Update dependency argoproj/argo-cd to v3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
argoproj/argo-cd	Kustomization	major	v2.14.20 -> v3.2.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v3.2.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Please note that users operating large monorepos may encounter repo-server lock contention requiring pod restarts. A fix is under review and will be included in the next patch release.

Changelog

Features

• be8e79e: feat(appset): add pprof endpoints (cherry-pick #​25044 for 3.2) (#​25051) (@​rumstead)
• 79f152c: feat(appset): deleting applications in order when Progressive sync enabled on applicationSet (#​23465) (@​ranakan19)
• b1a9fab: feat(appset): enhance ApplicationSet status debugging logs (#​23869) (@​somln)
• a5c6898: feat(appset): increase concurrent reconcile maximum to max int64 (#​23721) (@​rumstead)
• 6a20776: feat(cli): Support Server-Side Diff CLI (#​23978) (@​pjiang-dev)
• 69f7d39: feat(cli): add 'get-resource' command (#​23196) (#​23609) (@​cjcocokrisp)
• 853b8dd: feat(cli): support password prompt input when --password is not provided in bcrypt cli (#​23906) (@​gyu-young-park)
• 5a8b427: feat(controller): Permit using newer revision when retrying failed sync (#​11494) (#​23038) (@​olivergondza)
• 5c9a5ef: feat(health): Add healthCheck for CRD DatadogMetric (#​23464) (@​Nicolas-Richard)
• d3de443: feat(health): CronJob health and suspend, resume and terminate Job actions (#​23991) (@​agaudreault)
• 36f1a59: feat(health): add health checks for GitOps Promoter (#​23663) (@​crenshaw-dev)
• 99fea7c: feat(helm): upgrade to 3.18.3 (#​23618) (@​crenshaw-dev)
• e8e39a9: feat(helm): upgrading helm to 3.18.4 (#​23724) (@​mubarak-j)
• 6f6c39d: feat(hydrator): Commit message templating (#​23679) (#​24204) (@​pbhatnagar-oss)
• e85e353: feat(hydrator): Credential template to source hydrator (#​23999) (@​pbhatnagar-oss)
• 562194b: feat(hydrator): add .gitattributes file to hydrated repo root (#​23678) (#​23725) (@​FourFifthsCode)
• 8b2799c: feat(hydrator): parallelize repo-server calls (#​24451) (#​24436) (@​crenshaw-dev)
• a6a78ef: feat(kustomize): upgrade to 5.7.0 (#​23619) (@​crenshaw-dev)
• d954789: feat(server): 3scale health checks (#​24327) (#​24326) (@​ammachado)
• 5b8e4b5: feat(server): pass authenticated userId as header to extensions (#​24356) (@​agaudreault)
• 2229f9d: feat(ui): Add hydration in status to dashboard application tiles (#​24319) (@​adityaraj178)
• 13c47ee: feat(ui): Added repo connection state message (#​24175) (@​surajyadav1108)
• 72d054d: feat(ui): Requests info for Cpu and Mem added to Pod details (#​20637) (@​surajyadav1108)
• 762114c: feat(ui): Sort by application-sync-order in the list page (#​23521) (#​24191) (@​downfa11)
• 97af89a: feat(ui): add prune option to application rollback (#​23861) (#​23932) (@​anthisfan)
• 8d018bb: feat(ui): add sortable columns to application list (#​24213) (#​24535) (@​downfa11)
• 6212ea2: feat(ui): adjust line-height and spacing for multi-line text in details row (#​24173) (@​jiwlee97)
• 26b970b: feat: Add gRPC health check in argocd-server (#​24276) (@​krapie)
• dcf1965: feat: Add health checks for Coralogix (#​23853) (@​daniel-leinov)
• 4e63bc7: feat: Adding ExtensionService health-check (#​23576) (@​solomon-kibret)
• be042c4: feat: AppSet PR generator return 0 results upon repo not found instead of failing (#​23447) (@​reggie-k)
