chore(deps): update dependency argoproj/argo-cd to v2.13.1 #189
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![public-glueops-renovatebot[bot]](https://avatars.githubusercontent.com/b/28357?s=60&v=4){kind=small}
public-glueops-renovatebot
bot
changed the title
public-glueops-renovatebot
bot
force-pushed
the
renovate/argoproj-argo-cd-2.13.x
branch
from
4305ac9
to
37b2a46
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.10.18->2.13.1Release Notes
argoproj/argo-cd (argoproj/argo-cd)
v2.13.1Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
6a8cb6e: feat: option to disable writing k8s events(#18205) (#18441) (#20788) (@Jack-R-lantern)Bug fixes
449e693: fix(pkce): 20202 Backport PKCE auth flow fix for basehref and reauth (#20675) (@austin5219)68606c6: fix: Fix repeated 403 due to app namespace being undefined (#20699) (#20819) (#20860) (@gcp-cherry-pick-bot[bot])99aab9a: fix: check for source position when --show-params is set (#20682) (#20689) (@gcp-cherry-pick-bot[bot])d03ccf3: fix: disable automaxprocs logging (#20069) - cherry-pick 2.13 (#20718) (@pasha-codefresh)Other work
7f45c9e: chore: Don't degrade PDB on InsufficientPods (#20171) (#20665) (#20694) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.13.0...v2.13.1
v2.13.0Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
e3b1d93: feat: allow individual extension configs (#20491) (#20525) (@leoluz)2503eb3: feat: support using exponential backoff between self heal attempts (#20275) (#20480) (@alexmt)Bug fixes
deb07ee: fix(appset): avoid panic when no steps in rollingSync (#20357) (#20492) (@gcp-cherry-pick-bot[bot])e7f9881: fix(diff): avoid cache miss in server-side diff (#20605) (#20607) (@gcp-cherry-pick-bot[bot])7bc333d: fix(ui): fix open application detail in new tab when basehref is set (#20004) (#20571) (@amit-o)1fcbe3f: fix(ui): fix the slider tansition (#20641) (#20642) (@gcp-cherry-pick-bot[bot])be57dfe: fix: support managing cluster with multiple argocd instances and annotation based tracking (#20222) (#20483) (@alexmt)435989c: fix: support managing cluster with multiple argocd instances and annotation based tracking (#20222) (#20488) (@alexmt)Documentation
d417417: docs(rbac): clarify glob pattern behavior for fine-grain RBAC (#20624) (#20626) (@gcp-cherry-pick-bot[bot])Other work
3f708b8: rerender when extensions update (#20559) (#20601) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.13.0-rc5...v2.13.0
v2.12.7Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
db5876f: feat: support using exponential backoff between self heal attempts (#20275) (#20479) (@alexmt)Bug fixes
e48878b: fix(diff): avoid cache miss in server-side diff (#20605) (#20609) (@gcp-cherry-pick-bot[bot])a41f868: fix(ui): fix create app panel reappear after closed (#19717) (#20507) (@gcp-cherry-pick-bot[bot])cacb06a: fix: check err before use schedule and duration (#20043) (#20371) (@daengdaengLee)32ef2e5: fix: support managing cluster with multiple argocd instances and annotation based tracking (#20222) (#20482) (@alexmt)Documentation
0cae929: docs(rbac): clarify glob pattern behavior for fine-grain RBAC (#20624) (#20627) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.12.6...v2.12.7
v2.12.6Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
68f63e7: fix(diff): avoid cache miss in server-side diff (#20423) (#20424) (#20450) (@gcp-cherry-pick-bot[bot])358930b: fix: don't disable buttons for multi-source apps (#20446) (#20448) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.12.5...v2.12.6
