v2.14.9

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.9/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.9/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 31a5545: fix: Check for semver constraint matching in application webhook handler (cherry-pick #21648) (#22508) (@gcp-cherry-pick-bot[bot])

Other work

• c868711: chore(dep): bump gitops-engine 2.14 (#22520) (@pjiang-dev)

Full Changelog: v2.14.8...v2.14.9

v3.0.0-rc3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0-rc3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0-rc3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Dependency updates

• 20f0fc6: chore(deps): bump github.com/golang-jwt/jwt to 4.5.2/5.2.2 (#22464) (@crenshaw-dev)

Full Changelog: v3.0.0-rc2...v3.0.0-rc3

v2.14.8

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.8/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.8/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 9a9e62d: fix(server): fully populate app destination before project checks (#22408) (#22426) (@crenshaw-dev)
• 7acdaa9: fix: CVE-2025-26791 upgrading redoc dep to 2.4.0 to avoid DOMPurify b… (#21997) (@nmirasch)
• 872319e: fix: handle annotated git tags correctly in repo server cache (#21771) (#22424) (@aali309)

Dependency updates

• 9f832cd: chore(deps): bump github.com/golang-jwt/jwt to 4.5.2/5.2.2 (#22465) (@crenshaw-dev)

Other work

• ec45e33: fix(ui, rbac): project-roles (#21829) (2.14 backport) (#22461) (@blakepettersson)

Full Changelog: v2.14.7...v2.14.8

v2.13.6

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.6/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 43f3cff: fix(ci): use pinned Helm version for init-release (#22164) (#22472) (@crenshaw-dev)
• 17a535f: fix(server): Fix server crash due to race condition in go-redis triggered by DNS instability (#22251) (@anandf)
• 3875dde: fix: CVE-2025-26791 upgrading redoc dep to 2.4.0, DOMPurify before 3.2.4 (#21966) (@nmirasch)
• 6ef7f61: fix: correct lookup for the kustomization file when applying patches (cherry-pick #22024) (#22087) (@nitishfy)
• c7937f1: fix: correctly set compareWith when requesting app refresh with delay (fixes #18998) (cherry-pick #21298) (#21953) (@gcp-cherry-pick-bot[bot])
• 6207fd0: fix: handle annotated git tags correctly in repo server cache (#21771) (#22397) (@aali309)

Dependency updates

• 58ded15: chore(deps): bump github.com/golang-jwt/jwt to 4.5.2 (#22466) (@crenshaw-dev)

Other work

• 8d02798: chore: Update change log for 2.13.6 (#22438) (@keithchong)
• 180d689: chore: cherry-pick #21786 for v2.13 (#21906) (@nitishfy)

Full Changelog: v2.13.5...v2.13.6

v2.12.11

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.11/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.11/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 7400d14: fix(ci): use pinned Helm version for init-release (#22164) (#22473) (@crenshaw-dev)
• 44c36b8: fix: CVE-2025-26791 upgrading redoc dep to 2.4.0 to avoid DOMPurify b… (#21994) (@nmirasch)
• 61a1c74: fix: correctly set compareWith when requesting app refresh with delay (fixes #18998) (cherry-pick #21298) (#21954) (@gcp-cherry-pick-bot[bot])

Dependency updates

• 59f23e2: chore(deps): bump github.com/golang-jwt/jwt to 4.5.2 (#22467) (@crenshaw-dev)

Full Changelog: v2.12.10...v2.12.11

v3.0.0-rc2

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0-rc2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0-rc2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 0d2471b: fix: Enable service account token automount for haproxy (#22226) (cherry-pick #22353) (#22406) (@gcp-cherry-pick-bot[bot])

Full Changelog: v3.0.0-rc1...v3.0.0-rc2

v2.14.7

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.7/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.7/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Dependency updates

• 3940782: chore(deps): bump gitops engine (#22405) (@crenshaw-dev)

Full Changelog: v2.14.6...v2.14.7

v2.14.6

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.6/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 38c0376: feat(server): make deep copies of objects returned by informers (#22173) (#22179) (#22340) (@rumstead)