• 3401d3b: feat: Export metrics to track number of users (#​20801) (#​23343) (@​sathiya06)
• c447628: feat: Implement Altinity clickhouse-operator CRD health checks (#​24017) (@​acze)
• 6028dea: feat: add OpenTelemetry trace context propagation for HTTP requests (#​23029) (@​yafeiaa)
• 3af3a05: feat: add sso-host flag for OAuth2 login configuration (#​22738) (#​22784) (@​PaleHazy)
• feab307: feat: add status.resourcesCount field to appset and change limit default (#​24698) (#​24711) (@​alexmt)
• 29df864: feat: add title matching filter for Pull Request Generator (#​23569) (@​nitishfy)
• fca42e3: feat: log a warning instead of debug when repository webhook does not match an application (#​23939) (@​fernandocarletti)
• 7ae14c8: feat: preserve non-hydrated files during hydration (#​24129) (@​nitishfy)
• c012702: feat: read argocd password from stdin (#​23520) (@​nitishfy)
• 07bd5e0: feat: show operation state UI (#​23589) (@​Aaron-9900)
• 14a22ad: feat: update unpause action for Numaproj CRDs (#​24036) (@​dpadhiar)

Bug fixes

• 48a7030: fix(UI): Add missing icon colors to auto-sync (#​23962) (@​surajyadav1108)
• aff3ae3: fix(api): app create --upsert should not error on invalid current destination (#​23922) (@​agaudreault)
• fb94cad: fix(applications): update application navigation URLs (#​22671) (#​23285) (@​Ruby-rc)
• 460111f: fix(applicationset): Git generator: Don't append default object to literal empty json array (#​23500) (#​23513) (@​ChristianCiach)
• ac4ae17: fix(appset): When Appset is deleted, the controller should reconcile applicationset #​23723 (#​23823) (@​sangdammad)
• 31e0f42: fix(appset): add applicationset leader election to roles and clean up (#​14369) (#​23976) (@​rumstead)
• d269e6f: fix(appset): add applicationsets to the built-in readonly role (#​24190) (#​24318) (@​crenshaw-dev)
• 6ec1aa1: fix(appset): do not remove progressive sync conditions (#​23506) (@​agaudreault)
• 03ac864: fix(cli): avoid panic in configure command when no local config exists (#​23085) (#​23967) (@​krapie)
• 7f5ef5c: fix(cli): correct typo in bcrypt error message (#​23849) (@​gyu-young-park)
• 70c8f46: fix(cli): honor ALL_PROXY and other proxy environment variables (#​24177) (@​SinnoLn)
• f13aa46: fix(cli): respect refresh type when running with specified revision (#​22463) (#​22462) (@​thejoeejoee)
• c4d99bb: fix(controller): expose ARGOCD_SYNC_WAVE_DELAY as configurable parameter (#​24536) (@​u-kai)
• e981167: fix(controller): get commit server url from env (#​23536) (@​nobbs)
• 83d553c: fix(controller): impersonation with destination name (#​23309) (#​23504) (@​crenshaw-dev)
• e0f4b00: fix(darwin): remove the need for cgo when building a darwin binary on linux (#​23507) (@​rumstead)
• d7364b4: fix(dashboard): Allow quantile label as float and integer (#​24087) (@​adberger)
• b20fd43: fix(discovery): add missing lua syntax and return to discovery (fixes #​24257) (#​24262) (@​jan-mrm)
• 614c85c: fix(docs): fix applicationsetcontroller.enable.github.api.metrics to false in docs cm (#​23516) (@​reggie-k)
• 4501ebb: fix(docs): include v3.1 upgrade docs (#​23529) (@​mubarak-j)
• 786b24e: fix(health): CRD health check message (#​23690) (#​23691) (@​crenshaw-dev)
• f4c4c66: fix(health): add logic for disabled policies (#​21347) (@​dhaiducek)
• 91b8bba: fix(health): custom resource health for flux helm repository of type oci (#​24294) (@​adberger)
