Argo CD v3.6.0 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: argocd · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-04.

Compatibility not verified — check source notes

📄 .MD

✨ Features 6 ⚡ Improvements 2 🔧 Bug Fixes 6

⚡ Executive Summary (TL;DR)

Argo CD v3.6.0. Source highlight: kubectl create namespace argocd

Visit Argo CD Official Site ↗ Official Release Source ↗ All Argo CD Releases 📡 Argo CD RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (6)

bac4616ca429ba92af1b312cb8a2cac36e1cfdea: feat(actions): add hibernate/rehydrate actions for CNPG Cluster (#28478) (@purisev)
0df1a4bcced9a8400d6ddafaf168e6e847209ec8: feat(appset): Add progressive sync metrics for AppSet (#29202) (@ranakan19)
ad23d3a9c04134f42661b5cbdb5aaeac46a1cdad: feat(appset): Adding annotations on apps to force reconciliation before proceeding with progressive sync (#27467) (@ranakan19)
94564eba18592d1bc2fc20e64415c9214203a5d4: feat(appset): add metrics for count of app refreshes triggered by appset during progressive sync (#29244) (@ranakan19)
9ef034e688e86f45fa63465710d5883d88c2ddde: feat(appset): expose workqueue rate limiter flags on applicationset-controller (#28286) (@om7057)
5899f89f745513f324ff0999cf7770821b7b7fd0: feat(appset): surface progressive sync scenario into condition as reasons and messages (#27820) (@ranakan19)

⚡ Performance & Enhancements (2)

ea04c848458cbd36abee10226f0a7d7dd32af7ba: docs(cli): improve docs for `argocd app create --file -` (#29553) (#29563) (@crenshaw-dev)
1098a3eb558abe543c34e725efaacda3b7028442: chore(perf): cache compiled Lua scripts across executions (#28278) (@crenshaw-dev)

🔧 Bug Fixes & Patches (6)

545bcb5eeba8240ffa47299ee9ace8bb54c61dc8: fix(SyncWindow): rename SyncWindow to InlineSyncWindow (#29152) (@adityaraj178)
dcf03494eff98102a44ea10f1a66d80b8644b948: fix(UI): display sync option dropdowns on separate lines (#28438) (@adityaraj178)
99f4efc2588306b1d34260295dba7564cc49e529: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.6) (#30652) (@argo-cd-cherry-pick-bot[bot])
d42eb204e3c2fb6818d562cefab38f03ff33dde8: fix(app): ensure deletion message is printed only for text output fomat (cherry-pick #30600 for 3.6) (#30618) (@argo-cd-cherry-pick-bot[bot])
20ad5f9922600aaa54b82daa4cd7a5e3f63a709f: fix(application): use server-side timeout query parameter via transport wrapper (#28828) (#28977) (@luwangVMW)
3bc9cb6ce0cb378dda87637df7aad8b9dcd7649d: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.6) (#30481) (@argo-cd-cherry-pick-bot[bot])

📄 View Raw Release Notes (Original Developer Log)