v2.12.5Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
53bb2e4: fix(ci): handle new k3s test version matrix (#20223) (#20427) (#20434) (@gcp-cherry-pick-bot[bot])3ff57d2: fix(cli): cherrypick Redis password fix #19599 into 2.12 (#20262) (@NetanelK)6e6857e: fix(ui): source can in fact beundefined(#20381) (#20420) (@blakepettersson)e2eb54c: fix: cherrypick semver fix #20096 into 2.12 (#20215) (@PaulSonOfLars)50271e1: fix: prevent crash during timer expiration after stream is closed (#19917) (#20271) (@agaudreault)Documentation
ee4f09e: docs(ui): sorting version (#20181) (#20204) (@gcp-cherry-pick-bot[bot])Other work
a05b042: chore(tests): fix erroneous cherry-pick (#20274) (@crenshaw-dev)5f5fb0d: fix(controller/ui): fix pod with sidecar state (#19843) (#20394) (@linghaoSu)Full Changelog: argoproj/argo-cd@v2.12.4...v2.12.5
v2.12.4Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
1568165: fix(appset): Fix perpetual appset reconciliation (#19822) (#19995) (@gcp-cherry-pick-bot[bot])b76a09e: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20090) (@gcp-cherry-pick-bot[bot])d56ef76: fix: diffing should not fail if resource fail schema validation (#19714) (#19729) (@gcp-cherry-pick-bot[bot])Documentation
02b8336: docs: note cluster scoping changes in 2.12x (#19684) (#19702) (@gcp-cherry-pick-bot[bot])Dependency updates
ff3ef71: cherry-pick chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#20056) (@ishitasequeira)08fe6f5: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20016) (@gcp-cherry-pick-bot[bot])8590550: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#19883) (#19987) (@chengfang)Full Changelog: argoproj/argo-cd@v2.12.3...v2.12.4
v2.12.3Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
343dec0: feat(sourceNamespace): Regex Support (#19016) (#19017) (#19664) (@gcp-cherry-pick-bot[bot])Bug fixes
cafd35c: fix(AnyNameSpaceRegex): Additional Functions Glob to Regexexp (#19516) (#19665) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.12.2...v2.12.3
v2.12.2Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
b068220: fix(appset): informer is not a kubernetes informer (#18905) (#19618) (#19636) (@gcp-cherry-pick-bot[bot])7244c2d: fix(appset): remove cache references (#19652) (@rumstead)c873d5c: fix: Floating title content incorrect for multi-sources (#17274) (#19623) (#19627) (@gcp-cherry-pick-bot[bot])88f85da: fix: Parse hostname correctly from repoURL to fetch correct CA cert (#19488) (#19602) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.12.1...v2.12.2
v2.12.1Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
952838c: fix(appset): cherry-pick - fix appset-in-any-namespace issue with git generators (#19558) (@ishitasequeira)b156b61: fix(appset): missing permissions for cluster install (#19059) (#19430) (#19435) (@gcp-cherry-pick-bot[bot])7af4526: fix: appset gpg limitation for templated project fields (#19492) (#19534) (@gcp-cherry-pick-bot[bot])fd47845: fix: docs version regex changed (#18756) (#19352) (@ft-jasong)Full Changelog: argoproj/argo-cd@v2.12.0...v2.12.1
v2.12.0Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Known Issues
ApplicationSets with git generators and a templated
spec.template.spec.projectfield will fail to reconcile due to a bug in the new git signature verification feature.The problem is fixed in 2.12.2.