• 35e3897: fix(health): incorrect reason in PullRequest script (cherry-pick #​24826 for 3.2) (#​24828) (@​argo-cd-cherry-pick-bot[bot])
• 8fa3e47: fix(health): remove CronJob progressing/suspended status (#​24430) (@​agaudreault)
• 4821d71: fix(health): typo in PromotionStrategy health.lua (cherry-pick #​24726 for 3.2) (#​24760) (@​argo-cd-cherry-pick-bot[bot])
• c68ec27: fix(health): undeclared var used in ChangeTransferPolicy check (#​23912) (@​crenshaw-dev)
• d1251f4: fix(health): use promotion resource Ready condition regardless of reason (cherry-pick #​24971 for 3.2) (#​24973) (@​argo-cd-cherry-pick-bot[bot])
• 56320a7: fix(hydrator): handle empty path (#​24349) (@​crenshaw-dev)
• 4d16fdc: fix(hydrator): normalize repo URL when grouping (#​23564) (#​23565) (@​crenshaw-dev)
• c60a727: fix(hydrator): omit Argocd- trailers from hydrator.metadata (#​23463) (@​crenshaw-dev)
• 02de363: fix(metrics): grpc prometheus stats missing (#​23877) (#​23838) (@​pbhatnagar-oss)
• 50531e6: fix(oci): loosen up layer restrictions (cherry-pick #​24640 for 3.2) (#​24648) (@​argo-cd-cherry-pick-bot[bot])
• b96401b: fix(project): Do not block project update when a cluster referenced in an App doesn't exist (#​23659) (@​OpenGuidou)
• e8f8610: fix(security): repository.GetDetailedProject exposes repo secrets (#​24387) (@​crenshaw-dev)
• 796f72c: fix(server): Send Azure DevOps token via git extra headers (#​23478) (#​23631) (@​mikebordon)
• 1ba3929: fix(server): ensure resource health status is inferred on application retrieval (#​24832) (cherry-pick #​24851 for 3.2) (#​24865) (@​argo-cd-cherry-pick-bot[bot])
• f420cce: fix(server): make parameterized resource actions backwards-compatible (#​23695) (@​crenshaw-dev)
• 0a1572b: fix(server): preserve webhook secret references on server restart (#​22588) (#​23905) (@​somln)
• 8c8902b: fix(server): validate new project on update (#​23970) (#​23973) (@​agaudreault)
• 1fbd63d: fix(sync): auto-sync loop when FailOnSharedResource (#​23357) (#​23641) (@​agaudreault)
• 65a082b: fix(sync): do not retry when sync timeout has elapsed (#​24020) (@​agaudreault)
• 9dfa9db: fix(sync): operations in errors without status cause infinite auto-sync loop (#​23356) (@​agaudreault)
• 3349949: fix(test): TestFailKustomizeBuildPatches fails on MacOS dev. env (#​23737) (@​dudinea)
• 965c83e: fix(test): Test_SSHCreds_Environ_TempFileCleanupOnInvalidProxyURL fails on Macos dev. env. (#​23755) (@​dudinea)
• c880373: fix(tests): race condition creating the sync id (#​23460) (@​agaudreault)
• 8884b27: fix(ui): Improve Delete Dialog Behaviour when deleting child apps in the app-of-app pattern (cherry-pick #​24802 for 3.2) (#​25123) (@​argo-cd-cherry-pick-bot[bot])
• d54c8af: fix(ui): Made App name font bolder in applications-list rows (#​24256) (@​surajyadav1108)
• 1bc9adb: fix(ui): account detail page crashes for accounts with empty capabilities (#​23787) (@​hanxiaop)
• 04d1ca4: fix(ui): catch AbortError during data fetch cancellation (#​24054) (@​youhonglian)
• 24b0ecc: fix(ui): convert GroupWrapper to a functional component (#​23796) (@​jiwlee97)
• 564e507: fix(ui): convert PolicyWrapper component to functional component (#​23809) (@​jiwlee97)
• dd1547f: fix(ui): convert RevisionFormField components to functional components (#​23813) (@​chansuke)
• d6ecc66: fix(ui): enable natural sort ordering for resources, add autocomplete attributes to login form #​22853 (#​23599) (@​sea-gull-diana)
• 3e6f11e: fix(ui): fix filter header label wrap (#​23560) (@​linghaoSu)
