* 514141dab1058d72c4bfa4f0f08b63a0a6c1ad14: fix: fix escaped URL routing for write repo (creds) endpoints (cherry-pick #29940 for 3.5) (#29958) (@argo-cd-cherry-pick-bot[bot])
* 4d2194b2b8114aa5eb39b41ae12e82676032aae4: fix: fix untar inbound check if dstPath is symlinked (cherry-pick #28881 release-3.5) (#30053) (@blakepettersson)
* 4d68ee32ca16d0f8382bf88cd4adc3b6b3e09568: fix: fixes flaky tests by making Log capturer thread-safe (cherry-pick #28328 for 3.5) (#30078) (@argo-cd-cherry-pick-bot[bot])
* 1d0585d9b5097822fd49d32ca05d818231d1b497: fix: synchronize OCI cache cleanup with extraction (#30020) (cherry-pick #30023 for 3.5) (#30103) (@argo-cd-cherry-pick-bot[bot])
### Dependency updates
* 6b6f042ca2273444044a0b69a9b04ef06ed9b116: chore(deps): bump go-git dependency- #30013 for v3.5 (#30047) (@ranakan19)
* 59e320ff6af81722a355975ea956c79385dce2ed: chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.84.0 (cherry-pick release-3.5) (#30056) (@dipakkarde)
* d1b3091a834353fe71fe58b3137c979dd8554879: chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (cherry-pick #28696 for 3.5) (#30057) (@argo-cd-cherry-pick-bot[bot])
* 29f57d5d9b443d473fa699d3451981c63ba6e9a3: chore(deps): bump the golang-x group with 3 updates (#29705) (cherry-pick release-3.5) (#30072) (@blakepettersson)
* f89a094e6b92b3b83d47adc8f5edebd24302e118: chore(deps): update group golang to v1.26.9 (release-3.5) (#30092) (@argoproj-renovate[bot])
**Full Changelog**: https://github.com/argoproj/argo-cd/compare/v3.5.4...v3.5.5
<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>