v3.5.0-rc3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0-rc3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.0-rc3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 41b6fee: feat(impersonation): allow to disable strict enforcement (#27084) (cherry-pick #27573 for 3.5) (#28595) (@argo-cd-cherry-pick-bot[bot])

Bug fixes

• 06fae9d: fix(appset): fall back to create when patch returns NotFound (#17312) (cherry-pick #28645 for 3.5) (#28716) (@argo-cd-cherry-pick-bot[bot])
• a62624a: fix(diff): don't drop manager-owned descendant fields when filtering webhook mutations (cherry-pick #28819 for 3.5) (#28895) (@argo-cd-cherry-pick-bot[bot])
• 0b42a6d: fix(helm): pass registry passwords through stdin (Cherry-Pick) (#28834) (@nitishfy)
• 5c1b930: fix(progressivesync): check if error == notfound (cherry-pick #28663 for 3.5) (#28670) (@argo-cd-cherry-pick-bot[bot])
• bc5d359: fix(ui): update cluster count logic in ApplicationsSummary (cherry-pick #28768 for 3.5) (#28777) (@argo-cd-cherry-pick-bot[bot])
• b6bff3b: fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (cherry-pick #28863 for 3.5) (#28866) (@argo-cd-cherry-pick-bot[bot])
• 061bd2b: fix: only do annotation backfill if live unset (cherry-pick #28770 for 3.5) (#28775) (@argo-cd-cherry-pick-bot[bot])
• f1b39c8: fix: use Entra ID uti claim as token id when jti is absent (#28625) (cherry-pick #28656 for 3.5) (#28675) (@argo-cd-cherry-pick-bot[bot])
• 7cde9f4: fix: use OIDC refresh tokens to renew expired sessions (#27041, #12189) (cherry-pick #27777 for 3.5) (#28689) (@argo-cd-cherry-pick-bot[bot])

Other work

• 7660efb: chore: bump version to 3.5.0-rc3 on release-3.5 branch (#28938) (@github-actions[bot])
• faaa0b6: fix(repo-server): honor ARGOCD_REPO_SERVER_OTLP_HEADERS in repo-server (Cherry-pick - 3.5) (#28715) (@nitishfy)
• 8ffead8: test(e2e): fix github's failure to show complete results of e2e test (#28727) (cherry-pick #28726 for 3.5) (#28728) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: v3.5.0-rc2...v3.5.0-rc3