• aa5d139: fix(ui): fix misleading pointer cursor and animation click-block issue (#​23688) (@​choejwoo)
• 88a32d6: fix(ui): handle missing resources on UI (#​24355) (@​pjiang-dev)
• b18ea68: fix(ui): prevent undefined values in filter state causing checkbox corruption (#​23733) (@​choejwoo)
• e24d8d4: fix(ui): resolve duplicate sync-policy (#​24233) (@​downfa11)
• f3dbc6f: fix(ui): wrap log lines are wrapped to the next line (#​23946) (@​xfrnk2)
• a8cae97: fix(util): Fix default key exchange algorthims used for SSH connection to be FIPS compliant (#​24086) (@​anandf)
• 1b3ced9: fix: "admin cluster generate-spec" fails on missing "argocd-cm" (#​10429) (#​24088) (@​ATGardner)
• 001bfda: fix: #​24781 update crossplane healthchecks to V2 version (cherry-pick #​24782 for 3.2) (#​24784) (@​argo-cd-cherry-pick-bot[bot])
• 5ee35ad: fix: Address shellcheck detected shell warnings (#​22686) (@​olivergondza)
• 58b0116: fix: Allow metrics ingress for redis-ha-proxy (#​23926) (#​23928) (@​JulesTriomphe)
• 4e5b201: fix: ArgoCD CLI diff shows installationID annotations (#​22409) (#​22567) (@​muma378)
• 0793efb: fix: Badge display revision for multiple-sources application #​17986 (#​22547) (@​fpetr)
• ef8ac49: fix: Clear ApplicationSet applicationStatus when ProgressiveSync is disabled (cherry-pick #​24587 for 3.2 (#​24716) (@​aali309)
• bb56b9e: fix: Ensure application sets in custom namespace can be upserted (#​23860) (@​onematchfox)
• df324c0: fix: Ensure that symlink targets are not made absolute on extracting a tar (#​24145) (#​24146) (@​leh-ppi)
• c94874f: fix: HTTPProxy health-check update (#​23575) (@​solomon-kibret)
• 6aa9c20: fix: Health status for HTTPRoute with multiple generations (#​24958) (cherry-pick #​24959 for 3.2) (#​25039) (@​lindeskar)
• 7129a2c: fix: High Application Controller CPU Usage - Reduce calls to db.GetSettings (#​24235) (@​FourFifthsCode)
• 87faf58: fix: Hydrator wipes out entire branch when multiple Applications hydrate to the same branch with different path (fixes #​24179) (#​24185) (@​adityaraj178)
• b8ac5ef: fix: OCI client, avoid calling tags/list if revision is not a constraint #​23580 (#​23581) (@​erdody)
• 1453367: fix: Progress Sync Unknown in UI (cherry-pick #​24202 for 3.2) (#​24641) (@​argo-cd-cherry-pick-bot[bot])
• 12d3f5d: fix: RunResourceAction: error getting Lua resource action: built-in script does not exist #​24490 (#​24491) (@​FourFifthsCode)
• 1c9bb47: fix: Selecting repoType in dropdown doesn't do anything (#​23747) (#​23750) (@​keithchong)
• 8d47727: fix: UI error with ApplicationSet in any namespace (#​23601) (@​jaqxues)
• 45a7a18: fix: kustomize edit add component check (#​24100) (@​blakepettersson)
• 4c92911: fix: syncPolicy.automated.enabled=false does not disable automated sync (#​24254) (@​downfa11)
• 2e4af5f: fix: autosync would not trigger for different sources (#​23615) (#​23655) (@​agaudreault)
• 1c5d7f1: fix: cache external TLS cert to avoid Loading TLS config log spam (#​17277) (#​23965) (#​24080) (@​mtbennett-godaddy)
• a1df57d: fix: capture stderr in executil RunWithExecRunOpts (cherry-pick #​25139 for 3.2) (#​25140) (@​argo-cd-cherry-pick-bot[bot])
• 670d383: fix: change the appset namespace to server namespace when generating appset (#​23900) (@​nitishfy)
• 3eb442e: fix: correct misleading log and linter directive (#​23824) (@​augustkang)
• ed752cb: fix: correct post-delete finalizer removal when cluster not found (#​24415) (@​aborilov)