Dependency updates

• defd4be: chore(deps): Update go-git from 5.12.0 to 5.13.2 to include several CVE fixes (#22313) (@anandf)

Full Changelog: v2.14.5...v2.14.6

v3.0.0-rc1

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0-rc1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.0-rc1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 402802b: feat!: Logs rbac enforce by default (#21678) (@reggie-k)
• cca7485: feat!: update compareoptions default values (#22230) (@agaudreault)
• 029927b: feat(appcontroller): store application health status in redis by default (#10312) (#21532) (@rumstead)
• f775e7b: feat(appset): Add values to PR generator (#21557) (@dudo)
• b9131c1: feat(cmp): pass empty env vars to plugins (#18720) (#22096) (@crenshaw-dev)
• ac50d8e: feat(config)!: exclude known interim resources by default (#20013) (#21635) (@agaudreault)
• 910b951: feat(controller): enable batch event processing by default (#22338) (@crenshaw-dev)
• 7edaef5: feat(helm): upgrading helm to 3.17.0 (#21722) (@rumstead)
• 88e43cb: feat(kubectl): upgrading kubectl to 1.32.1 (#21724) (@rumstead)
• c675757: feat(kustomize): support --include-templates for labels (#15283) (#22069) (@crenshaw-dev)
• 6f9389c: feat(log): support match case in pod log search (#21919) (@linghaoSu)
• feb7097: feat(metrics): add more kubectl metrics (#21720) (@crenshaw-dev)
• 606bd5b: feat(rbac)!: disable fine-grained inheritance by default (#19988) (#20671) (@fffinkel)
• e3bd569: feat(server): make deep copies of objects returned by informers (#22173) (#22179) (@rumstead)
• 7296201: feat(ui): Added link to start page in argo logo (#21461) (@surajyadav1108)
• 6d27928: feat(ui): highlight log lines by pod name (#21001) (@aali309)
• b8508f2: feat(ui): rename filter message status on SYNC STATUS view (#21061) (@aali309)
• 55f8a43: feat(ui): split arrays in yaml to fix ambiguous collapse when array items have nested objects (#21064) (@aali309)
• 0fab3cf: feat(ui): support display sync wave (#20614) (@linghaoSu)
• 922c9e9: feat(ui): support filter repo when input (#21451) (@linghaoSu)
• 89c4817: feat: Add support for Azure workload identity for Git and OCI repositories. (#21118) (@jagpreetstamber)
• f9ffb6a: feat: Added env reference objects to manifests for otlp.attrs (#21563) (@almoelda)
• 0973409: feat: Kustomize ignore missing components (#18634) (#21674) (@bradkwadsworth)
• 74b3532: feat: Make certain Status panel items look more 'clickable' (#19698) (#22232) (@keithchong)
• c0b2787: feat: Support kube 1.32 (#21805) (@sivchari)
• d301b40: feat: Upgrade notifications engine (#22273) (@sivchari)
• c9c4068: feat: add AND operator opt-in option for sync windows matches (#16846) (@adriananeci)
• f258c45: feat: add ARGOCD_APP_PROJECT_NAME to the build environment (#15185) (#21586) (@MacroPower)
• c71dd1a: feat: add a check for user defined role referential integrity (#21065) (@devopsjedi)
• 8044d68: feat: add bearer token auth (#21462) (@reggie-k)
• fa0b5f5: feat: add force promote actions for Numaplane rollouts (#22141) (@dpadhiar)
• e4311d8: feat: add name and labels in cluster metrics (#17870) (#18453) (@flbla)
• ecb9dba: feat: add support for azure workload identity in Microsoft Entra SSO (#21433) (@jagpreetstamber)
• 951d9d3: feat: add the --redis-compress as the global flag to set redis compression. (#21786) (@nitishfy)
• 561cbef: feat: checking user defined roles and policies for referential integrity (#20825) (#22132) (@devopsjedi)
• d23e6ac: feat: configurable log timestamp format (#21478) (@crenshaw-dev)
• c09e6fa: feat: improve StatefulSet immutable field error messages (#21209) (@aali309)
• 1698370: feat: replace spdy with websocket for portforward and pod exec #21517 (#21518) (@maoqide)
• 3e09f94: feat: resource customization for CustomResourceDefinition (#21416) (@almoelda)
• 6b002a5: feat: upgrade to v1.32.2 (#22168) (@sivchari)
• fbd7f29: feat: use errors.Join for debuggable (#22235) (@sivchari)
• dbdc1e7: feat: use log format config for klog (#5715) (#21458) (@crenshaw-dev)