## Quick Start ### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0/manifests/install.yaml ``` ### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0/manifests/ha/install.yaml ``` ## Release Signatures and Provenance All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify. ## Release Notes Blog Post For a detailed breakdown of the key changes and improvements in this release, check out the [official blog post](https://blog.argoproj.io/argo-cd-v3-6-rc1-is-here-c0b562dc78d1) ## Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. ## Changelog ### Features * bac4616ca429ba92af1b312cb8a2cac36e1cfdea: feat(actions): add hibernate/rehydrate actions for CNPG Cluster (#28478) (@purisev) * 0df1a4bcced9a8400d6ddafaf168e6e847209ec8: feat(appset): Add progressive sync metrics for AppSet (#29202) (@ranakan19) * ad23d3a9c04134f42661b5cbdb5aaeac46a1cdad: feat(appset): Adding annotations on apps to force reconciliation before proceeding with progressive sync (#27467) (@ranakan19) * 94564eba18592d1bc2fc20e64415c9214203a5d4: feat(appset): add metrics for count of app refreshes triggered by appset during progressive sync (#29244) (@ranakan19) * 9ef034e688e86f45fa63465710d5883d88c2ddde: feat(appset): expose workqueue rate limiter flags on applicationset-controller (#28286) (@om7057) * 5899f89f745513f324ff0999cf7770821b7b7fd0: feat(appset): surface progressive sync scenario into condition as reasons and messages (#27820) (@ranakan19) * 4e8ea39ca215a7f4c4df2d159dc3a88a8e60d994: feat(ci): enable Zizmor to enforce secure config (#27304) (@crenshaw-dev) * ec10f2e627042e29044b6de5f550f6bacf19708e: feat(cli): optionally exclude status field when using `argocd admin export` command (#29219) (@nitishfy) * 5c3637def4bef8daf16311877d9bc6f98f39f4ec: feat(controller): allow metrics label/condition flags via argocd-cmd-params-cm (#28287) (@edgrz) * 5f8562e90a9310a9e521e5aa6ae529060a567279: feat(dex): Configure Dex TLS Cipher Suites and Curve Preferences (cherry-pick #29658 for 3.6) (#30217) (@argo-cd-cherry-pick-bot[bot]) * d94bcb1215c15bbe12835b4653e7c58f42b9241f: feat(dex): Configure TLS Minversion for Dex web (#28712) (@akhilnittala) * 465d43b2455fa60c45c02041b553054921934e3d: feat(dex): Making Dex storage type and config configurable from argocd-cm configmap (#28624) (@akhilnittala) * 2e2f4e450d57bafa249aaa330d61901f76d424df: feat(health): Implement kyverno health checks (#27354) (@sandert-k8s) * 034ab6150952f23071d452f0f6fc0b400124d7e1: feat(health): add built-in health check for TLSRoute (#26596) (@dnfwlq8054) * 49aa0eab6d876ba8a69b198e8319495c9931dcfb: feat(health): add health check for AWS ACK resources (#29016) (@philljie) * e1145c626c7dee9ba7e437447bc2b3319e042f3f: feat(health): add health check for CloudNativePG Backup (#28468) (@yugstar) * 643de0bcff5a48076ce582d8b096a3f5fc1402ff: feat(health): add health check for CloudNativePG Database CRD (#29511) (@Matthiator) * ff00ee7d69ffc3d85b175bf37bbc40c7e814d183: feat(health): add health check for Kro resources (#28743) (@philljie) * 3825b96ac9ce29b500f8895e47fd44fa26901a74: feat(health): add health check for MedusaBackupJob (issue #28009) (#28008) (@mgross2) * 309594ba94218770caa0e922530962b915741b0f: feat(health): add health check for MedusaTask (issue #28007) (#28006) (@mgross2) * 6858a80b2af7fde484986ea4bc282c85a489d1fd: feat(health): add health check for Prometheus Operator Alertmanager (#28446) (@yugstar) * 2338867cea9ca0390ae5ad33a9b045f72a797f73: feat(health): add health check for Prometheus Operator ThanosRuler (#28463) (@yugstar) * 831d77b52c809dec1ae8b7107ccb264825402d7d: feat(health): add health check for cert-manager CertificateRequest (#28465) (@yugstar) * dec470a0ab16b7c6a97fe4eb58f9ae430eb0a04f: feat(health): add health check for cert-manager trust-manager Bundle (#28615) (@yugstar) * fdf6751b85a04b0b60a23ec0bcd5641c814b09ec: feat(health): add health check for flink.apache.org/FlinkSessionJob (#26626) (@sivchari) * 21ac508ef6aaae8238710688fbf26e0c20d2b9d7: feat(health): add health checks for Tekton PipelineRun and TaskRun (#28467) (@yugstar) * 180061c9b2cd879b966f60a46e09a83001acc4d8: feat(health): add health checks for Velero Backup, Restore, and Schedule (#28464) (@yugstar) * 57088014f10c71331ce6719f1c85d778ccfd5b14: feat(health): add health checks for cert-manager ACME Order and Challenge (#28466) (@yugstar) * 291bfab82175b7580165a7a11be282151eac0ad8: feat(health): enable a Pipeline labeled 'recyclable-expired' to be deleted (#28532) (@juliev0) * 463f39afe5d91882e51c345fe5bce6ead40adeae: feat(health): support ListenerSet.gateway.networking.k8s.io (#28388) (@root30) * ffe66fff46708bbbe4183b13f3d2cde657664c4b: feat(health): support custom deletion messages (#27595) (#27596) (@crenshaw-dev) * 5e8ed632babda75965940a0f175010bb974b50b7: feat(health): support various policies _.microgateway.airlock.com (#28268) (@root30) * 961bd434659679dd9d80e8a4d83acb71dfcec2cd: feat(hydrator): add metrics to app info (#29512) (#29514) (@crenshaw-dev) * 2d71dc6b6e4e1ddda65f950bb3f538e04ca7c76e: feat(hydrator): sign hydrated commits (Alpha) (#28239) (#28271) (@mladjan-gadzic) * c2df91b70ff69c24b1b5fc457e384fafab573544: feat(impersonation): allow to disable strict enforcement (#27084) (#27573) (@agaudreault) * e2b719ad65d7b09002e0b17b8f1bdf8640c6e7e8: feat(otel): add spans with configurable sampling (#28396) (@blakepettersson) * b2e6d1d929cdca79f774075bfaef9f738f1d1524: feat(perf): configurable serialization and compression for cached manifests (#26897) (#28600) (@adityaraj178) * e5eb504a3a2b8ad3013dfc6b9962c2a071a4772d: feat(perf): count apps per cluster in a single pass (#29570) (@rumstead) * 4c36558382aad92ccdc8129f7045db6f84807950: feat(perf): drop two redundant application copies from the refresh path (#29581) (@rumstead) * 37273e31438a571e337058efb6e3fbbe1b28044b: feat(perf): partial json unmarshalling (#29378) (@blakepettersson) * 0f901d1e2d9f9e9da3e52ddde9d0c97542aa6a91: feat(perf): resolve the destination server without copying the cluster (#29573) (@rumstead) * 0c2545d51db30d8ce5e80a19883f4e8b65bf2947: feat(perf): reuse matrix child params when the generator is unchanged (#29582) (@rumstead) * 54a740e1048b80eb3f4856e2cdc25c9bae51df94: feat(resource_customizations): support ignored status for victoriametrics healthcheck (#29351) (@AndrewChubatiuk) * 4abcbcf1a904e2ec6ba3310f22d5763b3e4bc772: feat(server): Add support for redirect to selected Dex connector (Alpha) (#24221) (@antonu17) * e4470c5ff3cd0a4b948714c3f3c19731d26be05b: feat(server): add configHash field to Cluster (#25311) (#27657) (@matmil-dev) * c2e39d87739338f7c57792bb394e14321a899c27: feat(server): log username on login attempts (cherry-pick #29841 for 3.6) (#29859) (@argo-cd-cherry-pick-bot[bot]) * fc848eb1b454870ebab17d1092c44ae6017b3991: feat(server): set X-Robots-Tag to prevent indexing of the UI (#28359) (@yugstar) * 0141bf077dea55a15437401e7a61ab07fd2f9ad3: feat(tls): Make TLS Curve prefereneces configurable while setting TLS options for repo-server and server. (#28846) (@akhilnittala) * ba47c6b6b0015a9939cd630db444a1e9aa1f957f: feat(ui): Implement virtual scrolling for Apps list/tiles view when `all` is selected (#29542) (@aali309) * bf984eaa6c17dc1d832bbbfd44760cd1e82ada06: feat(ui): Lazy loading (#29087) (@jwinters01) * ac0119467ed8bcccf960fffdbe2603f9c6b95efb: feat(ui): add regex search toggle to application(sets) list (#27857) (#27889) (@rickbrouwer) * 807320130714a5939242a47f32e48e28a97a02fa: feat(ui): add resources explorer view (#28098) (@agaudreault) * 5b4b5def23bce4e7a0d26478ba1674361aab12b1: feat(ui): add search bar and pagination to settings pages (#28305) (@agaudreault) * e2a605e0d0a1f2c154c4f2215f8c66a02beba602: feat(ui): add server-side name filter to applications list and watch (#29106) (#29242) (@rickbrouwer) * f495ca51ee8f5d725c3ea38c4b7d1a8c227b5f29: feat(ui): advanced settings view (#28383) (@agaudreault) * 4fa944edff93a4116eee008e6b018057d4da6965: feat(ui): enable React Compiler in the build (@jwinters01) * 14333597102184e784a6f2adae70b84d989e3e74: feat(ui): show last scheduled and successful times for CronJob in summary panel (cherry-pick #30690 for 3.6) (#30748) (@dudinea) * 9cf8d7c125ac534aa58c1ee089fb48dbe80cd1d4: feat(ui): sidebar anchors (#28527) (@blakepettersson) * 91f7adcbcfecfdeb21e87678ccdb1bc1ae15172a: feat(ui): use anchors instead of divs in app/appset tiles and tablerows (#28005) (@blakepettersson) * 73bf020633ecd20cd4d96ec9af504b8aab4c98aa: feat(webhook): Add manifest-generate-paths annotation support for BitBucket Server (#27552) (@adityaraj178) * ca3139e842d84130ec9ed39bdfaa57ee3998bd1d: feat(webhook): add webhook support for harbor (#27810) (#27884) (@adityaraj178) * 7bdadbf693502e8ac5cdfda281e2972eaa2a04da: feat(webhooks): add webhook support for DockerHub (#28022) (@nitishfy) * 79b0815beb400ed0ec9c32e36ba7360d4e9b98f4: feat: Add deprecation warning when using --signature-keys (#28941) (@kuci-JK) * b5d698a00a2797cbadb8c6d7769b0161daea0f18: feat: Add health check for pulumi.com/Stack (#28534) (@guineveresaenger) * 0703fcacf7c7411ffbc3fabf511b7eadc5ec3927: feat: Add health check resource customizations for Envoy Gateway Extension CRDs (#27291) (@obliadp) * 34427a68b08f46f0bd43846213a2aaf24452cbd6: feat: Add reporting component to events list (#25684) (#27678) (@Suven-p) * 816fcd02cf47cdfaebd93df9bd9d9dac332ff7ab: feat: Allow pod healthcheck to ignore restart policy via annotation (#15317) (Alpha) (#28249) (@jskrill) * 48f94615f072046d6621287e0b5c86c07efafed9: feat: Default to SSD with SSA and remove SMD (#29103) (@pjiang-dev) * 43637e4b85a697bc83c27fac50362f5cd20a12a8: feat: Persist and reuse client certificates if they were using in argocd login call (cherry-pick #29718 for 3.6) (#29781) (@argo-cd-cherry-pick-bot[bot]) * 35238e3472a27604de22939d217bdf98c3ca9b0b: feat: Replace SIGNATURE-KEYS with SOURCE-INTEGRITY in proj list (#28920) (@kuci-JK) * 7a80e4ca9272889d9c452cedca7fe459b06bc127: feat: accept repository-style Azure keys in repo-creds (#29414) (#29415) (@SHINMH) * 1828831237e85645081cb4483061de4f1687ce4f: feat: add `tpl` function to ApplicationSet go-templating (#16302) (#26614) (@twobiers) * 58d427f5391887092d1ff36c61157a865fadea8d: feat: add a button to clear logs in the pod logs viewer (#27149) (@gcadoret) * eb15eb4a23c8820c35a45756ff3a28bd77b3a0c6: feat: add bundled health check for KServe LLMInferenceService (#29599) (#29620) (@sarfarazgit) * dcdf8e4026450611d23077271705a44a9f21d10b: feat: add clear all button to ApplicationSet filters (#28593) (@choejwoo) * 619c642457581e5929b8628676a7c4517e358c87: feat: add configurable SSO login button text via ui.loginButtonText (#28254) (@NotKiwy) * bcb771e29326321b7be0c4bfe2d2a7c742ac7955: feat: add oci generator for applicationsets (#26121) (@robinlieb) * 68b8af21e358fa01ea42ba34aa26ab3bd854c4ab: feat: add option to disable Swagger UI endpoint (#28717) (@smahadik-27) * 79e1229469403a4e9cbab5043f9128948711a330: feat: add which resources caused the app health to change (#28455) (@agaudreault) * e8e5ba20f7a2449a254cc2a380c293099159da38: feat: adds a server-proxy-url flag in cluster add command (#28134) (@ppapapetrou76) * bcf18220b76d55a00599da0b8993276c2a419f72: feat: allow optionally setting a prefix for redis keys (closes #12978) (#26169) (@healthy-pod) * 7cfc6cfd2e7b5de1b9e29ee497a07135405047d2: feat: allow to create Jobs from CronJobs with OwnerReferencesPermissionEnforcement admission (#26009) (@sathieu) * 0984033236c695ee20ae344c402fa0d30e8a30fd: feat: support REDIS_SENTINEL and REDIS_SENTINELMASTER env vars (#28391) (@suii2210) * 127dbe7bcd94f3f6883eae1f2f3465763e5a5282: feat: support filtering out managed resources using label selector (#29423) (@alexmt) * 9e9c2f1e751242cb3c26aaa9cc5d4cbe6426139e: feat: support ignore-differences annotation on resources (#29616) (@ranakan19) * 7d05a395eb4149c9c8d41cad3f27a20c3d6367fd: feat: support separate RBAC permission for application rollback (#28924) (@ppapapetrou76) ### Bug fixes * 545bcb5eeba8240ffa47299ee9ace8bb54c61dc8: fix(SyncWindow): rename SyncWindow to InlineSyncWindow (#29152) (@adityaraj178) * dcf03494eff98102a44ea10f1a66d80b8644b948: fix(UI): display sync option dropdowns on separate lines (#28438) (@adityaraj178) * 99f4efc2588306b1d34260295dba7564cc49e529: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.6) (#30652) (@argo-cd-cherry-pick-bot[bot]) * d42eb204e3c2fb6818d562cefab38f03ff33dde8: fix(app): ensure deletion message is printed only for text output fomat (cherry-pick #30600 for 3.6) (#30618) (@argo-cd-cherry-pick-bot[bot]) * 20ad5f9922600aaa54b82daa4cd7a5e3f63a709f: fix(application): use server-side timeout query parameter via transport wrapper (#28828) (#28977) (@luwangVMW) * 3bc9cb6ce0cb378dda87637df7aad8b9dcd7649d: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.6) (#30481) (@argo-cd-cherry-pick-bot[bot]) * 9bb331250c0d3f8d47d337208866afca93f86b73: fix(appset): don't release finalizer while children still terminate (#28999) (@blakepettersson) * 777f9132b73d6f9b93798f6c4900556c36b1cf7f: fix(appset): fail reverse deletion when a stale cache entry cannot be evicted (#29042) (#29140) (@himeshp) * fea95e66c423f71c393f1303dc6a2a85a858b5d5: fix(appset): fall back to create when patch returns NotFound (#17312) (#28645) (@rickbrouwer) * a619eb81d99e872ba1637e0003f69aeb096bff27: fix(appset): make ParametersGenerated condition message consistent (#30405) (cherry-pick #30438 for 3.6) (#30577) (@argo-cd-cherry-pick-bot[bot]) * d1a941e7095d8da75c0ccf53d1af879391252fe8: fix(appset): refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.6) (#30623) (@argo-cd-cherry-pick-bot[bot]) * a822683efd4a73360b5643b6a2d53d2f2326ee7e: fix(appset): restore ignoreApplicationDifferences after normalization (#29070) (@pjiang-dev) * 3be29876ba77072cfbf4585b2d8a28b2d0912a1a: fix(appset): stop