• 22c652c: fix: correct typo in applicationset/utils/utils.go (#​24352) (@​augustkang)
• 51fa4e8: fix: do not change CronJob to progressing (#​24269) (@​agaudreault)
• b227ef1: fix: don't show error about missing appset (cherry-pick #​24995 for 3.2) (#​24997) (@​argo-cd-cherry-pick-bot[bot])
• 7168674: fix: downgrade go-git (#​24288) (@​blakepettersson)
• 42d4cfb: fix: existingWindows to treat all fields of the window instead of a small subset of them (#​20712) (#​23636) (@​itaispiegel)
• 9895f55: fix: helm GetTags cache writing (#​23865) (@​mclarke47)
• a1f4248: fix: hydration errors not set on applications (#​24755) (#​24809) (@​agaudreault)
• ba38778: fix: improve CMP logging and error messages (#​24022) (@​korECM)
• 8ed3a24: fix: improves message for diff-exit-code configuration option (#​24039) (@​ppapapetrou76)
• a90c545: fix: improves the ui message when an operation is terminated due to controller sync timeout (#​23657) (@​ppapapetrou76)
• 5c2b13f: fix: incorrect source used in CompareAppState (#​23630) (@​agaudreault)
• e37c3db: fix: kustomize components + monorepos (#​23486) (@​blakepettersson)
• 873c2fc: fix: labels field is nil in values interpolation (#​24501) (#​24502) (@​tonychg)
• f3c8e1d: fix: limit number of resources in appset status (#​24690) (#​24697) (@​alexmt)
• 3db95b1: fix: make webhook payload handlers recover from panics (cherry-pick #​24862 for 3.2) (#​24912) (@​argo-cd-cherry-pick-bot[bot])
• b1b1570: fix: prevent idle connection buildup by cloning http.DefaultTransport in Bitbucket SCM/PR generator #​24209 (#​24210) (@​portly-halicore-76)
• 8b8d04e: fix: propagate gRPC context to HTTP client in grpcproxy (#​23840) (#​24157) (@​BHAVISHYA2005)
• 8f23c88: fix: remove mounting of host /tmp when running argocd-test-(client|server) images (#​24025) (#​24028) (#​24024) (@​dudinea)
• aed63c6: fix: remove platform flag to fix multi-platform binary architecture of CLI tools #​24549 (#​24550) (@​pinelibg)
• 4dfab5d: fix: remove tracking annotation from git manifest when performing hydration (#​23857) (@​nitishfy)
• 559744a: fix: replace :arrow_heading_up: for MS teams (#​22258) (#​22725) (@​chansuke)
• c641837: fix: replace grpc.NewClient (#​19653) (#​24188) (@​Jack-R-lantern)
• 6c38186: fix: resolve argocd ui error for externalSecrets, fixes #​23886 (#​24232) (@​raweber42)
• 28510cd: fix: resolve argocdService initialization issue in notifications CLI (cherry-pick #​24664 for 3.2) (#​24680) (@​argo-cd-cherry-pick-bot[bot])
• fe6aaad: fix: resource tree endpoint doesn't have missing state (#​23948) (@​hanxiaop)
• 22d3ef0: fix: respect ignore differences for individual array elements in CRDs (#​24197) (@​nitishfy)
• f78cddf: fix: revert kubeVersion change to preserve trailing + (#​24066) (@​agaudreault)
• 8c3b78e: fix: set correct path to metadata for numa rollout pause actions (#​24280) (@​dpadhiar)
• 16cc1b1: fix: support dynamic field path based on Hydrator state in summary view (#​23950) (@​bianbbc87)
• 51d8819: fix: the specified namespace is not taking effect in argocd-notifications (#​23839) (@​iawia002)
• 262c815: fix: typo err for GetConditions comment (#​23807) (@​warjiang)
• 087378c: fix: update ExternalSecret discovery.lua to also include the refreshPolicy (cherry-pick #​24707 for 3.2) (#​24713) (@​argo-cd-cherry-pick-bot[bot])
• [bf9f927](https://redirect.github.com/argoproj/argo-cd/commit/bf9f