Bug fixes

• 46bfc10: Revert "fix: Graceful shutdown for the API server (#18642) (#20981)" (#21221) (@pasha-codefresh)
• c6b0000: fix(actions): don't run empty Lua scripts (#22084) (#22161) (@crenshaw-dev)
• e6f94f2: fix(appcontroller): selfhealattemptscount needs to be reset at times (#22095) (@blakepettersson)
• 079341c: fix(applicationset): ApplicationSets with rolling sync stuck in Pending (#20230) (@Fsero)
• f6a84a4: fix(appset): Reconcile appset only once when appset is refreshed (fix 21171) (#21172) (@dacofr)
• f3509d2: fix(appset): dont requeue appsets on status change (#21364) (@rumstead)
• e852142: fix(appset): events not honouring configured namespaces (#21219) (#21241) (@eadred)
• e44ae96: fix(appset): generated app errors should use the default requeue (#21887) (#21936) (@rumstead)
• 922dd77: fix(appset): improve git generator repo credential fallback (#21167) (@blakepettersson)
• 55aab6e: fix(appset): reverted Gitlab SCM HasPath search and consider 404 errors as file not found (#16253) (#21597) (@prune998)
• 37a7231: fix(appset): update gitlab SCM provider to search on parent folder (#16253) (#21491) (@prune998)
• 06bd2ad: fix(ci): all version bump changes go in the PR (#21409) (@crenshaw-dev)
• 2933154: fix(ci): get correct previous version, fail workflow if not (cherry-pick #22376) (#22377) (@gcp-cherry-pick-bot[bot])
• 15046b9: fix(ci): handle major versions in compatibility table generator (cherry-pick #22370) (#22371) (@gcp-cherry-pick-bot[bot])
• 43d2a3d: fix(ci): proto references bump (#21391) (@crenshaw-dev)
• 05c7625: fix(ci): updating action-gh-release after upstream fix (#21407) (@rumstead)
• eb6732e: fix(ci): use pinned Helm version for init-release (#22164) (#22165) (@crenshaw-dev)
• 6e4c8fd: fix(ci): use tags instead of branches (cherry-pick #22372) (#22373) (@gcp-cherry-pick-bot[bot])
• 99cd3c7: fix(cli): add flags to admin import for retrying updates on conflicts and skipping resources with specific labels. (#21694) (@ashutosh16)
• 85684a8: fix(cli): application cannot be refreshed when invalid and hangs (#21615) (@agaudreault)
• eb6dd46: fix(cli): ignored resources should not be pruned during restore (#21894) (@agaudreault)
• 9c443b6: fix(cli): improve performance for admin export/import cmd (#22322) (@agaudreault)
• 546383a: fix(cli): log correct error message when updating a cluster that is not present (#22190) (@nitishfy)
• 613d06d: fix(cli): use correct CA when adding kube-public clusters (#21326) (#21327) (@aminarefzadeh)
• f2ee9a6: fix(cli): wrong variable to store --no-proxy value (#21226) (@the-technat)
• 1a9f226: fix(controller): rename cluster batch param and add to argocd-cmd-params-cm (#21402) (@crenshaw-dev)
• d54ae98: fix(controller): wrong tracking annotation for malformed resources (#22325) (@crenshaw-dev)
• b4a63ae: fix(dex): always request federated:id scope (#17908) (#21726) (@agaudreault)
• ad09b9c: fix(docs): 2.14 upgrading docs (#21756) (@rumstead)
• 4382281...

v2.14.5

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Dependency updates

• ed242b9: chore(deps): bump github.com/redis/go-redis/v9 from 9.7.0 to 9.7.1 (#21957) (#22255) (@anandf)

Full Changelog: v2.14.4...v2.14.5