progressive sync reconciling in a tight loop (#27577) (#29044) (@himeshp) * 4891d4f4745ae87b9aebd2577d0fe5a3433b8aab: fix(appset): throw error when generated apps have empty name (#28833) (@nitishfy) * 29faea2da97274e1eba16bd87d026eb50f942880: fix(appset): verify terminating Applications against the API server (#29042) (#29043) (@himeshp) * 81cd93e553ce915075599a32335032322c44bc23: fix(chore): bump argo-ui for React 19 toast compatibility (#28874) (@choejwoo) * 75bbd2a60380d88c8709515b715f569520c80ec6: fix(ci): authenticate gitops-engine tag push in release workflow (cherry-pick #29744 for 3.6) (#29755) (@argo-cd-cherry-pick-bot[bot]) * 73661b801935213221948c167acd943e1eb20f6e: fix(ci): exclude generated workflow from dependabot (#28774) (@crenshaw-dev) * 760229084538b77a5b269bf2449a7d2f19087dea: fix(ci): expand image tag in staging deploy commit message (#28773) (@crenshaw-dev) * 955378d6e015d48ee58357532b86545c50bd716a: fix(ci): explicitly check out base repo and default branch for cherry-pick job (#28413) (@blakepettersson) * 82682852c7f0684b57052e8d9447fd0c733983e9: fix(ci): fix CI breakage: remove dependabot's changes to an agentic workflow compiled file (#28772) (@dudinea) * 1af3199ee504a86ddf1a6ed30ad11c392b310b75: fix(ci): fix readthedocs build by removing an invalid link (#28449) (#28450) (@dudinea) * 541db75ef88063896ee5ea5d3628549319a25af1: fix(ci): gitkeep so go builds work (#28461) (@crenshaw-dev) * bef2051b11a07e26981ea13dc1d48ba749610b76: fix(ci): regenerate manifests in Renovate helm post-upgrade tasks (#29297) (@crenshaw-dev) * 2df94aebe8710797e14ceee0e8141d98efcc40c0: fix(ci): remove unneeded and misnamed ui/dist/app/gitkeep (#28447) (@dudinea) * ebcbc95aaabc0b884fee860fef5082d761274db7: fix(ci): strip v prefix for helm and git-lfs renovate checksum tasks (#29287) (@crenshaw-dev) * 9ae60857e3ef6cd1b8bacda4a422b87038b10d12: fix(ci): use curl in kustomize checksum helper so Renovate can refresh checksums (cherry-pick #29938 for 3.6) (#30102) (@argo-cd-cherry-pick-bot[bot]) * 780d5405a3c3df162db028334689888c91f7a94f: fix(cli): accept write-repositories in 'argocd admin settings rbac can' (#30457) (cherry-pick #30458 for 3.6) (#30550) (@argo-cd-cherry-pick-bot[bot]) * 7b445c1b182592cfc0f6d6e0869213fa1beefbdb: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.6) (#30498) (@argo-cd-cherry-pick-bot[bot]) * 67c4a1237cc0a8bc901eca437823aca1de753ccc: fix(cli): send --header values when refreshing an expired auth token (#30061) (#30511) (@nitishfy) * bb33bb0d1e724bac9e6964af98c76cebe5ab6be9: fix(cli): skip stale destinations in cluster stats (#21808) (#28786) (@AkashKumar7902) * 752958a526cc2055d7b89293016f31dfe7264e35: fix(cmp): clean up tgz stream temporary directories (#29148) (cherry-pick #29156 for 3.6) (#29772) (@argo-cd-cherry-pick-bot[bot]) * e76a5d853f50a9605fdd66e8197f66687c14e6f3: fix(controller): allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.6) (#30505) (@argo-cd-cherry-pick-bot[bot]) * adbc3dcdc699fb9732ef67b4e27db61a68cc49ce: fix(controller): confirm project references before blocking deletion (cherry-pick #29737 for 3.6) (#29743) (@argo-cd-cherry-pick-bot[bot]) * 5f4e24ec353399da81664ea1e04e9c758de21579: fix(controller): correct metrics flag help names. (#28358) (@siddiksawani) * 28334d185e594be8b4b6bae8bbe428316aeb078c: fix(controller): dropping refresh requests during reconcile (#28603) (#28414) (@dudinea) * d419d3b548b916e88b2053f30f9a5ddfc23e3fe6: fix(controller): honor manifest-generate-paths for shallow-cloned repositories (cherry-pick #30485 for 3.6) (#30565) (@argo-cd-cherry-pick-bot[bot]) * cb99c80a553aa3eb25b38a8216ddac0b16aa3013: fix(controller): reuse server-side diff result when masking Secret data (#27858) (@1ovsss) * fcb97d8c8c617dc58560b59e7cb9a47dabb9c2aa: fix(controller): rewrite resource tree when an app moves back to a controller (cherry-pick #30313 for 3.6) (#30382) (@argo-cd-cherry-pick-bot[bot]) * f8c252b09b2c0213d1635d4f8417dd2d37f66768: fix(controller): show retry wait time in unambiguous format (#29534) (@nitishfy) * b9e9d4117c89a97c84afc98022d1ccef867637c5: fix(controller): treat `timeout.reconciliation=0` as disabled soft expiry (#27683) (@aali309) * f4adccd118f0ee0aa8a0149f94db56cc14f9cacd: fix(controller): use diff cache when timeout.reconciliation is disabled (#29073) (@aali309) * 360aa9ba318d11a3c8805561d5fe7b7b771871a8: fix(diff): don't drop manager-owned descendant fields when filtering webhook mutations (#28819) (@pujitha24) * 3fbe407789117445d088c41f867337591db33173: fix(doc): correct cluster generator example comments (#29196) (@aminerachyd) * e2d36692fb8106cdf496d4756f476fa72da5ac0e: fix(docs): correct broken documentation links (#29572) (@yashrajshuklaaa) * 7cec612777e9d5fb5c1b7966faf1bf0fc71df321: fix(docs): link version banner to stable equivalent page (#27054) (@SkyShineTH) * c56c41bbdc47821bb47dd22c7da142b29bae0918: fix(exec): don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.6) (#30433) (@argo-cd-cherry-pick-bot[bot]) * de72f7a087d5b2e2c61086361a655b0dae88f0f2: fix(git): send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.6) (#30410) (@crenshaw-dev) * 1bb9bd33df59a383f0840d180b32aed2c1c2d3b2: fix(grpc): a workaround to fix SRV _grpclb._tcp SRV lookups (#29989) (cherry-pick #30084 for 3.6) (#30169) (@argo-cd-cherry-pick-bot[bot]) * 3c5af0d9dc49a1c8f55fa2a32cc75eeacbea7d8b: fix(headless): enable SyncWithReplaceAllowed by default for in-process server (#27643) (@SAY-5) * fd04feb4b2b795fcabc67ceb41bffd121c37ad0a: fix(health): AWSManagedControlPlane reports Healthy while EKS control plane is updating (#28936) (#28937) (@moko-poi) * e238e1a4e6aec5285cdfd1b81c6f61dc2c5dd87d: fix(health): Crossplane MRs should report Progressing (not Healthy) whilst provisioning (#29381) (#29382) (@kjothen) * 381b41866746fe7c5161091ddfa40739dbe2142c: fix(health): PromotionStrategy and ChangeTransferPolicy Healthy, not Progressing (#28434) (@crenshaw-dev) * ae1fc9969313e39242663ed6a1b0d6f408456dfc: fix(health): ResourceBinding health check for dependency-propagated bindings (#28299) (@pncloud) * 785005d9096eecd0ce2e2f1af192cb5bf2600324: fix(health): a KubeVirt VirtualMachine declared stopped is Healthy (#29664) (@daixtrose) * d4f229e281f8455d90b2915e55eb908c39cc37d9: fix(health): handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.6) (#30628) (@argo-cd-cherry-pick-bot[bot]) * fd151ade5462d88fa8ffefd51aa14c2e6f9b7ecd: fix(health): report CRDs that are not established yet as Progressing (#26346) (cherry-pick #30441 for 3.6) (#30576) (@argo-cd-cherry-pick-bot[bot]) * 9cc2dd35602a955a41c78bbc7f026f776d92379a: fix(health): report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.6) (#30423) (@argo-cd-cherry-pick-bot[bot]) * a1e358a57f52d14696d77cdc10eaee61a48c9024: fix(health): report suspended FlinkDeployment as healthy (#26818) (#28995) (@SaiPisey2) * 7cf440730872497c3b32c1c802690a1784e58979: fix(health): surface the Suspended condition message for suspended Jobs (#28738) (@semx) * fd09092b7d46ec7bb36b663a32c9d888cfb5e5d6: fix(health): treat nil return from Lua health status script as n/a instead of unknown (#28269) (@snorwin) * 3ba7162c10620ca3bf7d48f6979d0912643d465d: fix(health): use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.6) (#30657) (@argo-cd-cherry-pick-bot[bot]) * b48e31cfbbbbd1c8233b58620873770757aed3ff: fix(helm): pass registry passwords through stdin (#17821) (#28795) (@AkashKumar7902) * 05c4c4b56e842edfaf4e2b2adde20fe1615a6a06: fix(hydrator): do not report a permanent note push failure as exhausted retries (cherry-pick #29903 for 3.6) (#29909) (@argo-cd-cherry-pick-bot[bot]) * 65feaf50238bf8220fbacfc3576ecf12f0a67712: fix(hydrator): retry notes push on cannot lock ref errors (#28469) (@Churi12) * 906ca1166d68e024391012c8605bbebe377c394a: fix(metrics): expose application operation phase in argocd_app_info (#28719) (@vishnu97770) * a8529cd025d600882810d8ce5d738351b58a4163: fix(oltp): honor standard oltp tls/header env vars + argocd-tls-certs-cm (#29946) (cherry-pick release-3.6) (#30334) (@blakepettersson) * aeda334c73e682fa2ea0ea0b0a93766e9ebf42a8: fix(progressivesync): check if error == notfound (#28663) (@blakepettersson) * cd44f2784d2222cd0cfb0de1d54f005bcc1b6a53: fix(redis): incorrect fail metrics on RENAME cache miss (#29037) (@agaudreault) * c7457d0668d321444560e1c0db56278c585c417c: fix(reposerver): honor depth of referenced source instead of primary source (#28339) (@alexandresavicki) * 31101a86a62c8352e476fcba192e39b7ef82455d: fix(reposerver): stale manifests and goroutine leak after CMP failure (#29870) (cherry-pick #29874 for 3.6) (#30142) (@argo-cd-cherry-pick-bot[bot]) * c73a59ad73e4e4b15f28ec3bdeeec5516038daad: fix(repository): clean repository on revision change (#28771) (@emil-ep) * 2f7eee24a6c5eb08b9c8f4bc62dbf1ea45ec6391: fix(repository): resolve untyped helm source type in UpdateRevisionForPaths (#28904) (@Churi12) * b77bdaa2c76df9da83b26bf484c6deaf109263f5: fix(repository): restore Normalize in UpdateRevisionForPaths to unbreak master (#28979) (@Churi12) * c71119fe756e12550670a78edf2eae08b935aef0: fix(revert): auto-sync skipped when newer commit arrives during sync (#28692) (@blakepettersson) * d5dd7019ee65be8895133fe4df554e28074242c4: fix(security): coordinated security fixes (release-3.6) (#30037) (@crenshaw-dev) * d1a8d1ebe114821152891e56fef6fecf743e4bae: fix(server): allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.6) (#30567) (@antcybersec) * 011bb47da0f59ca5a44289e51cd2cda6fbad80c0: fix(server): fill event count and timestamps for events.k8s.io events (#30015) (cherry-pick #30017 for 3.6) (#30051) (@argo-cd-cherry-pick-bot[bot]) * 323bb8e529b4354488543f18004029ac3df01218: fix(server): keep the gRPC code when manifest generation is interrupted (cherry-pick #30425 for 3.6) (#30551) (@argo-cd-cherry-pick-bot[bot]) * 7deb9a89a3af51c11bf52159c6f069e092ea0d3b: fix(server): prevent PodLogs goroutine leak on client disconnect (cherry-pick #30450 for 3.6) (#30461) (@argo-cd-cherry-pick-bot[bot]) * a37f1f1ad303dae728381260dfe35edeb7d55ab3: fix(server): prevent SSD CLI secret mask spoofing (#29089) (@pjiang-dev) * 2662e88843f79ba0d29f14d84bc8c0431b3b5bb5: fix(sharding): process apps with an unresolvable destination on one shard (#30456) (cherry-pick #30463 for 3.6) (#30639) (@argo-cd-cherry-pick-bot[bot]) * 166cb92ea94c3d46861773e8d5b7d2a65ab7ae8d: fix(sharding): recompute distribution when Update adds an unknown cluster (#29476) (cherry-pick #29477 for 3.6) (#30318) (@argo-cd-cherry-pick-bot[bot]) * 994e271bcc3c591540bbe778bf09df303dcbf5f7: fix(ssd): hide secret in last-applied-configuration annotation (#28989) (@pjiang-dev) * a683bdec6afe94c9ed88b6c7744d909407e12ec7: fix(sync): add state information for sync operation (#28758) (@agaudreault) * 9b40474c009cc0a3596da7180501b7f259b90700: fix(sync): correctly set operationState values on retry (#26530) (#28778) (@agaudreault) * ba8600cb76922a8b252052d9a127a3b184446f44: fix(sync): do not pass --force to server-side apply (#29624) (#29626) (@KR-Ravindra) * 5ee2ae0cf42cc5501eb957e3648f66beb0e3008c: fix(sync): reduce unnecessary sync operation caused by refreshes (#28619) (@agaudreault) * 59b49b47450f6782a3385e2a9955eb1e71ae9569: fix(sync): remove hook finalizer when live object is missing from reconciliation cache (cherry-pick #29469 for 3.6) (#30529) (@argo-cd-cherry-pick-bot[bot]) * 5da9053d0ebcccf2a5858bd6578b9a5a8ec52255: fix(ui): Fix Hydrate-To revision name in App details (#27134) (@olivergondza) * a1c22f1086166c9023e15bc0929b2a4983ee91be: fix(ui): add ResizeObserver to Monaco editor to fix collapsed rendering (#28810) (@choejwoo) * 7dbd403ef1a43c9948449a50d1bc4e2d05d13c76: fix(ui): align tile favorite icons consistently (cherry-pick #29844 for 3.6) (#29845) (@argo-cd-cherry-pick-bot[bot]) * 2fadff2054bbecf1f6283ecbeefdcf2fc3d1ef44: fix(ui): clarify scoped repository copy (#22793) (#29177) (@SHINMH) * 867b2c71e4d5ef55580665709c60717ce61ddf97: fix(ui): don't crash resource panel when desired state is null (#30528) (cherry-pick #30532 for 3.6) (#30538) (@argo-cd-cherry-pick-bot[bot]) * 1214aeda6bb23a02bf91427c587112899f3a73ea: fix(ui): enhance Bitbucket Server URL handling in ui for repo and revision links (#27587) (@adityaraj178) * 8a7ab41f6450c3910ef5cec8ddcda50645073e3a: fix(ui): format parent node info with Argo styles (#28385) (@agaudreault) * 51ec3eae5686eb1a6dcc78175716edaaab720df7: fix(ui): guard SSO redirect to stop 401 retry loop (#28807) (@geojaz) * f363af584ab3adff613a481d0c1f5b243c34cd64: fix(ui): hide the pod highlight button when there is only one pod (#29252) (#29255) (@sandaruwijewardhana) * aa4629e50c2ae8c138b9333e4add48a7124d2aff: fix(ui): keep application list names aligned with external links (#29259) (@linghaoSu) * b5850f166d4f8339befbc6af5a67c5e26101b5fe: fix(ui): keep notice icon next to app name in tiles (#29413) (@choejwoo) * 4709e8377b2f25979aa8432b645019e5833e2c5b: fix(ui): keep status panel links readable when focused in dark mode (#29288) (cherry-pick #30493 for 3.6) (#30542) (@argo-cd-cherry-pick-bot[bot]) * 14711c7eca960e505bc61d464cdd9d84b6863598: fix(ui): keep the pending New App form update when re-renders (#30248) (cherry-pick #30249 for 3.6) (#30611) (@argo-cd-cherry-pick-bot[bot]) * eeef47fc23819f29842ac36267079ca676194cd0: fix(ui): make pod highlight dropdown readable in dark theme (#29605) (@choejwoo) * b5c9f00ef3d1b5609376d6bc5c5648b52b84237e: fix(ui): manifest viewer jumpiness (#29691) (#29692) (@crenshaw-dev) * 49c7d81bcbe3383c2d81d9cab3447faa13cd1e91: fix(ui): navigate to application on appset list view row click (#28789) (@choejwoo) * f92e3de98cbb346f4988e96ba4556448bf9df1f8: fix(ui): prefix application-details per-app CSS class to avoid collisions (#24220) (#28573) (@polarAli) * 50f99757f1746f93d165851355ad7b87cb3f3e1a: fix(ui): preserve application tile height and spacing with page all (cherry-pick #29777 for 3.6) (#29803) (@argo-cd-cherry-pick-bot[bot]) * 5e8122adab7f7a29958f79e7e15c377e74d2c9e5: fix(ui): prevent content showing through sticky source title (#29107) (@choejwoo) * 903c310230ff68e3b0433d6cac304047638f8af5: fix(ui): prevent crash when deleting ReplicaSet from grouped list (#26167) (@choejwoo) * 705205d22818fff1039f5092b56669d73627b500: fix(ui): prevent delete button from clipping in application tiles view (#28379) (@choejwoo) * a2bd9e8cda9e91498b9b896db9961350bac01f22: fix(ui): prevent resource action buttons from overlapping status icons (#29302) (@linghaoSu) * 624e62a704306b7560edffc011bc2370cacb7367: fix(ui): reduce Applications virtual-scroll flicker on scroll (cherry-pick #29935 for 3.6) (#29972) (@argo-cd-cherry-pick-bot[bot]) * 7e44792a057a1932bb60f2fd8ba0ed3ecdc3fb51: fix(ui): refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.6) (#30592) (@argo-cd-cherry-pick-bot[bot]) * 3d62384914badf7a666bc54c149af3def065afa8: fix(ui): remove kind filter from appset page (#29310) (#29311) (@crenshaw-dev) * 58c7f84ec185d2fc42e6e3095f4cc993a77618e5: fix(ui): remove unnecessary open app icon on list view (#29681) (@agaudreault) * da921411fed9777fb176d1eff0600d6a5b66c04c: fix(ui): show enableOCI only for Helm (cherry-pick #29974 for 3.6) (#30075) (@argo-cd-cherry-pick-bot[bot]) * 1fb9b6bbd9e8bed13d1001c33a329a01ad26db10: fix(ui): show full name of app on hover (#29235) (#29262) (@adityaraj178) * 9bc95f9edae447372ee6724a909f438a26d00353: fix(ui): show multi-source plugin env in Parameters tab (#29465) (@lemon0333) * 9a7d50a093e71fdf975d0a1de83a1f3a8a2c4d71: fix(ui): show operation state on applications list page (#29063) (#29064) (@antonu17) * c1f41d4f3f02b677835b8f50786d04b487e3d2f2: fix(ui): show warning in appset-status display (#28445) (@ranakan19) * 25aef12304d0d800a3f87b1b6b99bae62cc0778f: fix(ui): sidebar icon alignment (#28783) (@southball) * f2ba7a0e9bc020b566c39953c20659d13c2d0626: fix(ui): tree view spacing with group nodes (#29660) (@agaudreault) * 83f0886fd3087772a06d1e254297aeefd9e66c20: fix(ui): update cluster count logic in ApplicationsSummary (#28768) (@linghaoSu) * effa730fe4b62aa2c65b215f0755063ffa0b29ed: fix(ui): update icon for consistency in appset list (#28528) (@choejwoo) * a817e9aac691c7309fb1e1599c467d932e9d564d: fix(ui): update title in appset details page (#28529) (@choejwoo) * bbbbaa1647168efeedd363dabb277a693a360e4c: fix(ui): use break-word on sync status message (#5084) (#28961) (@EmilyXinyi) * ae1b83ef7b7663b2b25f65cc442d79b673abe9f7: fix(ui): use distinct icons for open-app and external URLs (#28503) (@choejwoo) * 5f0c9b42c53dad51e647cbe92599f7b7dc1dde57: fix(ui): use groupedResources local variable in parent ref panel (#28399) (@crenshaw-dev) * 53cd3749eef31ae40331da6a74a6c24780bad3fe: fix(ui): use hydrateTo branch name when set (#29554) (#29562) (@crenshaw-dev) * c1be9e9ee2a7ae9b3c08e078403f371080ce248a: fix(ui): use the open-app icon in the ApplicationSet list row (#29264) (@choejwoo) * 14bf22bdf509b3e849f06fd61ff0362653798079: fix(ui): use unfiltered resources for filter counts (#29621) (@choejwoo) * 8c38a6a680f9c28a2a46717d6f3b653e4aa7f1b2: fix(ui): vertical alignment of application tile content (#28412) (@choejwoo) * c9b07104d273873a826d5bc0326166a65705e2b7: fix(ui): wrap GROUP/KIND header instead of overflowing (#29304) (@linghaoSu) * 677ea452284a0a99e5ee22a2782b8afd6b3fa45a: fix(webhook): match Helm OCI apps using repoURL+chart against registry events (#27954) (@adityaraj178) * b642d5f6d5eba8cd644b3ca65b217e7a718645cd: fix: empty SHA256 fingerprint for SSH known hosts entries on the UI (#29401) (@ppapapetrou76) * ce9fdb755cb195cad78600830d19e4ad3bc7d7af: fix: (ui) reduce Applications virtual-scroll flicker on scroll (cherry-pick #29935 for 3.6) - REVERT (#29973) (@keithchong) * 4b52fc284b3edf93153c1a6440755fbae96f4f04: fix: Auto-sync triggers despite selfHeal: false when Sync Status and Last Sync are at different commits #26769 (#26770) (@adityaraj178) * 102ff9f1982bab8d60d3d3fcb5d73b9e34eb7af0: fix: GRPCRoute health check ignores stale observedGeneration conditions (#28086) (#28087) (@obliadp) * f9ee8e94c66e9834df7454fd2573852facdcf72e: fix: Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.6) (#30509) (@argo-cd-cherry-pick-bot[bot]) * eb547130245421e1a966cc6747504de76ffb70a2: fix: Server-Side diff should respect impersonation (#28821) (@pjiang-dev) * 1beb896687b77d579f911e9b73dc4014e95710ab: fix: Support rabbitmq scale to zero in health check (#29119) (@Postremus) * f89fe6a097e01c6ead1a42da04deedc682a5c732: fix: Use `EachListItemWithAlloc` to prevent page retention (#29305) (@liam-mackie) * 95019a797a97b45073f0d1f7cd3fad7f348a68da: fix: Watch APIServices like we do CRDs (#28289) (@zachaller) * e28c40095375aae6af48e3e87931db52d3836455: fix: accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.6) (#30517) (@argo-cd-cherry-pick-bot[bot]) * 96506c592f3bd54f332908ab30e245c4550b4752: fix: add a lock on clusterinformer (#28216) (@blakepettersson) * 187de3f426933d469f21c93058aef692da7073db: fix: add service for application controller statefulset (#29498) (#29499) (@chandan009s) * a4ce58454566452c7145644e0d40448e3d11e3e3: fix: admin cluster shards command does not display shards if there are no clusters assigned to them (#28429) (@cjcocokrisp) * 60d29acbedcc780fd9e6308daf5f801312489e65: fix: auto-sync skipped when newer commit arrives during sync with manifest-generate-paths (#27875) (#28227) (@josef-sotkovsky) * a1962e476dbdbb05adaace4b5b69b08539d50713: fix: badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.6) (#30583) (@argo-cd-cherry-pick-bot[bot]) * 33eb5e4efdf2881bce8bfb596fbeb3ffe2ec064a: fix: cache the OCI tag list (#30117) (cherry-pick #30118 for 3.6) (#30120) (@argo-cd-cherry-pick-bot[bot]) * c83aeb122104bdea35fe3979ab6a185667fd812b: fix: controller panics in StateDiffs when server-side diff applier fails (#30743) (cherry-pick #30744 for 3.6) (#30755) (@argo-cd-cherry-pick-bot[bot]) * 794a2f15ad038ffae2cbe07a8cef430dda2a3c62: fix: correct operator precedence in getAppInstanceValue (#28852) (@magic-peach) * d9e7e38c618b06a69c46cf65085ceb9429001812: fix: correct operator precedence in isDestinationMatched deny pattern (#28854) (@magic-peach) * 814bc4d5e3a93460983ed710f72778f3237b11b4: fix: correct scheduled-time format in CronWorkflow create-workflow action (#29915) (cherry-pick #29916 for 3.6) (#29952) (@argo-cd-cherry-pick-bot[bot]) * 992d6878054ad37d212ae29245e12ccdc12dfe2e: fix: correct variable expansion in Makefile and typo in .snyk (#28674) (@magic-peach) * 746b73a0330e6425c166120921adb3058753c008: fix: deleted resource are incorrectly shown in UI (#28322) (@agaudreault) * 9513c2934e984281fb9fffc2468fbc05600c805a: fix: detect OCI repo type from URL prefix in Normalize() (#28517) (#28518) (@peikk0) * 83156cdf0a023be41d6de6a889b5b6e78a5a4411: fix: don't clobber non-ignored fields on "replace" (#27136) (@blakepettersson) * 77aca0ecc386ee832eedb667ea9e883a62339fb9: fix: don't degrade Cluster API Cluster health while Ready is False during provisioning (#29237) (@jonathanrainer) * b4f5d0e2d0e8e6103ebe6d8c66716aeebe87fa24: fix: don't render status clickable when there is no operation (#27990) (@choejwoo) * 1d58350e31412eafcd8152400af3e25c333151ea: fix: fix escaped URL routing for write repo (creds) endpoints (cherry-pick #29940 for 3.6) (#29957) (@argo-cd-cherry-pick-bot[bot]) * 7f84e8c911d052fc2a9ae9e25ceb8583b879e8d9: fix: fix failure on Sync of resources that do not fit into last-applied-configuration (#28421) (#28440) (@dudinea) * dcc635c353df4d3e8a7c5286e842a64f95752d76: fix: fix flaky tests (#28609) (@adityaraj178) * f980990402cabca4cfd8e31e499b87ee9d097d25: fix: fix untar inbound check if dstPath is symlinked (cherry-pick #28881 for 3.6) (#29977) (@argo-cd-cherry-pick-bot[bot]) * 383ddedbf63d8a1235ad6c0d146472b89894ca4f: fix: fixes a regression of dex config env vars substituion (#28369) (@ppapapetrou76) * a5696f2b60f2b21e3693cac4489363ebcd20ddb8: fix: fixes cluster cache tests flakiness (#28407) (@ppapapetrou76) * e59bc93dd585bdb476c88b2764f3bf4f7ec9b448: fix: fixes flaky tests by making Log capturer thread-safe (#28328) (@ppapapetrou76) * d71ffe230bb23d9960cfe9fc88285126f6007ab8: fix: glob compile error (#29699) (@crenshaw-dev) * 21956da8fb3cc970fef2c842abead37223d81d44: fix: handle GrafanaFolder negative-polarity condition (#29395) (#29397) (@Karthik-Chowdary) * 332a0151fc0fe804b0d95a43015bed4f23749a2c: fix: honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.6) (#30609) (@argo-cd-cherry-pick-bot[bot]) * 2ada1384820651c1a4ace78e0c4efab9aa2918ab: fix: include multi-source revisions in sync completion event (cherry-pick #30446 for 3.6) (#30472) (@gdsoumya) * 4fd5f8bd183e06541d1c644e5e0ba3bf0a0e77cd: fix: incorrect GitHub path in TestGitHubListReturnsRepositoryNotFoundError (#25775) (@cwoebker) * a16170b2e374db3475bd4f2241b75f454194b625: fix: kustomize: ignore Components directories missing a kustomization file (cherry-pick #26576 for 3.6) (#29936) (@argo-cd-cherry-pick-bot[bot]) * 59ea458a7771f04b6a16f160482f9a856edfc679: fix: lua script for Pipeline not to use strings library (#28602) (@juliev0) * 57c9433cb1926459115bd8321549c90c9fa015a0: fix: migrate react-ga to react-ga4 (#28945) (@FZhg) * 427bfb249d9d4b63b8c199ef730368f6bb0a6f44: fix: modify GPG regex to support additional key algorithms (cherry-pick #27638 for 3.6) (#30495) (@argo-cd-cherry-pick-bot[bot]) * 702c6d6c99ebff09f855bebdc5b8d746a773148e: fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (#28863) (@rumstead) * 9cd3549715c1f464647d25e42f112787572ab93d: fix: name downloaded deployment and replicaset logs after the resource (#26970) (cherry-pick #29832 for 3.6) (#30518) (@argo-cd-cherry-pick-bot[bot]) * 2ab2231986bf9a97676a43064aa4083dc52e587c: fix: normalize Helm valuesObject in source comparison to avoid spurious appdetails 403 (#28288) (#28318) (@bear-san) * e87b872eec4f4ed12ca06ab6ff9b5a917d1f2693: fix: only do annotation backfill if live unset (#28770) (@blakepettersson) * 13dae89db8d01dab9ff28c63c4a65e803bea4f75: fix: pass down context to cli commands instead of using default context.Ba… (#28734) (@Eduard-Voiculescu) * c49f8b7127387d4e45f711487a0b5d5b4ab5d598: fix: prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.6) (#30613) (@argo-cd-cherry-pick-bot[bot]) * 0cc7d8aa38c1674781bead51e89879ac3e0bfcf3: fix: propagate command context to kube and HTTP calls in argocd CLI (#28837) (@Eduard-Voiculescu) * 05dcfe7d455cccc583c8c38df0f37e9e1ae7c9e8: fix: recover AuthReconcile visitor panics (#29436) (#29440) (@Karthik-Chowdary) * ef6e460740c0dfc7ca9774a6f8b79f8e3875814b: fix: recover from kubectl panic in AuthReconcile when SA is forbidden (#28669) (@mahesh-sadupalli) * 82c4d4691401f9d21b163c2f83f4d87468b7f6b7: fix: relogin with --argocd-context does not correctly persist credentials (#28453) (#28510) (@octonawish-akcodes) * c8f7f2ab51fbd5c2173e47c4662dea5e181a7963: fix: remove generation from ssd (#30398) (cherry-pick #30402 for 3.6) (#30443) (@argo-cd-cherry-pick-bot[bot]) * cb5d5fc083e9efc59a8ae53c3e71d8f551daf4a6: fix: replace k8s.io/cri-streaming (#28315) (@blakepettersson) * d7efbae049ef822fa6f18d9cda60486c70898c8d: fix: respect ignore differences for individual array elements in CRDs (#28220) (@nitishfy) * f63d92d7273179933e8ecd219083ddee1c5718b3: fix: restore SSH repository fetch through a SOCKS5 proxy (cherry-pick #30238 for 3.6) (#30252) (@ppapapetrou76) * 74d0f9207b670a41f0a0f4a337c8217b5c363a3c: fix: return InvalidArgument for invalid repo URL in ListRefs (#28631) (@choejwoo) * 7fe7110f65a16f0bd2ee6ac8a4ea5535ea684228: fix: return InvalidArgument for non-existent app path in GetAppDetails (#28699) (@choejwoo) * f2dc6880581e6c2462f537fac4b24db1d24d455d: fix: return InvalidArgument for unresolved revision in GetAppDetails (#28782) (@choejwoo) * 3d2ea09eb8ebba1bf54a49e4f57a6df6f7a7040b: fix: serialize Helm chart cache cleanup with chart extraction (#30253) (cherry-pick #30260 for 3.6) (#30522) (@argo-cd-cherry-pick-bot[bot]) * ac0059e093af5be23fdc35f4588636123e9b77f7: fix: server-side diff reports fields removed by other managers as diffs (cherry-pick #30206 for 3.6) (#30231) (@argo-cd-cherry-pick-bot[bot]) * 55f3be859257e122ab36eb50d225bd256ba2153a: fix: show 'name does not match' error in delete/sync confirmation dialogs (#28752) (@octonawish-akcodes) * ad7215dba2fd6dbaff6298489388e9b3756fd928: fix: skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.6) (#30648) (@argo-cd-cherry-pick-bot[bot]) * 4597065765b65ff1f5579eec7bc501e04f05f93a: fix: stream list requests straight to http writer (#27152) (@blakepettersson) * 63c987d755ff71df1df0b896d28a61bb9eb83413: fix: support bearer token auth on terminal websocket endpoint (#28285) (@amarkdotdev) * 70faa5d80b8c267fda498eece31d17c3e729b9e9: fix: synchronize OCI cache cleanup with extraction (#30020) (cherry-pick #30023 for 3.6) (#30105) (@argo-cd-cherry-pick-bot[bot]) * bf8bdaa3a55bf4620198f0e9ec2ddb2555037213: fix: tooltips that are cut in half when the window is to small in the health bar (#28700) (@Molaryy) * 114cde4dd336ff398871dcb1418258d5dcae2748: fix: use Entra ID uti claim as token id when jti is absent (#28625) (#28656) (@magic-peach) * 523ae9d9d26142e391e27d3fb61828a5b93bca9b: fix: use OIDC refresh tokens to renew expired sessions (#27041, #12189) (#27777) (@ris-tlp) * fd0aa39b7339d1e8967de84d38d8ea9cc24938da: fix: validate resolved OIDC config after secret substitution (#29545) (#29555) (@chandan009s) * 97a88b4931b304e12590a30323ae2b03897bb4a7: fix: wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.6) (#30354) (@argo-cd-cherry-pick-bot[bot]) * dffb797af5f7f07483f86177548134fc19784456: fix: warn when 'rbac can' checks a