Argo CD v3.5.7 — Release Notes & Engineering Impact

## Quick Start ### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.7/manifests/install.yaml ``` ### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.7/manifests/ha/install.yaml ``` ## Release Signatures and Provenance All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify. ## Release Notes Blog Post For a detailed breakdown of the key changes and improvements in this release, check out the [official blog post](https://blog.argoproj.io/argo-cd-v3-0-release-candidate-a0b933f4e58f) ## Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ## Changelog ### Bug fixes * 7490bea30d4de6711c2c66e6c5272360e344f3c4: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.5) (#30651) (@argo-cd-cherry-pick-bot[bot]) * 7111dbd87b5f7f24da679249aecf36bdc6332c93: fix(app): ensure deletion message is printed only for text output fomat (cherry-pick #30600 for 3.5) (#30616) (@argo-cd-cherry-pick-bot[bot]) * 0b3553c6059d1d703697972002da823da2739da2: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.5) (#30482) (@argo-cd-cherry-pick-bot[bot]) * 21aea4e25c16756e794ee661657624b4ba3a0700: fix(appset): refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.5) (#30620) (@argo-cd-cherry-pick-bot[bot]) * 4f2aec51c3c3dcb231b65b71415e1248cce79e5b: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.5) (#30497) (@argo-cd-cherry-pick-bot[bot]) * 847e0b5765545a5b2c9125b715eb92049714a34d: fix(cli): send --header values when refreshing an expired auth token (#30061) (#30546) (@nitishfy) * 40bd9f32881b49ed724d3d5c6cc0bcbee17d3b8f: fix(controller): allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.5) (#30503) (@argo-cd-cherry-pick-bot[bot]) * e9ef25a83a6a8f1637615e2133bf28e60b011e33: fix(controller): rewrite resource tree when an app moves back to a controller (cherry-pick #30313 for 3.5) (#30430) (@shimagrawal) * dee004d2b8fa8f390be2be81d9e5af67afb6b288: fix(exec): don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.5) (#30436) (@argo-cd-cherry-pick-bot[bot]) * 8a164d3db5c80b00e1204d9f84b3789e9c8dbc0d: fix(git): send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.5) (#30407) (@argo-cd-cherry-pick-bot[bot]) * f9abfd4b0a912ce6d43bb98e043afc6c57d46ead: fix(health): handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.5) (#30627) (@argo-cd-cherry-pick-bot[bot]) * dcfbe298e4a7e9442f2293f496a68c6a4ab6f25d: fix(health): report CRDs that are not established yet as Progressing (#26346) (cherry-pick #30441 for 3.5) (#30575) (@argo-cd-cherry-pick-bot[bot]) * f67a23ec01cb1fd2d87c9355686a62791792b951: fix(health): report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.5) (#30421) (@argo-cd-cherry-pick-bot[bot]) * 9f2f72eee47c3deca6d048dc1a08ff6b03a242d7: fix(health): use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.5) (#30655) (@argo-cd-cherry-pick-bot[bot]) * 2c9d7dba162b32d36053904738c1677160751077: fix(server): allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.5) (#30568) (@antcybersec) * 43b4eb99db259171ec24b8d099021c8eca87e39b: fix(server): keep the gRPC code when manifest generation is interrupted (cherry-pick #30425 for 3.5) (#30552) (@argo-cd-cherry-pick-bot[bot]) * 6bbaccfe58e2eb8362e5d8602376b25864ee5e91: fix(server): prevent PodLogs goroutine leak on client disconnect (cherry-pick #30450 for 3.5) (#30460) (@argo-cd-cherry-pick-bot[bot]) * e0b841eed327c8f89744e8b7e6f1547f6ec2c81e: fix(sync): remove hook finalizer when live object is missing from reconciliation cache (cherry-pick #29469 for 3.5) (#30660) (@ppapapetrou76) * 9ca2f269eaf2c61b4bf5398f8109f739aa811688: fix(ui): don't crash resource panel when desired state is null (#30528) (cherry-pick #30532 for 3.5) (#30540) (@argo-cd-cherry-pick-bot[bot]) * 