v1.3.0 · argoproj-labs argocd-image-updater · Discussion #1778 · GitHub

chengfang
Aug 13, 2026
Maintainer

What's Changed

chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 by @dependabot[bot] in chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 #1619
chore: test/ginkgo: bump image-updater from v1.1.1 to v1.2.0 by @dkarpele in chore: test/ginkgo: bump image-updater from v1.1.1 to v1.2.0 #1628
chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @dependabot[bot] in chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 #1618
chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 #1617
chore(deps): bump argo-cd from 3.3.8 to 3.3.9 by @chengfang in chore(deps): bump argo-cd from 3.3.8 to 3.3.9 #1632
chore(deps): bump argo-cd from 3.3.9 to 3.4.1, go from 1.25.9 to 1.26.0, golangci-lint from 2.5.0 to 2.12.2 by @chengfang in chore(deps): bump argo-cd from 3.3.9 to 3.4.1, go from 1.25.9 to 1.26.0, golangci-lint from 2.5.0 to 2.12.2 #1636
chore(ginkgo): remove role and rolebinding creation by @dkarpele in chore(ginkgo): remove role and rolebinding creation #1642
fix(webhook): normalize ghcr repository casing by @FerasMaali in fix(webhook): normalize ghcr repository casing #1639
fix(api): set WriteBackConfig.Method as optional in API by @dkarpele in fix(api): set WriteBackConfig.Method as optional in API #1647
fix: allow webhook traffic through NetworkPolicy (Exposing Webhook does not work without further adjustments #1544) by @ystkfujii in fix: allow webhook traffic through NetworkPolicy (#1544) #1633
chore(deps): bump argo-cd from 3.4.1 to 3.4.2 by @chengfang in chore(deps): bump argo-cd from 3.4.1 to 3.4.2 #1650
chore(deps): bump registry-scanner from v1.2.0 to v1.2.1 by @dkarpele in chore(deps): bump registry-scanner from v1.2.0 to v1.2.1 #1655
fix(test): correct assert.Equal arg order and wrong webhook type in quay test by @immanuwell in fix(test): correct assert.Equal arg order and wrong webhook type in quay test #1663
ci: add unit-tests flag to Codecov coverage uploads by @AdamSaleh in ci: add unit-tests flag to Codecov coverage uploads #1665
chore(deps): bump argocd from 3.4.2 to 3.4.3 by @chengfang in chore(deps): bump argocd from 3.4.2 to 3.4.3 #1671
fix(webhook): align standalone webhook HTTP/2 hardening by @doup2001 in fix(webhook): align standalone webhook HTTP/2 hardening #1588
chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 by @dependabot[bot] in chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 #1670
chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1 by @dependabot[bot] in chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1 #1666
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.29.0 by @dependabot[bot] in chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.29.0 #1668
chore(deps): bump image-updater from 1.2.0 to 1.2.1, and argocd-operator from 0.17 to 0.18 by @chengfang in chore(deps): bump image-updater from 1.2.0 to 1.2.1, and argocd-operator from 0.17 to 0.18 #1674
feat: support SourceHydrator applications for image updates by @julianderks in feat: support SourceHydrator applications for image updates #1475
chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-20230722181636-7b502560cad4 to 3.1.1 by @dkarpele in chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-20230722181636-7b502560cad4 to 3.1.1 #1675
feat(webhook): enforce mandatory webhook secret configuration by @dkarpele in feat(webhook): enforce mandatory webhook secret configuration #1678
fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back by @chengfang in fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back #1679
feat(webhook): add Azure Container Registry (ACR) webhook handler by @ruturaj220 in feat(webhook): add Azure Container Registry (ACR) webhook handler #1681
fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL by @chengfang in fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL #1683
ci: run CI tests on push to master by @AdamSaleh in ci: run CI tests on push to master #1676
chore(deps): bump argocd from 3.4.3 to 3.4.4 by @chengfang in chore(deps): bump argocd from 3.4.3 to 3.4.4 #1693
chore(deps): bump ImageUpdater from 1.2.1 to 1.2.2 by @chengfang in chore(deps): bump ImageUpdater from 1.2.1 to 1.2.2 #1705
Add blank lines preservation on git writeback by @rvandernoort in Add blank lines preservation on git writeback #1702
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in chore(deps): bump actions/checkout from 6 to 7 #1711
chore(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in chore(deps): bump actions/cache from 5 to 6 #1710
chore(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in chore(deps): bump codecov/codecov-action from 6 to 7 #1709
chore(deps): bump alpine from 3.23 to 3.24 by @dependabot[bot] in chore(deps): bump alpine from 3.23 to 3.24 #1708
chore(ci): add allow-unsafe-pr-checkout: true to actions/checkout@v7 to opt in to allow checkout of fork PRs by @chengfang in chore(ci): add allow-unsafe-pr-checkout: true to actions/checkout@v7 to opt in to allow checkout of fork PRs #1719
fix(write-back): resolve correct git source for implicit kustomize in multi-source apps by @rvandernoort in fix(write-back): resolve correct git source for implicit kustomize in multi-source apps #1703
feat: implement image signature verification by @dkarpele in feat: implement image signature verification #1706
chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 by @dependabot[bot] in chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 #1714
chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 #1716
chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.42.1 by @dependabot[bot] in chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.42.1 #1718
chore(e2e): install cosign to gh actions by @dkarpele in chore(e2e): install cosign to gh actions #1723
feat: image verification to work with both modern registry signature lookup and legacy signature formats; test(e2e): image signature verification by @dkarpele in feat: image verification to work with both modern registry signature lookup and legacy signature formats; test(e2e): image signature verification #1722