group without a role binding (#28729) (#28733) (@SamyDjemai) ### Documentation * 296afb48e5d92ad507f5fee2f9ea99d53d3b1d77: docs(applicationset): note that a templated `project` blocks the Preview tab (#29238) (@ShmuelOps) * 48d215145b0ea35bfaeda714fdd2e4eb1098bfd0: docs(appset): document GHCR webhook support for the OCI generator (cherry-pick #30492 for 3.6) (#30548) (@argo-cd-cherry-pick-bot[bot]) * ea04c848458cbd36abee10226f0a7d7dd32af7ba: docs(cli): improve docs for `argocd app create --file -` (#29553) (#29563) (@crenshaw-dev) * 7d78dabbeb2f353e3c526510ec92ba6042818315: docs(hydrator): document the `argocd.argoproj.io/hydrate` annotation (#28400) (@dudinea) * 63e1252ea1cf83e6d267e1d278f47428544e1f52: docs(hydrator): manifest-generate-paths and hydrator.metadata note limitation (#28555) (#28557) (@crenshaw-dev) * 3054d6bdabeaeb52298743846eae55f20c18cf71: docs: Adjust misleading onboarding steps (#29672) (@adesso-os) * 7047503b59f4b446df4adc9b44ee9bb65b04487b: docs: ApplicationSet Cluster Decision Resource Generator - update OCM references from deprecated PlacementRule to PlacementDecision (#28307) (@mikeshng) * f5ba2794fb570d0f733ad37e229d331b874b1b44: docs: Fix minor typo in API authorization documentation (#28633) (@allexistence) * 5beabdb17395ddf339f7c52e5a54ac1e0c69296f: docs: Proposal: Virtual Scrolling (#28900) (@aali309) * c61503c21e927d3fd9152f329cdc932a0e5c810d: docs: Reggie as a release champion for 4.0 (#29651) (@reggie-k) * b9b4e64d170af94f4d42b531eb2b1c938951d7e3: docs: `timeout.reconciliation` needs restart to work (#27540) (@carlosonunez-redhat) * 80128c57d6aaa8f00cf7d2c2dec45a3d9910695c: docs: add Mojro to USERS.md (#29124) (@ruturaj220) * 9150b81733f7659a65c89f3a768b3506e868e43e: docs: add a warning in api docs about the session api that works only for local users (#29384) (@ppapapetrou76) * b50862845c1af2e1ac257f9c0b642bc084004b75: docs: add gitlab ci to menu (#28723) (@blakepettersson) * 33745f6de9b7eebdf5dc8f4e865043c41a40db72: docs: add jedarden.com to USERS.md (#29352) (@jedarden) * 023114693fcaaebee02787e936c57fd2cf6bad47: docs: add mermaid diagram support to mkdocs (#27991) (@choejwoo) * 8b066231d0300619f6b5f4865cd3cc9b909805a8: docs: add more bot instructions (#29317) (@blakepettersson) * 5e732add3c04112289499b3d998218e89aa610b5: docs: add proposal for attaching debug containers (#27366) (@KyriosGN0) * 3b7aa8b4683e1f160d7b3c7b4a76ead478a6bc4d: docs: add server-side-diff default behavior to 3.6 upgrade guide (cherry-pick #29769 for 3.6) (#29771) (@argo-cd-cherry-pick-bot[bot]) * dffc7f534cedb9588d177c7092f3b19dffbc2b38: docs: centralize MAINTAINERS via argoproj/.project (#29645) (@agaudreault) * 2200885c5843b86a2072f0075948b748796c1ab3: docs: clarify core resource health checks (#29254) (@KHARSHAVARDHAN-eng) * ed7345ff4aad0b5944ae43050d362e2d8d41721a: docs: clarify hook caveats in the database migration example (#29409) (@ppapapetrou76) * 8627115a126b41fbc67275f382eb5611f9107bf5: docs: clarify implicit destinations for project-scoped clusters (#28324) (@senutpal) * be23caeb356c2e9739a48d6d40761a47262d5cf9: docs: clarify namespaceResourceWhitelist affects UI resource tree (#28565) (@lzb12) * 1ee964b6c64cc0259e38cdaf8e2257be18fff979: docs: clarify required vs optional cluster secret fields (#28310) (@yugstar) * b079641e62e979aae012503ba98bbc683423492a: docs: document double-wildcard pattern for domain-level repository matching (#26196) (@ArsalanAnwer0) * 2cdf3410988197d8d5553a5b3ff997eb61805689: docs: document headless authentication approaches for CI/CD pipelines (#29046) (@ppapapetrou76) * bd339b372a4b4c14f96bbdb045478f96fecdf7a6: docs: document hydrator git-only repository support (#29541) (@nandotorres) * 281ed63c5ba816aac74f085b60847bb0b03e56b6: docs: document object format for the clusters RBAC resource (#28668) (@allenlee820202) * 4510784f299f505a1159f0e50c6864f33023ae0a: docs: fix 'Argo CD' project name (#29318) (@hsnabszhdn) * 048c806861310231861ae05547206c86b46156d6: docs: fix 'allows to display' grammar in status badge revisionLength (#29696) (@fng713) * 4d09b7bdda9478bc844f569dabf1fa09e6283a13: docs: fix 'argocd-cm' references (#29320) (@hsnabszhdn) * 827a459eac763a64012d2237a7cccc990638f2da: docs: fix 'respectRBAC' list formatting (#29321) (@hsnabszhdn) * 96475e2f47201abe3ad373f8af4330edf097ea42: docs: fix Keycloak RBAC group matching and controller flag description (#28569) (@almightymoon) * 6376eb155f207fadd655fdbadc96e6ecb395f2ee: docs: fix broken reconcile docs link in annotations-and-labels (#28330) (@s3onghyun) * 49b779344abe7245f7c8f680485d9ce8a9c90409: docs: fix broken sealed-secrets Helm repoURL in examples (#28683) (@mailnike) * b5fc12e0155c6a58c0924afc0ec68478cf25da11: docs: fix config management plugin link (#29172) (#29173) (@DresdenGman) * 8a1d6eb6e4d0a20c5af6f8523d8b1813fbaf23e8: docs: fix grammar issues in faq.md #28346 (#28347) (@Taiwrash) * 5147913f3ea89de5f192ed64564ffa38719c3043: docs: fix grammar issues in running-locally.md #28346 (#28348) (@Taiwrash) * 4af7b5d899b995414cdd99d2283ed52d82753fac: docs: fix grammatical error in CI troubleshooting documentation (#28680) (@magic-peach) * d66ebb4e55360cf058fb29db49fa7a66faaf6186: docs: fix minor typos in bug triage guidelines (#28634) (@allexistence) * abe9a37fbea70f99569df7959d149824762827d8: docs: fix missing word in SECURITY.md vulnerability reporting instructions (#28679) (@magic-peach) * 14273f55c45d75450482f60c8670f7746a747141: docs: fix nested matrix generator examples (#26751) (#28784) (@AkashKumar7902) * 712c52314ede72d4e624fbcd3a70794e3c128e7e: docs: fix non-existent 'argocd repo edit' command in HA guide (cherry-pick #30694 for 3.6) (#30707) (@argo-cd-cherry-pick-bot[bot]) * 1b7ce4d4be1fa95ce110017cdfaf8dfe8afd50f2: docs: fix typo and brand name inconsistency in operator-manual docs (#29104) (@sangharshcs) * 6774c9aef2b3cfd08343be8fde202cedcc76d9f3: docs: fix typos and grammar in documentation (#28673) (@magic-peach) * 55cf4ce7d8cf8e3ede2692985254a7996ef9f144: docs: fix typos in documentation and CI stale workflow (#28672) (@magic-peach) * 56105b4e5bd340024adeae2d44158bc3ff2006e2: docs: fix warning message when invoking without grpc-web (#28720) (@Eduard-Voiculescu) * 655edda0bb5e2ed8b1c760ff0cefb1f573b9123c: docs: give every annotation and label an anchor (#29380) (@nitishfy) * 758a0e2ce5f2873dd9bca3c9b6cf330e81ef985c: docs: replace 'client id' with 'client ID' (#29319) (@hsnabszhdn) ### Dependency updates * c78cce03169b628f5c76eea9893bc80d4fc846c4: chore(deps): bump DOMPurify to 3.4.7 for CVE-2026-49978 (#28966) (@aali309) * 4ecdada356086975be473f7485d67c338a492c53: chore(deps): bump SonarSource/sonarqube-scan-action from 8.2.0 to 8.2.1 (#28741) (@dependabot[bot]) * 0cf2e80c59a72ac1691e66c51896a4e5c9a79333: chore(deps): bump Ubuntu base image digest to 26.04 (resolute-20260811.1) (#29569) (@dudinea) * 2412353468a080caae9edeb15bbfd2ef49872e92: chore(deps): bump actions/cache from 5.0.5 to 6.0.0 (#28402) (@dependabot[bot]) * 80c196cbd1e064b43006b5833ff2bca4027e5a1e: chore(deps): bump actions/cache from 6.0.0 to 6.1.0 (#28475) (@dependabot[bot]) * 648e73e99e96a4a04f312beaf9e2397645d55ff0: chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#28637) (@dependabot[bot]) * 869d32ec78b3b01504b1eb0ad1b52173714c66c0: chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#28350) (@dependabot[bot]) * 16e66a8fd6b067c9d34f3943ae518ea7c2480a52: chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#28825) (@dependabot[bot]) * a23b68bae707fa06648d8e3e10779f4bc945b0b3: chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#28401) (@dependabot[bot]) * 242f44d6878da41f08e5ac5b0673dea9bb00bc97: chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#28740) (@dependabot[bot]) * d8bad8aab63b2feb81ca2b1773035116cc9360eb: chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#28709) (@dependabot[bot]) * fe3610dbfc2b9c73fc9880a87fe85363b9bc2258: chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#28765) (@dependabot[bot]) * 40931a3d3ae4979a042332f5444d83b6885b6a25: chore(deps): bump actions/stale from 10.3.0 to 10.4.0 (#28664) (@dependabot[bot]) * c19f78c8d5461b6bb1a0d2a9a87c8350e80d3547: chore(deps): bump actions/stale from 10.4.0 to 11.0.0 (#28932) (@dependabot[bot]) * a14697c598120a667cb0cdfb0bdfe1f9db8e2959: chore(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 (#28536) (@dependabot[bot]) * 773fcb2fa579663b514fb2d965d27972378a3bb5: chore(deps): bump docker/login-action from 4.2.0 to 4.3.0 (#28562) (@dependabot[bot]) * 9b87468de9ae3d9308f6d0ff65b7b01bfba6fb5a: chore(deps): bump docker/login-action from 4.3.0 to 4.4.0 (#28582) (@dependabot[bot]) * 06ec49b277b0248b32989338cc3e21c9daad7bac: chore(deps): bump docker/login-action from 4.4.0 to 4.5.0 (#28886) (@dependabot[bot]) * a1b756d329fd61427c7bcd68e807507d425e9a84: chore(deps): bump docker/login-action from 4.5.0 to 4.5.1 (#28917) (@dependabot[bot]) * 1f66f4133c366609f199c8ca6738f45566d155cb: chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 (#28951) (@dependabot[bot]) * 078737042732e67ad1ffdbb9984f8fab4d88140c: chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#28974) (@dependabot[bot]) * f02203d06f4938b15bf3b43fcee2a074fab95ee0: chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#28561) (@dependabot[bot]) * ec60cff000bde8373c44f8c8dc4d8f9b05371201: chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#29279) (@dependabot[bot]) * d8e3800cdf18588fe9da415ede5fd5562209aa87: chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#28535) (@dependabot[bot]) * 6006998f3c799757355a28bd4be402a9c00e22db: chore(deps): bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#29550) (@dependabot[bot]) * 615776ac535f4c9263c2ee691317e751198c3bca: chore(deps): bump dompurify (cherry-pick #30014 for 3.6) (#30034) (@argo-cd-cherry-pick-bot[bot]) * 0c6c5edfcd002e4842a826c4e955af2767d48fbd: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.0 (#29212) (@dependabot[bot]) * bb5169caf4fb7b5b7a2f05e75690a7be5affaa66: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.0 to 1.23.1 (#29462) (@dependabot[bot]) * 96c6029e300cc29ca7b103f0418e5e96c321e3dc: chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.0 to 1.14.1 (#29459) (@dependabot[bot]) * c50ac5589e6fca41484b5bddcbefe4fcfc69cb7e: chore(deps): bump github.com/Azure/kubelogin from 0.2.18 to 0.2.19 (#28403) (@dependabot[bot]) * 259634c04ec40a81164ba1e161bc8bd069d02be5: chore(deps): bump github.com/alicebob/miniredis/v2 from 2.38.0 to 2.39.0 (#29588) (@dependabot[bot]) * b138d42840bc0da6f8e64f539df85cdca3521f32: chore(deps): bump github.com/aws/smithy-go from 1.27.2 to 1.27.3 (#28473) (@dependabot[bot]) * b34f73175c0e703b9a99363e17fa9d2cf1351157: chore(deps): bump github.com/aws/smithy-go from 1.27.3 to 1.27.4 (#28760) (@dependabot[bot]) * dee87aaa41c37ab1e38180d8afb85dbd1f9d0add: chore(deps): bump github.com/aws/smithy-go from 1.27.4 to 1.27.5 (#28931) (@dependabot[bot]) * 700aa46a9028bc047abbb36b117ece2950daf9cf: chore(deps): bump github.com/aws/smithy-go from 1.27.5 to 1.27.6 (#29041) (@dependabot[bot]) * d49b63b06c2a03512e1d9e5f405189c8be8caa2b: chore(deps): bump github.com/aws/smithy-go from 1.27.6 to 1.27.7 (#29136) (@dependabot[bot]) * a8c09bb4cb7018958d95916bdd1fa18ed14bfa88: chore(deps): bump github.com/aws/smithy-go from 1.27.7 to 1.27.8 (#29230) (@dependabot[bot]) * b24120eeb74f907146c49432d8e9ad999cc61a85: chore(deps): bump github.com/aws/smithy-go from 1.27.8 to 1.27.9 (#29376) (@dependabot[bot]) * f80a3ee875c309c4dbba4f032143b1cabeb42781: chore(deps): bump github.com/bombsimon/logrusr/v4 from 4.1.0 to 4.2.0 (#29480) (@dependabot[bot]) * 0eb9281a22f8a9bb1ae5645601a4ef01c5304f5d: chore(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 (#28325) (@dependabot[bot]) * 17ccbdf0e4c016572c7db6d46ee3ed1a72cf0918: chore(deps): bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0 (#28643) (@dependabot[bot]) * d4e549c7aefd90b5f6cf507aba277d9db3124dfa: chore(deps): bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0 (#29592) (@dependabot[bot]) * 94071238c9cdbe7dea2a10402079743817d27736: chore(deps): bump github.com/cyphar/filepath-securejoin from 0.6.1 to 0.7.0 (#28351) (@dependabot[bot]) * 5c03ec6d7cf2e726a530f7ed33e1877015c4f5c0: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.5 (#29589) (@dependabot[bot]) * 2a48f0898134ea3410c2e9faf06aaee31f754037: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.5 to 4.1.6 (cherry-pick #30284 for 3.6) (#30711) (@argo-cd-cherry-pick-bot[bot]) * 501f9b8675cb7f52b01f0b6963d47c41143468e5: chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.6 to 4.1.7 (cherry-pick #30731 for 3.6) (#30735) (@argo-cd-cherry-pick-bot[bot]) * 2e170137d1f49eacb9026011cab0300d7f8bbfc0: chore(deps): bump github.com/go-logr/logr from 1.4.3 to 1.4.4 (#28823) (@dependabot[bot]) * 88108aaa9ecd624b881e4cb4d5b19de426289915: chore(deps): bump github.com/go-openapi/loads from 0.24.0 to 0.25.0 (#28822) (@dependabot[bot]) * 2c44f6a041c026de0e6b71b5c64450f5cf6fda28: chore(deps): bump github.com/go-openapi/loads from 0.25.0 to 0.25.1 (#29229) (@dependabot[bot]) * 3af7fda329d1789a5475f849e45f36349beaf782: chore(deps): bump github.com/go-openapi/loads from 0.25.1 to 0.25.2 (#29460) (@dependabot[bot]) * 423377775d0eb396abe4f37a78cac66e5ad5242f: chore(deps): bump github.com/go-openapi/loads from 0.25.2 to 0.25.3 (#29615) (@dependabot[bot]) * 264fe337ba24df3343aeeead575466b3ce90549e: chore(deps): bump github.com/go-openapi/runtime/server-middleware from 0.32.3 to 0.32.4 (#28372) (@dependabot[bot]) * ce83520622dcc5fd7c318f708062bc8aeb40aa27: chore(deps): bump github.com/go-openapi/runtime/server-middleware from 0.32.4 to 0.32.5 (#28759) (@dependabot[bot]) * cc365cb6ab07352cb2404f6ab1acb740b60af8aa: chore(deps): bump github.com/go-openapi/runtime/server-middleware from 0.32.5 to 0.32.6 (#28845) (@dependabot[bot]) * 