4474f55e83b2283710031efdedee3433573c1519: fix(ui): keep status panel links readable when focused in dark mode (#29288) (cherry-pick #30493 for 3.5) (#30543) (@argo-cd-cherry-pick-bot[bot]) * 8bdacc6b16ff52c5223c8536ccd3d8a1cef09b72: fix(ui): refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.5) (#30594) (@adityaraj178) * a6eaca63debdcf447756bd75cbdf2770fab3558d: fix: Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.5) (#30508) (@argo-cd-cherry-pick-bot[bot]) * cc47a8e25356699905a2a2485a72ae858ad9cf02: fix: accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.5) (#30515) (@argo-cd-cherry-pick-bot[bot]) * a304e87eeb3f48a443d87a75323f4aaa1de29483: fix: badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.5) (#30580) (@argo-cd-cherry-pick-bot[bot]) * c4a620f771e5285a524096165b67e7440521c827: fix: honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.5) (#30610) (@argo-cd-cherry-pick-bot[bot]) * 5de7fd9beec1aa897ea8690ddcf2c90784fac771: fix: include multi-source revisions in sync completion event (cherry-pick #30446 for 3.5) (#30471) (@gdsoumya) * ae1da1bc5a8cd00a8b0f76d501844106a45f25fe: fix: modify GPG regex to support additional key algorithms (cherry-pick #27638 for 3.5) (#30496) (@argo-cd-cherry-pick-bot[bot]) * 8685022523530a5d913958c1d9c501e90fb1440f: fix: prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.5) (#30615) (@argo-cd-cherry-pick-bot[bot]) * 4cec051deec742601616782ba384e0c732b66c3d: fix: remove generation from ssd (#30398) (cherry-pick #30402 for 3.5) (#30442) (@argo-cd-cherry-pick-bot[bot]) * 4b0c6643b1ed99c527a320cf6063832ad906cfdc: fix: skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.5) (#30649) (@argo-cd-cherry-pick-bot[bot]) * f277dd0c195109a1de00441142188da4c72627d5: fix: wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.5) (#30355) (@argo-cd-cherry-pick-bot[bot]) ### Documentation * 6af872f5abd3387ec51161bec7920276c4399a87: docs: add FAQ for importing Argo CD as a Go library (cherry-pick #30555 for 3.5) (#30561) (@argo-cd-cherry-pick-bot[bot]) * ae0f73a1658912f7f53219684e597ad26a91a9be: docs: fix non-existent 'argocd repo edit' command in HA guide (cherry-pick #30694 for 3.5) (#30708) (@argo-cd-cherry-pick-bot[bot]) ### Dependency updates * a97897bd379c0443a9830a4e77a5c1556c08fbba: chore(deps): bump slack-go to v0.23.1 and golang.org/x/net to v0.53.0 (cherry-pick #28377 for 3.5) (#30696) (@argo-cd-cherry-pick-bot[bot]) ### Other work * 6d732962f61a99c2a0f221fd26b9aac7c83bcf18: chore: bump version to 3.5.7 on release-3.5 branch (#30720) (@github-actions[bot]) * f68ec0a9e73c0e02b8b5f29280b6973aac95c539: fix(gitops-engine): race condition on empty-uid backfill (cherry-pick #28343 for 3.5) (#30523) (@argo-cd-cherry-pick-bot[bot]) * 7d89f90b67e33019c71092f42b144195642ffe27: fix(util/grpc): don't drop request log entries for Kubernetes-typed messages (cherry-pick #29872 for 3.5) (#30521) (@argo-cd-cherry-pick-bot[bot]) * c67d1e5ef11863567e2ee4a58bfe916f7be3b8a5: test(cmpserver): fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.5) (#30418) (@argo-cd-cherry-pick-bot[bot]) * 9644b05434b354a58b990b5abc727eab5dd985f2: test(controller): wait for the add handler before swapping the cache client (#30384) (cherry-pick #30400 for 3.5) (#30519) (@crenshaw-dev) * cad895b703f296069cf2e5cef659fe487a46eabf: test(git): run TestLsRemote against a local repository (#30386) (cherry-pick #30399 for 3.5) (#30412) (@argo-cd-cherry-pick-bot[bot]) * 0e824b28afde9a65193bf3813f5d5bc485f2faea: test(notification-controller): fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.5) (#30416) (@argo-cd-cherry-pick-bot[bot]) **Full Changelog**: https://github.com/argoproj/argo-cd/compare/v3.5.6...v3.5.7 <a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>