chore(deps): update dependency argoproj/argo-cd to v2.13.0

This MR contains the following updates:

Package	Type	Update	Change
argoproj/argo-cd	Kustomization	minor	v2.11.5 -> v2.13.0

---

⚠ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v2.13.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• e3b1d93: feat: allow individual extension configs (#​20491) (#​20525) (@​leoluz)
• 2503eb3: feat: support using exponential backoff between self heal attempts (#​20275) (#​20480) (@​alexmt)

Bug fixes

• deb07ee: fix(appset): avoid panic when no steps in rollingSync (#​20357) (#​20492) (@​gcp-cherry-pick-bot[bot])
• e7f9881: fix(diff): avoid cache miss in server-side diff (#​20605) (#​20607) (@​gcp-cherry-pick-bot[bot])
• 7bc333d: fix(ui): fix open application detail in new tab when basehref is set (#​20004) (#​20571) (@​amit-o)
• 1fcbe3f: fix(ui): fix the slider tansition (#​20641) (#​20642) (@​gcp-cherry-pick-bot[bot])
• be57dfe: fix: support managing cluster with multiple argocd instances and annotation based tracking (#​20222) (#​20483) (@​alexmt)
• 435989c: fix: support managing cluster with multiple argocd instances and annotation based tracking (#​20222) (#​20488) (@​alexmt)

Documentation

• d417417: docs(rbac): clarify glob pattern behavior for fine-grain RBAC (#​20624) (#​20626) (@​gcp-cherry-pick-bot[bot])

Other work

• 3f708b8: rerender when extensions update (#​20559) (#​20601) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.13.0-rc5...v2.13.0

v2.12.7

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.7/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.7/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• db5876f: feat: support using exponential backoff between self heal attempts (#​20275) (#​20479) (@​alexmt)

Bug fixes

• e48878b: fix(diff): avoid cache miss in server-side diff (#​20605) (#​20609) (@​gcp-cherry-pick-bot[bot])
• a41f868: fix(ui): fix create app panel reappear after closed (#​19717) (#​20507) (@​gcp-cherry-pick-bot[bot])
• cacb06a: fix: check err before use schedule and duration (#​20043) (#​20371) (@​daengdaengLee)
• 32ef2e5: fix: support managing cluster with multiple argocd instances and annotation based tracking (#​20222) (#​20482) (@​alexmt)

Documentation

• 0cae929: docs(rbac): clarify glob pattern behavior for fine-grain RBAC (#​20624) (#​20627) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.6...v2.12.7

v2.12.6

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.6/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 68f63e7: fix(diff): avoid cache miss in server-side diff (#​20423) (#​20424) (#​20450) (@​gcp-cherry-pick-bot[bot])
• 358930b: fix: don't disable buttons for multi-source apps (#​20446) (#​20448) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.5...v2.12.6

v2.12.5

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 53bb2e4: fix(ci): handle new k3s test version matrix (#​20223) (#​20427) (#​20434) (@​gcp-cherry-pick-bot[bot])
• 3ff57d2: fix(cli): cherrypick Redis password fix #​19599 into 2.12 (#​20262) (@​NetanelK)
• 6e6857e: fix(ui): source can in fact be undefined (#​20381) (#​20420) (@​blakepettersson)
• e2eb54c: fix: cherrypick semver fix #​20096 into 2.12 (#​20215) (@​PaulSonOfLars)
• 50271e1: fix: prevent crash during timer expiration after stream is closed (#​19917) (#​20271) (@​agaudreault)

Documentation

• ee4f09e: docs(ui): sorting version (#​20181) (#​20204) (@​gcp-cherry-pick-bot[bot])

Other work

• a05b042: chore(tests): fix erroneous cherry-pick (#​20274) (@​crenshaw-dev)
• 5f5fb0d: fix(controller/ui): fix pod with sidecar state (#​19843) (#​20394) (@​linghaoSu)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.4...v2.12.5

v2.12.4

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 1568165: fix(appset): Fix perpetual appset reconciliation (#​19822) (#​19995) (@​gcp-cherry-pick-bot[bot])
• b76a09e: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#​20087) (#​20090) (@​gcp-cherry-pick-bot[bot])
• d56ef76: fix: diffing should not fail if resource fail schema validation (#​19714) (#​19729) (@​gcp-cherry-pick-bot[bot])

Documentation

• 02b8336: docs: note cluster scoping changes in 2.12x (#​19684) (#​19702) (@​gcp-cherry-pick-bot[bot])