0126363d4ec758a92e3eee0dbbbee385df6bbd82: chore(deps): bump github.com/go-openapi/runtime/server-middleware from 0.32.6 to 0.33.0 (#28933) (@dependabot[bot]) * 69cc4d72b9107876aae19bb5bcc0eff629579c42: chore(deps): bump github.com/go-openapi/runtime/server-middleware from 0.33.0 to 0.33.1 (#29375) (@dependabot[bot]) * 5fd394479589e2698c9ebb7cda4f8e793a596782: chore(deps): bump github.com/go-openapi/runtime/server-middleware from 0.33.1 to 0.33.2 (#29590) (@dependabot[bot]) * 821e090d6f25217145b7900acf4877b8c51786a4: chore(deps): bump github.com/gobwas/glob from 0.2.3 to 1.0.0 (#29482) (@dependabot[bot]) * 66c3591a05d179356e060763ef4189f70a31146a: chore(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 (#28560) (@dependabot[bot]) * d70c112da3224e92a46a243a0fed3e589c97544b: chore(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/v2 from 2.3.3 to 2.3.4 (#29427) (@dependabot[bot]) * a1cd87aebfa3111319460493fcbef074297a3139: chore(deps): bump github.com/jarcoal/httpmock from 1.4.1 to 1.4.2 (#28953) (@dependabot[bot]) * c5a4832a7fa46dab7d22558ca0cfa8f314b63cb9: chore(deps): bump github.com/mattn/go-isatty from 0.0.22 to 0.0.23 (#28761) (@dependabot[bot]) * 4f94c7f4825a65a5933f04d2e5f20f88c2f6de48: chore(deps): bump github.com/mattn/go-isatty from 0.0.23 to 0.0.24 (#28883) (@dependabot[bot]) * 3bbfca79b9b1b5391b20c73f21a5b303006ce573: chore(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0 (#28824) (@dependabot[bot]) * 565c7447194ebf44f91dbf53790ab566aba67908: chore(deps): bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 (#28914) (@dependabot[bot]) * 83d5bdc5ded574f344a7bcc34a9f9462c92d1874: chore(deps): bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 (#29552) (@dependabot[bot]) * f9546a8dc18bd34ae5e4c1870b7a72633f36bf4a: chore(deps): bump github.com/redis/go-redis/v9 from 9.20.1 to 9.21.0 (#28387) (@dependabot[bot]) * abbb3b7a5e5a650fd7dba5dae74b0050d2eb5fb1: chore(deps): bump github.com/redis/go-redis/v9 from 9.21.0 to 9.22.0 (#29092) (@dependabot[bot]) * 0341aa9c4dfb23824c42653d5ca36bfa9a2f05a8: chore(deps): bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 (#29341) (@dependabot[bot]) * 321962c5ddfb9ba05d7d82ccdd23c8c06d0b25ca: chore(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 (#29457) (@dependabot[bot]) * e18032a9d8ed241ddb8368413bac8bc519401452: chore(deps): bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (#29211) (@dependabot[bot]) * e2c6063dcfd40c2983617bb4ed1190c677409248: chore(deps): bump github.com/skeema/knownhosts from 1.3.2 to 1.3.3 (#29458) (@dependabot[bot]) * fbd3f8aac1282d71a24ee83a4ab45adbf48dbe08: chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#29231) (@dependabot[bot]) * 62bc080798ced7f198836a2a33ce522a55ebc7a9: chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#29301) (@dependabot[bot]) * d5bf628ce64c70334fdadea1a11fb9a5a491fa0c: chore(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.36.3 (#28563) (@dependabot[bot]) * d5f7eeb992386e04c19e11eb614f4caa9cede398: chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0 (#28636) (@dependabot[bot]) * 1f9d9f185c54612b98a3c0a3dde60faf8715e9a7: chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 (#28583) (@dependabot[bot]) * 349e35411bd1de56224e020993d6c561f543b706: chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 (#28635) (@dependabot[bot]) * 0a84c102b6eb37b8a988be976929c2c4c48d2b06: chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 (#28913) (@dependabot[bot]) * c14dd2d6840ed17c550b87dfd9dc372938b3c0f8: chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 in the golang-x group (#29587) (@dependabot[bot]) * c82ae30d81e8b449f5ce7faae0429bd7e3e29635: chore(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 in /gitops-engine (#28540) (@dependabot[bot]) * 639b1e75be5a1998577b8942240cce265bb49d45: chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 (#28640) (@dependabot[bot]) * be5fa351a5257535e337e8ae4b9bb5896c7e21aa: chore(deps): bump golang.org/x/net from 0.61.0 to 0.62.0 in the golang-x group (cherry-pick #30699 for 3.6) (#30746) (@argo-cd-cherry-pick-bot[bot]) * 207e2ba397f12ed965babc785abba66851d8ed59: chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#28642) (@dependabot[bot]) * b9541ba7a167d07692568752f339b58f4b770c7a: chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#28513) (@dependabot[bot]) * b49c22a5cbccb60cec855aeef465ee8949b91fe8: chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 (#28525) (@dependabot[bot]) * d9d9c80594db26fba671d3401e5ba2b8e0a07323: chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#28739) (@dependabot[bot]) * b1b824ae02719e9d33086ac16928f1487eb187cf: chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 (#29020) (@dependabot[bot]) * 91874e3a6863f96b2d2faeedd8277f689dd9ba31: chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#29340) (@dependabot[bot]) * c0d66f6688ab94e54fd0e708daf16778cdfd00a5: chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#29461) (@dependabot[bot]) * 1c35b994224f4d731bab43cfe22b8682026c998c: chore(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0 (cherry-pick #29790 for 3.6) (#29914) (@argo-cd-cherry-pick-bot[bot]) * b2929a03a55be5f824786b2a597a7d2fa42f70b3: chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#28512) (@dependabot[bot]) * f26f73aeda71b77d43ad227972e24b3f3f78b879: chore(deps): bump js-yaml from 3.14.1 to 4.2.0 in /ui (#28291) (@dependabot[bot]) * 744caa03fd21c6f4674184dec41246246bd7e5dc: chore(deps): bump js-yaml from 3.14.1 to 5.2.0 in /ui (#28509) (@dependabot[bot]) * 23704792920c1cb290ccc6105dc43f95c339b1f2: chore(deps): bump js-yaml from 4.3.0 to 4.3.1 in /ui (#29090) (@dependabot[bot]) * 06e934b7182719c783e8fabb0486f06a77bfb62a: chore(deps): bump js-yaml from 4.3.0 to 5.2.2 in /ui (#28918) (@dependabot[bot]) * 6f3778834c0c952538d9e9fc8d0e6237f6277c2b: chore(deps): bump js-yaml from 4.3.1 to 5.4.1 in /ui (#29483) (@dependabot[bot]) * 7f1b7e394e2d28d8952beb018ea906fe0c25248d: chore(deps): bump k8s client to 0.37.0 (#29597) (#29595) (@dudinea) * 67eb02d99aea20911354916580d6b7f1f0a7bf29: chore(deps): bump library/ubuntu from `f3d2860` to `53958ec` in /test/container (#28370) (@dependabot[bot]) * 1af0be15cdd69d0b237cbaf4f9ba9440d0334ab2: chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#28696) (@dependabot[bot]) * 130cf43a8626f2557cb1118294204c5e335fc539: chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#28884) (@dependabot[bot]) * 05545be13e8de54f1a62e464ef42caba0f4929a3: chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 (#29613) (@dependabot[bot]) * d7b98e0c334f842c649f35d8fffe4df11e92cda1: chore(deps): bump pnpm/action-setup from 6.0.9 to 6.0.10 (#29078) (@dependabot[bot]) * 58b45f138de736d65178111b2d7447386c6fa2e2: chore(deps): bump renovatebot/github-action from 46.1.15 to 46.1.16 (#28373) (@dependabot[bot]) * b31a7987caddb95e02dbaf245edfccba1ed2cb30: chore(deps): bump renovatebot/github-action from 46.1.16 to 46.1.17 (#28474) (@dependabot[bot]) * 8dc512ed01ccb9a878c8f5badbbaf527298bf88f: chore(deps): bump renovatebot/github-action from 46.1.17 to 46.1.18 (#28581) (@dependabot[bot]) * 8b9adadb4146c5e02e0a41a9fe39b43672907aef: chore(deps): bump renovatebot/github-action from 46.1.18 to 46.1.19 (#28697) (@dependabot[bot]) * 41c9bb8c488e781ce453ed96e4dc00d4a2cc045a: chore(deps): bump renovatebot/github-action from 46.1.19 to 46.1.20 (#28808) (@dependabot[bot]) * d7c62e8181811c693a8ba47fb9212095665b6843: chore(deps): bump renovatebot/github-action from 46.1.20 to 46.1.21 (#28915) (@dependabot[bot]) * 83d271a505efc662555c4d117d4a9be6f3a587dc: chore(deps): bump rxjs from 6.6.7 to 7.8.2 in /ui (#28916) (@dependabot[bot]) * 4e841eb36f3eb459dcafd6c5b68e666684f75796: chore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.4.0 to 6.4.1 (#28604) (@dependabot[bot]) * 91081237988bb21069d663b38138ed239914d81c: chore(deps): bump sigs.k8s.io/structured-merge-diff/v6 from 6.4.1 to 6.4.2 (#28622) (@dependabot[bot]) * 92cfc6aec80dd3eba3e29e6f904678f62653d958: chore(deps): bump slack-go to v0.23.1 and golang.org/x/net to v0.53.0 (#28377) (@ayushi-work) * 066fbeb50363e5ae9262d4e82cb7fd662b07b3f8: chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 (#28371) (@dependabot[bot]) * b0da1145147108e4843c08c5d591133289acd9d7: chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 (#28621) (@dependabot[bot]) * 392ae39913675ebe76f3880ac709be2c70b27e82: chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 (#28787) (@dependabot[bot]) * d958f037b37f6b1910c9bc1083fb89761ba7b372: chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 (#29094) (@dependabot[bot]) * 01a151cee87e73bc9f28cfe0671c352d6298681b: chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 (#29214) (@dependabot[bot]) * 433beaa49af8db19bc4c38ff812416f08145ec6d: chore(deps): bump step-security/harden-runner from 2.21.0 to 2.21.1 (#29497) (@dependabot[bot]) * fe39b236d561f96f5c48483f482a1b33be27aa11: chore(deps): bump the aws-sdk-v2 group with 2 updates (#28639) (@dependabot[bot]) * 15ea3f6a1529cc1a2ef29a744d64354e1aae2117: chore(deps): bump the aws-sdk-v2 group with 2 updates (#29209) (@dependabot[bot]) * 9cd006898824ae55616d9bfc7f856d0a61b63793: chore(deps): bump the aws-sdk-v2 group with 5 updates (#28514) (@dependabot[bot]) * 09b2595a495826de1671ca9befa1214d78f2f543: chore(deps): bump the aws-sdk-v2 group with 5 updates (#28603) (@dependabot[bot]) * 494b13848f551707256366068b411668c844ca0d: chore(deps): bump the aws-sdk-v2 group with 5 updates (#28710) (@dependabot[bot]) * dcd137ef14f32a3e71857019a6660aa5ab6924fe: chore(deps): bump the aws-sdk-v2 group with 5 updates (#29551) (@dependabot[bot]) * 9abf4d4810e254ddeec695bd6ab45e04cb2d4a10: chore(deps): bump the aws-sdk-v2 group with 6 updates (#28537) (@dependabot[bot]) * 33b1ef2d20f90e77ad437d489c1a7f1134a9b08d: chore(deps): bump the aws-sdk-v2 group with 6 updates (#28844) (@dependabot[bot]) * c2a73a5f6517af79c78445b966c3aa42d561e485: chore(deps): bump the aws-sdk-v2 group with 6 updates (#28952) (@dependabot[bot]) * d943a23e5fd598bcf4516ecbbc28891ee14457e6: chore(deps): bump the aws-sdk-v2 group with 6 updates (#28975) (@dependabot[bot]) * e27be21651f2c1f0de26faad9d4564bf8457b9c7: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29040) (@dependabot[bot]) * 3d6d90c4391df618c76b94e07f975345914f590c: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29117) (@dependabot[bot]) * d524270101914f93cc8ba2b3c9e211f899c2ea24: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29192) (@dependabot[bot]) * f3f18c96a757f07da59dca8504742d99833daf94: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29228) (@dependabot[bot]) * 13e97da4884f800a8e42773f0a9eef9b0aabfd88: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29339) (@dependabot[bot]) * ba6fe06ce7a3792b3beaf33f0cee7e54cee2535f: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29455) (@dependabot[bot]) * a3ec90cb9c350817629acdf96842d2e04269c0ff: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29614) (@dependabot[bot]) * bdc936aae234560c800ce1d063c233a10dba44c0: chore(deps): bump the aws-sdk-v2 group with 6 updates (#29704) (@dependabot[bot]) * 6067c1c335686c492a7e6af885361a20ac302f5b: chore(deps): bump the codeql group with 4 updates (#28762) (@dependabot[bot]) * 24e66ef377ca32d8fac97e517cc4dc09737eb281: chore(deps): bump the codeql group with 4 updates (#28843) (@dependabot[bot]) * 2ecd93094b7036e29d9144b622d2ad600d0016e6: chore(deps): bump the codeql group with 4 updates (#28869) (@dependabot[bot]) * 65384e082a209c2a146fac9f1d6843c7f43170cb: chore(deps): bump the codeql group with 4 updates (#29021) (@dependabot[bot]) * e47977bfd3d5b7a39cbd6bf611f6a401af2a48c1: chore(deps): bump the codeql group with 4 updates (#29077) (@dependabot[bot]) * 1c2dee836b0b9e2f105e093506241a864009b227: chore(deps): bump the codeql group with 4 updates (#29093) (@dependabot[bot]) * 67840da980760696cd2dee94eb1d8e36e72c8014: chore(deps): bump the codeql group with 4 updates (#29213) (@dependabot[bot]) * a155cc4e1135983bc500d7ee89a2540c42a619da: chore(deps): bump the codeql group with 4 updates (#29338) (@dependabot[bot]) * b27a5109f7668c29c21a0c6373f580e4c2680e64: chore(deps): bump the codeql group with 4 updates (#29454) (@dependabot[bot]) * 181c6cbb42be8141ca767a013231574d19cc11c8: chore(deps): bump the codeql group with 4 updates (#29702) (@dependabot[bot]) * 401ddced1d4a6e4b5d4ae946cf27c746e4304c8f: chore(deps): bump the golang-x group with 2 updates (#29210) (@dependabot[bot]) * 2ed7ce57a21be16103c2ba3fbebb33a0bc5af047: chore(deps): bump the golang-x group with 2 updates (cherry-pick #30146 for 3.6) (#30739) (@argo-cd-cherry-pick-bot[bot]) * fdd90b1cbb4c8e0da095a7c5167c888a7e028eeb: chore(deps): bump the golang-x group with 3 updates (#29628) (@dependabot[bot]) * 363af87360f1757d123758fb301a87edf9ad3b57: chore(deps): bump the golang-x group with 3 updates (#29705) (@dependabot[bot]) * 16f4cb0ba0efa4a014503403f59891004b147df3: chore(deps): bump the golang-x group with 3 updates (cherry-pick #30198 for 3.6) (#30742) (@argo-cd-cherry-pick-bot[bot]) * 6ce2a4c58aacf3f1f09fac370260c984ea01733f: chore(deps): bump the otel group with 2 updates (#29118) (@dependabot[bot]) * 2aa13d4217e3018ae3d3d667897497e4b0365457: chore(deps): bump the otel group with 4 updates (#29091) (@dependabot[bot]) * 52e9ee25eb167ca9597530d68d53e315d9fc185c: chore(deps): bump the otel group with 6 updates (#29456) (@dependabot[bot]) * 6951cbc21a596f75b0867ea0530de2d0478ebe79: chore(deps): bump timezones-list from 3.0.1 to 3.1.0 in /ui (#29594) (@dependabot[bot]) * f4315d87099da3b7e592921ae15e32d988775dd0: chore(deps): bump uuid from 8.3.2 to 14.0.1 in /ui (#28887) (@dependabot[bot]) * ec24fab37e649babdcfe63c1ecad11008d06e281: chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#28742) (@dependabot[bot]) * a226ef191ad055b05a272c40aef2b29f95f65411: chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#28885) (@dependabot[bot]) * d464ee455e35de8503f3c4549eb3e5547808fc8a: chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#29039) (@dependabot[bot]) * 9c2d9453648ee8f4bbf0af4b32ebc35838aeffa4: chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#29496) (@dependabot[bot]) * 24b241fff60059b54fad777771cfea1521cb34f4: chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#29703) (@dependabot[bot]) * d94bfc0db94d352662c5a3170f64d9937b65656f: chore(deps): update dependency dexidp/dex to v2.45.1 (#28850) (@argoproj-renovate[bot]) * 4573196eb1cc5a073b6867c2f129ef8904f283ac: chore(deps): update dependency dexidp/dex to v2.46.0 (cherry-pick #30065 for 3.6) (#30216) (@argo-cd-cherry-pick-bot[bot]) * 9870eae87273f574bc367208822d8113270b711b: chore(deps): update dependency git-lfs/git-lfs to v3.8.0 (#29426) (@argoproj-renovate[bot]) * 36b8c4e714413039e6ad812c8e6a00b0558cb4f6: chore(deps): update dependency git-lfs/git-lfs to v3.8.1 (cherry-pick #30360 for 3.6) (#30751) (@dudinea) * 14277ccfd1f106840043dd952b807f6fb3aa30ce: chore(deps): update dependency golang to v1.27.1 (#29490) (@argoproj-renovate[bot]) * d0f611518d382f5335c8859e1df090f3d989a17c: chore(deps): update dependency helm/helm to v4.2.2 (#28457) (@argoproj-renovate[bot]) * b6af3abe7b63c2f0f0c8d03e1d0678e68bb86fb1: chore(deps): update dependency helm/helm to v4.2.3 (#28851) (@argoproj-renovate[bot]) * e33bd1d7876d830447bca6c06c1877abbd2b4f98: chore(deps): update dependency helm/helm to v4.2.4 (#29187) (@argoproj-renovate[bot]) * 7a19801ae85c2b738329e4e61259f060608c4b0e: chore(deps): update dependency helm/helm to v4.3.0 (#29648) (@argoproj-renovate[bot]) * 145a4a3c026665f04f78f4cfc9674e7194fbe93d: chore(deps): update dependency helm/helm to v4.3.1 (release-3.6) (#30211) (@argoproj-renovate[bot]) * f91a95c6c80e483d3c80e5a3ccba0de80e8eafdd: chore(deps): update dependency kubernetes-sigs/kustomize to v5.8.3 (release-3.6) (#30097) (@argoproj-renovate[bot]) * d162e356c709bb83f6f6d565474c932cee4137f8: chore(deps): update dependency markdown to v3.10.3 (#28987) (@argoproj-renovate[bot]) * 72e01fe07a4d480cf5ad511c9fa4d4cb68e8f778: chore(deps): update dependency pygments to v2.21.0 (#29217) (@argoproj-renovate[bot]) * 6e0d8c66625e828ad21a5d0cd185e8fc29472846: chore(deps): update dependency pymdown-extensions to v11 (#28386) (@argoproj-renovate[bot]) * 18e1c065ba10495ed795c71dad8aa044b97ccffe: chore(deps): update dependency pymdown-extensions to v11.0.1 (#28627) (@argoproj-renovate[bot]) * 37ee0097cf851bc2dd7665fc081bbce61a7e836e: chore(deps): update dependency pymdown-extensions to v11.0.2 (#29329) (@argoproj-renovate[bot]) * 022587e35cc8a85b408ada56c81aa4f538d46a6a: chore(deps): update dependency pymdown-extensions to v12 (#29723) (@argoproj-renovate[bot]) * 530de77f1f8ed3bfb5bc739973f0b9ab4d0c71f4: chore(deps): update docker.io/bitnamilegacy/kubectl docker tag to v1.33 (#28458) (@argoproj-renovate[bot]) * c8094a1b4ecd1cec1af6460d4fa4379e641f2ae3: chore(deps): update docker.io/library/busybox docker digest to dc2d74b (#29008) (@argoproj-renovate[bot]) * 222258680cd7a728674ae12250a2a95ef8731b65: chore(deps): update docker.io/library/golang docker tag to v1.27.1 (#29492) (@argoproj-renovate[bot]) * c3d6857ed6fa6744d0d7a9cc10ae3023bc631f0c: chore(deps): update docker.io/library/golang:1.26.4 docker digest to 8c5d338 (#28405) (@argoproj-renovate[bot]) * f012788c44fba0cd7cdde5f37a87a02dc972243c: chore(deps): update docker.io/library/redis docker tag to v8.10.0 (#28991) (@argoproj-renovate[bot]) * 6df66f7668473256bd0aab2ace95fcb6bffb1953: chore(deps): update docker.io/library/redis docker tag to v8.10.1 (#29295) (@argoproj-renovate[bot]) * 5933e65d0d64774eabf5750c8901ba9c75783900: chore(deps): update docker.io/library/redis docker tag to v8.8.1 (#28896) (@argoproj-renovate[bot]) * e079d120ac59e4fc2fb26969692dbcf624100802: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.11.0 (#29038) (@argoproj-renovate[bot]) * a9bb51dc2220008232407114b6032b2b9e415398: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.11.8 (#29050) (@argoproj-renovate[bot]) * 701cf05130427892d9b8d225b19c4018c84f0491: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.13.1 (#29062) (@argoproj-renovate[bot]) * 5c08d08e3b9a72d58fe7fcb36c6f539184ef4f5b: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.14.0 (#29067) (@argoproj-renovate[bot]) * 829ef380e107af541ffb1fd0c172548def9f2b8e: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.14.12 (#29102) (@argoproj-renovate[bot]) * 8a062e3f4d1ec2a8358d201b8e5c5b75e459dd82: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.14.3 (#29085) (@argoproj-renovate[bot]) * dc4085768c52bb9d8668fa3b5650aa5b6c7beeb0: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.14.4 (#29096) (@argoproj-renovate[bot]) * 4f07b36fd7c321c2bf932a2c854b7084ad42e989: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.14.7 (#29099) (@argoproj-renovate[bot]) * 8f30747951a5ad6e3618f90f8b32c4301542be9f: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.15.0 (#29112) (@argoproj-renovate[bot]) * de144733685db3d808e95933541f38020469b4b2: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.17.1 (#29113) (@argoproj-renovate[bot]) * eb12dd61d4f5413fdaaf86a1d7010f9cbfa319ee: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.17.5 (#29122) (@argoproj-renovate[bot]) * 2bb8976a04b2be3daec72be4947fd8703cca500b: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.20.1 (#29127) (@argoproj-renovate[bot]) * d97c65a7e278d39f6bd7ede39d2426a4c62fe5a4: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.22.0 (#29129) (@argoproj-renovate[bot]) * d1eb611d589d354e75de933cf1074451e7d36855: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.23.3 (#29133) (@argoproj-renovate[bot]) * 695d9ef405822d3995d5b465e915fcc3b82a0cbf: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.24.0 (#29144) (@argoproj-renovate[bot]) * 90798bfe10b33711ba49449ee8e6b9dea852e14e: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.24.1 (#29147) (@argoproj-renovate[bot]) * 34fe81e7c9c7508a0936c98b24dd0c98ca6cbae2: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.24.2 (#29151) (@argoproj-renovate[bot]) * a431650b103281fd6c1fe65a2499df69bb97ca87: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.26.0 (#29154) (@argoproj-renovate[bot]) * 997379f13e0bbc74d5dbea7a10f886fd741dd2fe: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.27.0 (#29168) (@argoproj-renovate[bot]) * 6533d44466c3debd0f0cc6f95a3cac44393a32ea: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.30.4 (#29176) (@argoproj-renovate[bot]) * 36be54b7a2bc015f25b363c79715f5f031c6a9cd: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.32.2 (#29207) (@argoproj-renovate[bot]) * 3ea698138b52aa85672347d319fa36d123844313: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.32.4 (#29223) (@argoproj-renovate[bot]) * fe367bf4371df12a2c957ddf597885ce72d60d85: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.32.6 (#29232) (@argoproj-renovate[bot]) * 2ff152bb38929aaa7646159acafb5e3d5affe239: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.35.4 (#29271) (@argoproj-renovate[bot]) * 986c4bca86ebdf341a648ff08502a3143a219aa5: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.37.1 (#29299) (@argoproj-renovate[bot]) * f558a3c31030acf5398b555a4206a7980c76cae1: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.39.2 (#29327) (@argoproj-renovate[bot]) * 1ba3d1f2cfb14ab70af9d2ba1da8a0c69ed6441c: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.4.5 (#28992) (@argoproj-renovate[bot]) * ec1defca99e1a7a1a6788b4717287958532c0ff7: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.43.1 (#29356) (@argoproj-renovate[bot]) * eefa3bfb16c03e05fa822fa0ccc6c6ea9dd6d308: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.46.4 (#29385) (@argoproj-renovate[bot]) * 39ed652ba07449b40c5a12b112d39112c51bcf30: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.53.0 (#29478) (@argoproj-renovate[bot]) * 576ce7ad05c2b40c0449a72411f53fc5c34b8e73: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.56.1 (#29489) (@argoproj-renovate[bot]) * 506f04054e1be62b9a269400a92cad9e07c9c0f4: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.56.3 (#29491) (@argoproj-renovate[bot]) * 0a994604a2ee242179beb8df0fa0eb6fabc05de0: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.57.1 (#29501) (@argoproj-renovate[bot]) * 320d558f7ef432a32d8cc47cee3aab5329cc6a5d: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.59.2 (#29515) (@argoproj-renovate[bot]) * eebefeff6b8e1f1616743b40435311e6827106d9: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.61.1 (#29528) (@argoproj-renovate[bot]) * 16afc0789724f65d361185325225164eacee22ca: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.62.1 (#29539) (@argoproj-renovate[bot]) * e3df25726901b4bd4088b90d01d53ed8f11dcf72: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.64.1 (#29557) (@argoproj-renovate[bot]) * 62e447f2637d0af6e1b7718843e212852aa055f2: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.7.0 (#29002) (@argoproj-renovate[bot]) * f2613118be95608568c1c0ad9d425cc348d63973: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.7.1 (#29019) (@argoproj-renovate[bot]) * 0715b5c8412c88e25a6f9cfbf14b533dac010321: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.85.0 (#29709) (@argoproj-renovate[bot]) * d4547c373897d75d19e39e908ccce2d8dd781bd2: chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.9.1 (#29034) (@argoproj-renovate[bot]) * 3c08eb2ffc1d47ad313f8c4e55f3dd9081934c34: chore(deps): update group golang (#29268) (@argoproj-renovate[bot]) * 45a914fa15b75d71e543e7c59557d39f48549ee6: chore(deps): update group golang (master) (cherry-pick #30090 for 3.6) (#30130) (@argo-cd-cherry-pick-bot[bot]) * b2059770487d0a73a767eafb7761a34b88383d8f: chore(deps): update group golang to v1.26.5 (#28628) (@argoproj-renovate[bot]) * d5376a1173952e0d1a4ea40b5ca619f465509196: chore(deps): update group golang to v1.26.6 (#29186) (@argoproj-renovate[bot]) * 43cfa8d44f34d473a06ea73529f263c865653a14: chore(deps): update group golang to v1.27.3 (release-3.6) (#30304) (@argoproj-renovate[bot]) * 5d1c03064129868ce37bd0df173ec2b2c22c5f6e: chore(deps): update group node to v24.17.0 (#27924) (@argoproj-renovate[bot]) * 661d4e2bbb0a42f1e5416a569aee9625bebb3d52: chore(deps): update group renovate (#28988) (@argoproj-renovate[bot]) * 1f106fefc0073af712473397565289917a28c1fa: chore(deps): update group renovate (#29115) (@argoproj-renovate[bot]) * 1d21ee17aae88c9a17cece84df4600a1e7604d0e: chore(deps): update group renovate (#29333) (@argoproj-renovate[bot]) * 06870272e604379867fe9edfcf28fa25b55e04d6: chore(deps): update group renovate (#29452) (@argoproj-renovate[bot]) * 7e2ea8cf1ac7bedddc32f478742f2146786d2f12: chore(deps): update group renovate (#29585) (@argoproj-renovate[bot]) * d42819669e779fbf7e50f1ebe3187335cde0a4bf: chore(deps): update group renovate (#29700) (@argoproj-renovate[bot]) * 345a0f992557e48b3276bcb23da09a8e39e4d575: chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.12.2 (#28424) (@argoproj-renovate[bot]) * 901a97ccd5a7e266ebe5edd959b6c489a63c5913: chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.13.0 (#29277) (@argoproj-renovate[bot]) * 750cdd6aea1885cdab3b56ae481260f2b6cc8d02: chore(deps): update module github.com/golangci/golangci-lint/v2 to v2.13.2 (#29425) (@argoproj-renovate[bot]) * 6e6c62931e802888984f4cf175868a435545b191: chore(deps): update module github.com/vektra/mockery/v3 to v3.7.2 (#28882) (@argoproj-renovate[bot]) * 702ca28819970f72f526eec537dd3a346464f2eb: chore(deps): update module github.com/vektra/mockery/v3 to v3.7.3 (#29167) (@argoproj-renovate[bot]) * 7fe27c0f2e745ce34689c4e2b9de05c2ccdc3259: chore(deps): update module github.com/vektra/mockery/v3 to v3.8.0 (#29630) (@argoproj-renovate[bot]) * 205b1acc28693a2356776ff62c4db440cec58f0f: chore(deps): update redis (#29132) (@argoproj-renovate[bot]) * b7d05dfb29bbf30d998acd5656432507ea5b27d1: chore(deps-dev): bump @babel/preset-env from 7.29.5 to 7.29.7 in /ui (#29547) (@dependabot[bot]) * 6add08fb31e1e46db6c95f4c30143e9508cf4f58: chore(deps-dev): bump @babel/preset-typescript from 7.28.5 to 7.29.7 in /ui (#29453) (@dependabot[bot]) * f430ebb1cff9e2977769e2428d8b886a3a7adc2a: chore(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.1 in /ui (#29495) (@dependabot[bot]) * e44f63b8b206662534999abea73a2624e857dd93: chore(deps-dev): bump @types/uuid from 9.0.8 to 11.0.0 in /ui (#29208) (@dependabot[bot]) * 6edb42bfa5262cdd01a94af37c6336bc3bd1c0fb: chore(deps-dev): bump copy-webpack-plugin from 12.0.2 to 14.0.0 in /ui (#29529) (@dependabot[bot]) * d89fcd51103768bac925156d093b41e63c2684e0: chore(deps-dev): bump esbuild-loader from 4.4.3 to 4.5.0 in /ui (#29481) (@dependabot[bot]) * e10650cb7ed8c1df9ef27ae3050a1cd37723e2ef: chore(deps-dev): bump eslint-config-prettier from 9.1.2 to 10.1.8 in /ui (#28234) (@dependabot[bot]) * bbf1c96686c2eed669fb9f86177d366be88c0683: chore(deps-dev): bump jest-environment-jsdom from 29.7.0 to 30.5.0 in /ui (#29530) (@dependabot[bot]) * 391f50748bfe58b4ec0d3efa311dcf21d2cd60c5: chore(deps-dev): bump jest-junit from 6.4.0 to 17.0.0 in /ui (#27652) (@dependabot[bot]) * 7271727dad7627b819f4a7875a7360a6b3e8e262: chore(deps-dev): bump postcss from 8.5.14 to 8.5.18 in /ui (#28919) (@dependabot[bot]) * 33a82e7ed98f874db4cefe7bb978464c84c32ecb: chore(deps-dev): bump postcss from 8.5.18 to 8.5.23 in /ui (#29036) (@dependabot[bot]) * 6b852ebe48bc45af80d2a06d2879707ec65a836e: chore(deps-dev): bump prettier from 3.8.4 to 3.9.5 in /ui (#28805) (@pasha-codefresh) * 87f65eb52356875fe1620d0f8ce315e89cc05ea4: chore(deps-dev): bump prettier from 3.9.5 to 3.9.6 in /ui (#27409) (@dependabot[bot]) * 91af317c17b231610ae3721bc107820bc32c35fe: chore(deps-dev): bump sass from 1.100.0 to 1.103.1 in /ui (#29337) (@dependabot[bot]) * 67f6f0b1ac43fe1a03efe721ac1a2cbdae48e6c6: chore(deps-dev): bump ts-jest from 29.4.9 to 29.4.12 in /ui (#28950) (@dependabot[bot]) * ec03608c880e55df6c4531a40215a920c0c18f58: chore(deps-dev): bump uuid from 9.0.1 to 14.0.1 in /ui (#28658) (@dependabot[bot]) * e9c49ec4ae4a13243d74ba1f71c6907223f2213f: chore(deps-dev): bump webpack from 5.106.2 to 5.110.3 in /ui (#29612) (@dependabot[bot]) * f07403a72ab802f781ed953e43c0fb1162e36d29: chore(deps-dev): bump webpack-cli from 5.1.4 to 7.2.3 in /ui (#29549) (@dependabot[bot]) * 3672c40715ff3bdc418c686fc19a86b48d6d756e: chore(deps-dev): bump webpack-dev-server from 5.2.4 to 5.2.5 in /ui (#28329) (@dependabot[bot]) * 5d36a162b58ce9528005e5250c32e647c38e92b4: chore(deps-dev): bump webpack-dev-server from 5.2.5 to 5.2.6 in /ui (#28829) (@dependabot[bot]) * bf3f6ea1482e6028e922beff83c38e5fb6475b74: chore(deps-ui): remove unused deps (#29114) (@blakepettersson) ### Other work * 1990594a7ce6ed85dc0f03989d2e5d702792dcae: Merge branch 'master' into react-compiler-rules-of-react-fixes (@jwinters01) * ec3ebaa6415bc6486d0be2e143c95172ad3fde98: Merge pull request #28417 from jwinters01/react-compiler-rules-of-react-fixes (@jwinters01) * d8dbd4a4a868bbf3b528b470a8582a22d573d6fd: Merge pull request #28538 from juliev0/pause-disable (@juliev0) * 9f858a457220b1a5272dfa3d7b2f3a0857f61203: Merge remote-tracking branch 'origin/master' into react-compiler-rules-of-react-fixes (@jwinters01) * 585b0d50f919a08888d1728c5a4419f733226c26: chore(bump): enable go 1.27 (#29377) (@blakepettersson) * 0611881dd3a34bc8858bcd9a0e7c842f85da90db: chore(ci): Renovate self-bump weekly (#29561) (@crenshaw-dev) * 6a79a2ea9eebeb8bac44f9d782cb1b3fd871d77d: chore(ci): automate Dex bumps (#28612) (@crenshaw-dev) * d83ca226dd73bf9686530e340bc4ace2f0ffea02: chore(ci): automate production binary bumps (#28433) (@crenshaw-dev) * 3b9a3f4ac7ce80f03088d5634dafec5afb9a3427: chore(ci): bump kubernetes versions in e2e matrix (#29596) (#29571) (@dudinea) * df18a45d3c307cd5fa3e4b6aed85d2030c2c1a42: chore(ci): dependabot groups for golang.org/x and codeql (#28651) (@crenshaw-dev) * dda866bb0ff57e32c38e3b0e0fbcd3ef4a47623e: chore(ci): fix Renovate PR attribution (#28428) (@crenshaw-dev) * 8ff516209af225082ca3df463d830d0de16ff887: chore(ci): group interdependent upgrades (#29275) (@crenshaw-dev) * ec1d136ac7f825e04903b5cb329ef48d62b7a9f5: chore(ci): ignore node for dependabot (#28418) (@crenshaw-dev) * 46452cc701bf4b1d95f2d39aedd013fe21c1cdd6: chore(ci): only bump image if there's a new version (#28419) (@crenshaw-dev) * 42b179a02bd6d6c1d6068f287f7d7885e1dfaf0b: chore(ci): pin issue-triage agent model to claude-sonnet-5 (#29502) (@nitishfy) * 0b9298cdc6850983a3e7054b41ce055d14a58e52: chore(ci): use curl instead of wget for renovate (#28459) (@crenshaw-dev) * d6da9ed4abccbd80919517da78b94c8105a29cda: chore(ci): use sonnet-4.5 for gh aw (#29634) (@reggie-k) * 21804a2acfe096ed748d3309c25b4b1211b1d912: chore(cmp): add OpenTelemetry spans for CMP internal phases (#28365) (@toyamagu-2021) * 7459a3f8ae7fa6f061f540d353c5e5f0dca07817: chore(dep): bump go-git dependency (cherry-pick #30013 for 3.6) (#30022) (@argo-cd-cherry-pick-bot[bot]) * fb462546624c8519a7577488bbe80b921ca3a8e4: chore(gh-aw): gh aw change to gpt-5-mini model (#29652) (@reggie-k) * 1098a3eb558abe543c34e725efaacda3b7028442: chore(perf): cache compiled Lua scripts across executions (#28278) (@crenshaw-dev) * 3d7df262202470ab0dc2848541fc15501007b659: chore(refactor): remove dupe type (#28617) (@crenshaw-dev) * 4b2103cb34d9ce2e5ecf50797ddd0afc620e28fe: chore(release): fix update-supported-version.sh script to handle k3s 1.37-rc3 tag (#29689) (@dudinea) * 7688350dc1c1ba0dddfa8c446f9a5ee6fa2a84c2: chore(ui): fix Rules-of-React violations for React Compiler readiness (@jwinters01) * e4e607598c51a431d2bbaa805aad3ec727ab2220: chore(ui): fix additional Rules-of-React violations (@jwinters01) * d381d5b89db7715d36714209d6fd0170bbc72f7e: chore(ui): fix deprecation warnings post React-19 upgrade (#29183) (@jwinters01) * db31394bc1a62324a2a0b85f9d18fe49fe6c7ae9: chore(ui): fix lint errors surfaced by React Compiler ruleset (@jwinters01) * 17a8326d3c17af60d9f8dfbb0ae617bc513407d7: chore(ui): pnpm 12 (#29619) (@blakepettersson) * ca7128f6ed073deb07dcccefab7340a4f5c88377: chore(ui): remove dead filteredGraph state (@choejwoo) * 67398493ffd8a6f6cad9fad76f49ed6153d00ae0: chore(ui): resolve react-hooks deps from public npm registry (@jwinters01) * 80d8146ceb6e6b89b4a6231796b3748bd791ea2b: chore(ui): use swagger-ui-dist instead of redoc (#29018) (@blakepettersson) * 76eb1da6ecb31f329a44edca846781b602bf6f55: chore: Remove accidentally committed test file (#28626) (@olivergondza) * b49e9c08ff1f8cab7ea3d3b144622f08eb60133a: chore: Undo PR 28918 due to redoc dependency on older version (#28943) (@keithchong) * 669b2f6564680b554fb805f02059dda7b3e2e793: chore: Update Redis to 8.6.4 (#28589) (@baurmatt) * 7ca01207e619ac26cc2b6a80047c0530aa1f79e2: chore: add logs with timing for cluster sync performance (#28707) (@agaudreault) * b89ca484af4246831320445aa679748816aa5c88: chore: add prometheus argocd version gauge (#25981) (@blakepettersson) * eed206e61ebbf5189a69ad09ab1fd2b34e1f0026: chore: adds 3.7 relase on the schedule (#29467) (@ppapapetrou76) * cd5d5fb4071dcca61078b854eb226370693e1681: chore: adds a short message to health check contributors to update the upgra… (#29025) (@ppapapetrou76) * c6321991b1d6408c8b3b2ac357c448a15aa74123: chore: apply linter to gitops-engine (#28859) (@agaudreault) * f55566445ee3a2a4f3339bf10df0f6bc1ecf7f23: chore: bump version to 3.6.0 on release-3.6 branch (#30754) (@github-actions[bot]) * b7e3f52c2827c5c9e0dd41d71b292bbeb66010be: chore: bump version to 3.6.0-rc1 on release-3.6 branch (#29730) (@github-actions[bot]) * f922b44b5d17765910e31a583dfb253d75afebe6: chore: bump version to 3.6.0-rc2 on release-3.6 branch (#30042) (@github-actions[bot]) * 996e98bb1b37b6b1bee34254020b569a79f8918b: chore: bump version to 3.6.0-rc3 on release-3.6 branch (#30219) (@github-actions[bot]) * 2eaca1ff83a2befb2851f254552135b723fdc777: chore: bump version to 3.6.0-rc4 on release-3.6 branch (#30347) (@github-actions[bot]) * ac403530fc9daa4725dbb93e73697da00ce530aa: chore: change the release pr title to pass the github action pr title check (#28939) (@ppapapetrou76) * 3fea3aecf4e3e1b7c74e055194352cc046ecd4a3: chore: correct documenting comment on ApplicationConditionType format (#29084) (@tacf) * 1afe1eb93814e8d62ce7073bada3ace638ca84fb: chore: do not update app object in indexer (#28705) (@agaudreault) * 49f4694b3ecbc4986c5910c78215518cea5920be: chore: fix broken test (#29057) (@ppapapetrou76) * 281ea9e80979967da47aea115a6b84cf6fafcd3f: chore: fix lint (#29506) (@kuci-JK) * 7043070e5fe69cedc58cea60a1b3659898faf573: chore: fix typos in code comments and documentation (#28682) (@magic-peach) * ccc8a351a33679f8992b261209438250376b8393: chore: fix typos in comments and two user-facing messages (#29510) (@MsfPablo) * b53b433e4e4615f904fff92050091f08158090a6: chore: fix typos in sharding comments (#29263) (@MsfPablo) * 24af376521be6c444e333a22fc11bc018f999814: chore: handle DeletedFinalStateUnknown from informer (#28321) (@agaudreault) * 9071c2eb2907537a0fb0c1447e8cb2a329d75b00: chore: initialize git lfs like debian does (#29435) (@ppapapetrou76) * 3c9e37b67175476cd1447a766eb275b33c24e21a: chore: k3s 1.37.0 ga (cherry-pick #29843 for 3.6) (#29848) (@argo-cd-cherry-pick-bot[bot]) * ac346edd5cbb0af454e7b31dd41db4dfcb7c8e54: chore: move Docker image updates from Dependabot to Renovate (#28422) (@crenshaw-dev) * f39eacbd7345d9ceefec5dd8c206659e5461b916: chore: propagate contexts (#28353) (@blakepettersson) * 090c8181e3f7e046640dcb1e5877cc61a59e0196: chore: refresh SECURITY-INSIGHTS.yml last-updated when the release chore bumps project-release (#28725) (#28957) (@kobihikri) * 64ca73ea50398c9994ff3403b8b3b762bef49718: chore: remove dompurify (cherry-pick #30181 for 3.6) (#30183) (@argo-cd-cherry-pick-bot[bot]) * 5e53705a29883eebc4c4c10b973bd53f42513348: chore: rxjs retry when migration (#29475) (@pasha-codefresh) * 9cee19db23690fe4b446140f59162fed36635d60: chore: signal handling followups (#29226) (@blakepettersson) * 690b68a4eb0bfd884d3253758a4ce666746fee07: chore: switch reconcile trigger log to info level for managed resource (#28456) (@agaudreault) * 52378dd5de4ac0647a54e629cf6605552d77dd98: chore: sync maintainer files for membership Sep 2026 (#29544) (@crenshaw-dev) * 6e68cde159b1fb23a418f997c93efb71a2a7088c: chore: use kustomize version from tool-versions.sh (#28875) (@kuci-JK) * 5d48b70c0ca8364d8e45e6af4c70f87886ea260c: chore: use test contexts throughout (#28314) (@blakepettersson) * 956b479ef59fad0b70fd0fd2856420e75c52990f: ci(gitops-engine): support tagged releases for gitops-engine (#27740) (@rumstead) * b7f7acb4cd82dec4e692f77aa6e2d73b01bf3037: ci(renovate): fix - make renovate update itself correctly, fix network failures (#28985) (@dudinea) * 5e75a11c5feec060c9fef692e5a7c8e2467372b3: ci(renovate): make renovate manage Redis versions throughout the project (#28994) (#28993) (@dudinea) * 40f558b884b28a6557b0774bc5becad05aabbe6b: ci: Add github-agentics issue triage workflow (#28215) (@reggie-k) * 642cac52ff5358426087468ddadeb811607a0678: ci: Use gh aw copilot GitHub token (#28797) (@reggie-k) * 97fc230f9358507cff342e84e3c0352acd212f21: ci: avoid duplicate Go cache restores (#28437) (@siddiksawani) * 7a1da579b8f7bc07d671d23b341d67ee958fcf2e: ci: harden gitops-engine tag step to use GITHUB_REF_NAME (#28706) (@RealFakeAccount) * 45dfd665aa9401ad06615ac5ba6e3a111c11e195: ci: remove `gh-aw-local target` from `codegen` (#28830) (@nitishfy) * f5fdf75ea9b66735965cf45ae062a73bdf051b8e: ci: upload unit and e2e coverage separately with Codecov flags (#28085) (@AdamSaleh) * e572f4c88bf6956de29460b6b7ef7c8b4c2b0833: ci: use GitHub token for installing gh aw to avoid rate limit (#28856) (@reggie-k) * 859045ce1347fee8ab53b923aac0af3fe4ab8c8f: feat(azure-spn-auth): optionally allow pop tokens for azure hybrid aks clusters - Closes #24156 (#26593) (@JS-Jake) * 69afa575a24fbb9ca778c686635e0661e13d9116: feat(repo-server): support custom extensions for application directory source (#28571) (@nitishfy) * 3e205187b8c44c04563338259d5369ebdc3c93b5: feat(resource-customization): add healthchecks and actions for Project Capsule resources (#28891) (@sandert-k8s) * a4ec66ec6723b3cd1640bb4071ae7c93473cd5f5: fix(gitops-engine): race condition on empty-uid backfill (#28343) (@crenshaw-dev) * c861e048d84864f7e8a2d4865fecd33f973c0931: fix(manifest-generate-paths): Consistent gen manifest cache key for UpdateRevisionForPaths (#28074) (@fm1ck3y) * 82479c8b9ed4ca2ba840dc1088ff485a598f1d89: fix(manifest-generate-paths): do not report changes on cache miss without path updates (cherry-pick #29442 for 3.6) (#29854) (@argo-cd-cherry-pick-bot[bot]) * d814efe0df47761fbf2e24400d5bba5e25a5b37d: fix(notification-controller): deep-copy before mutating object from a shared cache (#29350) (@antonu17) * 3d8c31d45c94a74260e1cabab4b310a75929cef3: fix(notification-controller): read appprojects from informer cache (#28815) (@antonu17) * 5c187da9d701e26efe4b7e56017ea7ac0857860f: fix(repo-server): expire cached Helm chart archives using repo cache expiration (#28081) (@Mangaal) * 656a4c30ac44e155a7ebacd60a3045d6b1881765: fix(repo-server): fixes server-side diff with Helm+Kubernetes (#28092) (@ppapapetrou76) * 09cb6609eb0e9a61c2acd131ffe9051d937eefc8: fix(repo-server): health check timeout resulting in CrashLoopBackOff (cherry-pick #29863 for 3.6) (#29900) (@argo-cd-cherry-pick-bot[bot]) * b1a0e3d782beb0a6cf47968f4675b4bc684c7da5: fix(repo-server): honor `ARGOCD_REPO_SERVER_OTLP_HEADERS` in repo-server (#28698) (@nitishfy) * acf74f3b9cac6edcfcccd3309770739c10faec49: fix(repo-server): make git auth errors readable instead of "terminal prompts disabled" (#28748) (@edu-diaz) * 814131540c6213d0ed9864d360ff3882b80ee5a7: fix(util/grpc): don't drop request log entries for Kubernetes-typed messages (cherry-pick #29872 for 3.6) (#30520) (@argo-cd-cherry-pick-bot[bot]) * c735633574fc9e2d1ef76909b451b52abab9b883: test(cmpserver): fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.6) (#30419) (@argo-cd-cherry-pick-bot[bot]) * 908f62630fb24b230bac4835b832b014a89337c0: test(controller): wait for the add handler before swapping the cache client (#30384) (cherry-pick #30400 for 3.6) (#30426) (@argo-cd-cherry-pick-bot[bot]) * e8a010bf4346dffeca06917b1e8c3d71ee488914: test(e2e): fix github's failure to show complete results of e2e test (#28727) (#28726) (@dudinea) * 8f6d4e19393233a0b566403b8b76dbc11c8c9c1c: test(flaky): accept connection reset by peer as valid mTLS rejection (#28367) (@toyamagu-2021) * e09741298ca41e678ee0dc693eb6edd7281d6ff7: test(git): run TestLsRemote against a local repository (#30386) (cherry-pick #30399 for 3.6) (#30411) (@argo-cd-cherry-pick-bot[bot]) * 244235d758fad78bd67942e9d23e55ce6f9297f7: test(hydrator): fix hydrator e2e tests failures when run with `make test-e2e` (#28579) (#28578) (@dudinea) * 96da0a78d012b7c5075c2e3447c65c1ec47ff2cd: test(notification-controller): fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.6) (#30414) (@argo-cd-cherry-pick-bot[bot]) * eced2caca4b15de259a4ee97249c86cd816634ba: test(repo-server): add tests to fetch git references (#28586) (@nitishfy) * 3be9834546ff4595790744383dae3eb870163b46: test(repository): assert Changes value explicitly in UpdateRevisionForPaths test (#28984) (@Churi12) * 1b1c88439fe39bbf1f3d4e6d07d42072c3f82e3f: tie argo-ui to appropriate commit (@jwinters01) **Full Changelog**: https://github.com/argoproj/argo-cd/compare/v3.5.7...v3.6.0 <a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a>

← Older Version Argo CD v3.3.19

Newer Version → Latest Tracked Version ✓