v3.3.19

Important

END OF LIFE NOTICE

This is the final release of the v3.3 release series. As of November 3rd, 2026 this version has reached end of life and will no longer receive bug fixes or security updates.

Action Required: Please upgrade to a supported version (v3.4.13, v3.5.7, or v3.6.0).

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.19/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.19/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• f392071: fix(actions): list Rollout actions when the Rollout has no status (#30291) (cherry-pick #30331 for 3.3) (#30650) (@argo-cd-cherry-pick-bot[bot])
• ef201d3: fix(appset): do not expose reserved cluster annotations as parameters (cherry-pick #30448 for 3.3) (#30480) (@argo-cd-cherry-pick-bot[bot])
• 34c59a8: fix(appset): refresh GitLab pull request generators configured with the project path (#13766) (cherry-pick #30578 for 3.3) (#30622) (@argo-cd-cherry-pick-bot[bot])
• 42bdff4: fix(cli): honor HTTP_PROXY/HTTPS_PROXY/NO_PROXY for gRPC-web connections (cherry-pick #29642 for 3.3) (#30500) (@argo-cd-cherry-pick-bot[bot])
• 67ab019: fix(controller): allow terminating an operation blocked by a sync window (#26395) (cherry-pick #30267 for 3.3) (#30504) (@argo-cd-cherry-pick-bot[bot])
• 36c346e: fix(exec): don't leak a goroutine when a command times out without waiting (cherry-pick #30394 for 3.3) (#30434) (@argo-cd-cherry-pick-bot[bot])
• e34397f: fix(git): send SIGTERM before SIGKILL when a git command is cancelled (cherry-pick #30393 for 3.3) (#30409) (@argo-cd-cherry-pick-bot[bot])
• 569750a: fix(health): handle Crossplane Providers missing the Installed or Healthy condition (#23363) (cherry-pick #30429 for 3.3) (#30626) (@argo-cd-cherry-pick-bot[bot])
• 6ba0b1b: fix(health): report inactive Crossplane ManagedResourceDefinitions as Healthy (#25270) (cherry-pick #30404 for 3.3) (#30422) (@argo-cd-cherry-pick-bot[bot])
• 6cc8e2b: fix(health): use status.healthy for customize.core.cnrm.cloud.google.com resources (#30164) (cherry-pick #30165 for 3.3) (#30656) (@argo-cd-cherry-pick-bot[bot])
• 75e5d84: fix(server): allow the gRPC health check without authentication (#26193) (cherry-pick #30474 for 3.3) (#30570) (@antcybersec)
• eba2d77: fix(ui): refine validation and handling for write credentials in repo settings (cherry-pick #30489 for 3.3) (#30596) (@adityaraj178)
• f985ac9: fix: Ingress link scheme (https) when tls is enabled without secretName (cherry-pick #28888 for 3.3) (#30510) (@argo-cd-cherry-pick-bot[bot])
• e388575: fix: accept IP and port as OCI Helm repository URL (#21374) (cherry-pick #30233 for 3.3) (#30514) (@argo-cd-cherry-pick-bot[bot])
• f44be7e: fix: badges with short revisions get correct width (#29335) (cherry-pick #29336 for 3.3) (#30582) (@argo-cd-cherry-pick-bot[bot])
• 35bf00a: fix: honor UserInfo cache limit when response omits expires (cherry-pick #30462 for 3.3) (#30619) (@adityaraj178)
• 17ed834: fix: prevent panic in glob.MatchStringInList for "/" sourceNamespaces entry (cherry-pick #30572 for 3.3) (#30612) (@argo-cd-cherry-pick-bot[bot])
• feb076b: fix: skip dollar escaping when DEX_EXPAND_ENV is disabled (cherry-pick #29181 for 3.3) (#30647) (@argo-cd-cherry-pick-bot[bot])
• 4145a4c: fix: wait for current SealedSecret generation before reporting health (cherry-pick #29867 for 3.3) (#30356) (@argo-cd-cherry-pick-bot[bot])

Other work

• 554529f: chore: bump version to 3.3.19 on release-3.3 branch (#30722) (@github-actions[bot])
• df91d32: fix(gitops-engine): race condition on empty-uid backfill (cherry-pick #28343 for 3.3) (#30525) (@argo-cd-cherry-pick-bot[bot])
• 4f209aa: test(cmpserver): fix flaky timing assertions in RunCommand timeout tests (#30377) (cherry-pick #30378 for 3.3) (#30420) (@argo-cd-cherry-pick-bot[bot])
• 303bb45: test(notification-controller): fix flaky TestInitTimeout (#30401) (cherry-pick #30406 for 3.3) (#30413) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: v3.3.18...v3.3.19