Changelog
Features
57e61b2: feat: Add custom health check for cluster-api AWSManagedControlPlane (#19304) (#19360) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.12.0-rc5...v2.12.0
v2.11.12Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
1251131: feat: support using exponential backoff between self heal attempts (#20275) (#20478) (@alexmt)Bug fixes
14aa95b: fix(diff): avoid cache miss in server-side diff (#20605) (#20608) (@gcp-cherry-pick-bot[bot])53af727: fix: support managing cluster with multiple argocd instances and annotation based tracking (#20222) (#20481) (@alexmt)Full Changelog: argoproj/argo-cd@v2.11.11...v2.11.12
v2.11.11Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
d758ac8: fix(diff): avoid cache miss in server-side diff (#20423) (#20424) (#20451) (@gcp-cherry-pick-bot[bot])a5761d0: fix: CVE-2024-43799 upgrading transitive dep express to 4.21.0 to avoid send@0.18.0 (#20404) (@nmirasch)Full Changelog: argoproj/argo-cd@v2.11.10...v2.11.11
v2.11.10Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
b9567a4: fix(cli): cherrypick Redis password fix #19599 into 2.11 (#20261) (@NetanelK)Full Changelog: argoproj/argo-cd@v2.11.9...v2.11.10
v2.11.9Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
bd78134: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20091) (@gcp-cherry-pick-bot[bot])Dependency updates
54ac05b: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20017) (@gcp-cherry-pick-bot[bot])93f7846: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#19883) (#19989) (@chengfang)8b79185: chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#20055) (@ishitasequeira)Full Changelog: argoproj/argo-cd@v2.11.8...v2.11.9
v2.11.8Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
7b9438e: fix: ArgoCD 2.11 - Loop of PATCH calls to Application objects (#19340) (#19347) (@alexmt)5638e70: fix: Parse hostname correctly from repoURL to fetch correct CA cert (#19488) (#19603) (@gcp-cherry-pick-bot[bot])1383a1b: fix: diffing should not fail if resource fail schema validation (#19735) (@alexmt)42cc36a: fix: docs version regex changed (#18756) (#19353) (@ft-jasong)Full Changelog: argoproj/argo-cd@v2.11.7...v2.11.8
v2.11.7Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Other work
05edb2a: feat: verify rbac on each message and not just during handshake (@pasha-codefresh)Full Changelog: argoproj/argo-cd@v2.11.6...v2.11.7
v2.11.6Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
b980386: fix: cherry-pick #18761 (v2.11) (#19108) (@blakepettersson)Other work
540e3a5: Merge commit from fork (@pasha-codefresh)Full Changelog: argoproj/argo-cd@v2.11.5...v2.11.6
v2.11.5Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
c0f780c: fix(cli): Get Redis password from secret inloadClusters()(#18951) (#18956) (@gcp-cherry-pick-bot[bot])Other work
d1c052d: chore: update gitops-engine (2.11) (#19036) (@agaudreault)Full Changelog: argoproj/argo-cd@v2.11.4...v2.11.5
v2.11.4Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
d75b23b: Revert "feat(server): log app Spec along with event (#16416)" (#18458) (#18639) (@gcp-cherry-pick-bot[bot])Bug fixes
24b198b: fix(appset): revert "keep reconciling even when params error occurred" (#17062) (#18781) (@crenshaw-dev)bfbceff: fix(controller): bad server-side diffs (#18213) (2.11) (#18868) (@crenshaw-dev)07880f3: fix(webhook): bitbucket and azure not triggering refresh (#18289) (#18765) (#18819) (@gcp-cherry-pick-bot[bot])b5c13b6: fix: Update braces package to 3.0.3 (#18459) (#18663) (@gcp-cherry-pick-bot[bot])5fd645f: fix: docs site version selector broken (#18378) (#18724) (@gcp-cherry-pick-bot[bot])0d1709f: fix: update static schemas (#18889) (@crenshaw-dev)Documentation
0e71f09: docs: Fix .path to .path.segments go template (#18872) (#18874) (@gcp-cherry-pick-bot[bot])Dependency updates
c2bd38a: chore(deps): upgrade redis to 7.2.15-alpine (cherry-pick release-2.11) (#18640) (@34fathombelow)Other work
13844b9: chore: bump go version to 1.21.10 (#18540) (@34fathombelow)e1284e1: remove unwanted updating of source-position in app set command (#18887) (#18896) (@gcp-cherry-pick-bot[bot])Full Changelog: argoproj/argo-cd@v2.11.3...v2.11.4
v2.11.3Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Bug fixes
46342a9: fix: app names with non-alphanumeric characters in position 63 break syncs (issue #18237) (#18256) (#18439) (@gcp-cherry-pick-bot[bot])Other work
e01bb53: Merge pull request from GHSA-3cqf-953Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.