feat(argocd): support Plugin source type with git write-back by @flobz in feat(argocd): support Plugin source type with git write-back #1707
chore(deps): bump argocd from 3.4.4 to 3.4.5 by @chengfang in chore(deps): bump argocd from 3.4.4 to 3.4.5 #1726
feat(pr): Avoid creating duplicate PRs for apps sharing the same write-back-target and updates by @chengfang in feat(pr): Avoid creating duplicate PRs for apps sharing the same write-back-target and updates #1724
docs: add chansuke to OWNERS reviewers by @chansuke in docs: add chansuke to OWNERS reviewers #1731
fix: reject cross-namespace secret references in git write-back by @dkarpele in fix: reject cross-namespace secret references in git write-back #1732
fix: reject cross-namespace secret references in commonUpdateSettings.pullSecret by @dkarpele in fix: reject cross-namespace secret references in commonUpdateSettings.pullSecret #1733
feat: preserve YAML formatting when writing back to Helm values files by @grahamalama in feat: preserve YAML formatting when writing back to Helm values files #1734
feat(git): sign write-back commits via GitHub API with GitHub App creds by @josmo in feat(git): sign write-back commits via GitHub API with GitHub App creds #1728
chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 #1736
chore(deps): bump github.com/google/cel-go from 0.27.0 to 0.29.0 by @dependabot[bot] in chore(deps): bump github.com/google/cel-go from 0.27.0 to 0.29.0 #1737
feat(pr): skip git clone, checkout, commit and PR/MR creation if it already exists in the remote github or gitlab by @chengfang in feat(pr): skip git clone, checkout, commit and PR/MR creation if it already exists in the remote github or gitlab #1738
fix(docs): use current values of updateStrategy (semver, newest-build, digest and alphabetical) and de-emphasize deprecated values by @chengfang in fix(docs): use current values of updateStrategy (semver, newest-build, digest and alphabetical) and de-emphasize deprecated values #1740
fix(log): pass the context to git commands by @dkarpele in fix(log): pass the context to git commands #1742
feat(plugin): support applications of type plugin and plugin env variables by @chengfang in feat(plugin): support applications of type plugin and plugin env variables #1741
chore(deps): bump argocd from 3.4.5 to 3.4.6 by @chengfang in chore(deps): bump argocd from 3.4.5 to 3.4.6 #1744
chore(deps): bump github/codeql-action from 4 to 4.37.3 by @dependabot[bot] in chore(deps): bump github/codeql-action from 4 to 4.37.3 #1755
chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in chore(deps): bump actions/setup-go from 6 to 7 #1756
chore(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.0 by @dependabot[bot] in chore(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.0 #1751
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 #1749
chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 by @dependabot[bot] in chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 #1748
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 #1752
chore(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.19.2 by @dependabot[bot] in chore(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.19.2 #1750
chore(ci): change to run CodeQL on cron schedule only by @chengfang in chore(ci): change to run CodeQL on cron schedule only #1759
feat: support custom CA certificates for registries by @w3lld1 in feat: support custom CA certificates for registries #1743
chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.1 in /registry-scanner by @dependabot[bot] in chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.1 in /registry-scanner #1754
fix(semver): exclude pre-release tags when no semver constraint is set by @pujitha24 in fix(semver): exclude pre-release tags when no semver constraint is set #1758
chore(deps): bump argocd from 3.4.6 to 3.5.0 by @chengfang in chore(deps): bump argocd from 3.4.6 to 3.5.0 #1761
chore(doc): remove obsolete breaking change labels by @dkarpele in chore(doc): remove obsolete breaking change labels #1762
fix(digest): pick the right live image when multiple containers share the same image by @C4tWithShell in fix(digest): pick the right live image when multiple containers share the same image #1757
test: add regression coverage for force-update image with empty registry tags by @pujitha24 in test: add regression coverage for force-update image with empty registry tags #1764
chore(go-fix): modernize code with go fix command by @chengfang in chore(go-fix): modernize code with go fix command #1765
fix(kustomize): match images by alias to prevent cross-alias collisions by @pujitha24 in fix(kustomize): match images by alias to prevent cross-alias collisions #1763
fix(argocd): retain yaml document start if exists by @stphnlwlsh in fix(argocd): retain yaml document start if exists #1767
fix(helm): improve getHelmParamNames func to return defaults for image-name and image-tag param names by @chengfang in fix(helm): improve getHelmParamNames func to return defaults for image-name and image-tag param names #1771
chore(deps): bump argocd from 3.5.0 to 3.5.1 by @chengfang in chore(deps): bump argocd from 3.5.0 to 3.5.1 #1772
fix(git-writeback): only commit image-managed Helm parameters to .argocd-source override file by @pujitha24 in fix(git-writeback): only commit image-managed Helm parameters to .argocd-source override file #1770
fix(kustomize): reject mis-configured write-back target without kustomization prefix that is a standard kustomization.yaml by @pujitha24 in fix(kustomize): reject mis-configured write-back target without kustomization prefix that is a standard kustomization.yaml #1766
chore(deps): bump registry-scanner from 1.2.1 to 1.3.0 by @chengfang in chore(deps): bump registry-scanner from 1.2.1 to 1.3.0 #1776
Release 1.3.0 by @chengfang in Release 1.3.0 #1777