Dependency updates

• ff3ef71: cherry-pick chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#​20056) (@​ishitasequeira)
• 08fe6f5: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#​19955) (#​20016) (@​gcp-cherry-pick-bot[bot])
• 8590550: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#​19883) (#​19987) (@​chengfang)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.3...v2.12.4

v2.12.3

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.3/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.3/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 343dec0: feat(sourceNamespace): Regex Support (#​19016) (#​19017) (#​19664) (@​gcp-cherry-pick-bot[bot])

Bug fixes

• cafd35c: fix(AnyNameSpaceRegex): Additional Functions Glob to Regexexp (#​19516) (#​19665) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.2...v2.12.3

v2.12.2

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.2/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.2/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b068220: fix(appset): informer is not a kubernetes informer (#​18905) (#​19618) (#​19636) (@​gcp-cherry-pick-bot[bot])
• 7244c2d: fix(appset): remove cache references (#​19652) (@​rumstead)
• c873d5c: fix: Floating title content incorrect for multi-sources (#​17274) (#​19623) (#​19627) (@​gcp-cherry-pick-bot[bot])
• 88f85da: fix: Parse hostname correctly from repoURL to fetch correct CA cert (#​19488) (#​19602) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.1...v2.12.2

v2.12.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 952838c: fix(appset): cherry-pick - fix appset-in-any-namespace issue with git generators (#​19558) (@​ishitasequeira)
• b156b61: fix(appset): missing permissions for cluster install (#​19059) (#​19430) (#​19435) (@​gcp-cherry-pick-bot[bot])
• 7af4526: fix: appset gpg limitation for templated project fields (#​19492) (#​19534) (@​gcp-cherry-pick-bot[bot])
• fd47845: fix: docs version regex changed (#​18756) (#​19352) (@​ft-jasong)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.0...v2.12.1

v2.12.0

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues

ApplicationSets with git generators and a templated spec.template.spec.project field will fail to reconcile due to a bug in the new git signature verification feature.

The problem is fixed in 2.12.2.

Changelog

Features

• 57e61b2: feat: Add custom health check for cluster-api AWSManagedControlPlane (#​19304) (#​19360) (@​gcp-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.0-rc5...v2.12.0

v2.11.12

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.12/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.12/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 1251131: feat: support using exponential backoff between self heal attempts (#​20275) (#​20478) (@​alexmt)

Bug fixes

• 14aa95b: fix(diff): avoid cache miss in server-side diff (#​20605) (#​20608) (@​gcp-cherry-pick-bot[bot])
• 53af727: fix: support managing cluster with multiple argocd instances and annotation based tracking (#​20222) (#​20481) (@​alexmt)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.11.11...v2.11.12

v2.11.11

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.11/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.11/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• d758ac8: fix(diff): avoid cache miss in server-side diff (#​20423) (#​20424) (#​20451) (@​gcp-cherry-pick-bot[bot])
• a5761d0: fix: CVE-2024-43799 upgrading transitive dep express to 4.21.0 to avoid send@0.18.0 (#​20404) (@​nmirasch)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.11.10...v2.11.11

v2.11.10

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.10/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.10/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b9567a4: fix(cli): cherrypick Redis password fix #​19599 into 2.11 (#​20261) (@​NetanelK)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.11.9...v2.11.10

v2.11.9

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.9/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.9/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• bd78134: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#​20087) (#​20091) (@​gcp-cherry-pick-bot[bot])

Dependency updates

• 54ac05b: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#​19955) (#​20017) (@​gcp-cherry-pick-bot[bot])
• 93f7846: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#​19883) (#​19989) (@​chengfang)
• 8b79185: chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#​20055) (@​ishitasequeira)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.11.8...v2.11.9

v2.11.8

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.8/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.8/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 7b9438e: fix: ArgoCD 2.11 - Loop of PATCH calls to Application objects (#​19340) (#​19347) (@​alexmt)
• 5638e70: fix: Parse hostname correctly from repoURL to fetch correct CA cert (#​19488) (#​19603) (@​gcp-cherry-pick-bot[bot])
• 1383a1b: fix: diffing should not fail if resource fail schema validation (#​19735) (@​alexmt)
• 42cc36a: fix: docs version regex changed (#​18756) (#​19353) (@​ft-jasong)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.11.7...v2.11.8

v2.11.7

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.7/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.7/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Other work

• 05edb2a: feat: verify rbac on each message and not just during handshake (@​pasha-codefresh)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.11.6...v2.11.7

v2.11.6

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.6/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• b980386: fix: cherry-pick #​18761 (v2.11) (#​19108) (@​blakepettersson)

Other work

• 540e3a5: Merge commit from fork (@​pasha-codefresh)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.11.5...v2.11.6

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.