New Contributors

@FerasMaali made their first contribution in fix(webhook): normalize ghcr repository casing #1639
@ystkfujii made their first contribution in fix: allow webhook traffic through NetworkPolicy (#1544) #1633
@immanuwell made their first contribution in fix(test): correct assert.Equal arg order and wrong webhook type in quay test #1663
@AdamSaleh made their first contribution in ci: add unit-tests flag to Codecov coverage uploads #1665
@doup2001 made their first contribution in fix(webhook): align standalone webhook HTTP/2 hardening #1588
@julianderks made their first contribution in feat: support SourceHydrator applications for image updates #1475
@ruturaj220 made their first contribution in feat(webhook): add Azure Container Registry (ACR) webhook handler #1681
@rvandernoort made their first contribution in Add blank lines preservation on git writeback #1702
@flobz made their first contribution in feat(argocd): support Plugin source type with git write-back #1707
@josmo made their first contribution in feat(git): sign write-back commits via GitHub API with GitHub App creds #1728
@w3lld1 made their first contribution in feat: support custom CA certificates for registries #1743
@pujitha24 made their first contribution in fix(semver): exclude pre-release tags when no semver constraint is set #1758
@C4tWithShell made their first contribution in fix(digest): pick the right live image when multiple containers share the same image #1757
@stphnlwlsh made their first contribution in fix(argocd): retain yaml document start if exists #1767

Full Changelog: v1.2.2...v1.3.0

This discussion was created from the release v1.3.0.

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment