chore(deps): update dependency argoproj/argo-cd to v3.3.7 #5999

Merged
renovate-bot merged 1 commits from renovate/unified-argo-cd into main 2026-04-16 20:03:41 +00:00
Collaborator

This PR contains the following updates:

Package Update Change
argoproj/argo-cd patch 3.3.63.3.7

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v3.3.7

Compare Source

Quick Start

[!IMPORTANT]
A potential bug with application reconciliation has been identified in this release. The application controller may fail to refresh applications, causing an application to not sync / show resources as out of sync.

Issue: #​27344 – Application controller not refreshing applications

Non-HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/install.yaml
HA:
kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes
Dependency updates
Other work

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.6...v3.3.7


Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [argoproj/argo-cd](https://github.com/argoproj/argo-cd) | patch | `3.3.6` → `3.3.7` | --- ### Release Notes <details> <summary>argoproj/argo-cd (argoproj/argo-cd)</summary> ### [`v3.3.7`](https://github.com/argoproj/argo-cd/releases/tag/v3.3.7) [Compare Source](https://github.com/argoproj/argo-cd/compare/v3.3.6...v3.3.7) #### Quick Start > \[!IMPORTANT] > A potential bug with application reconciliation has been identified in this release. The application controller may fail to refresh applications, causing an application to not sync / show resources as out of sync. > > **Issue:** [#&#8203;27344 – Application controller not refreshing applications](https://github.com/argoproj/argo-cd/issues/27344) ##### Non-HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/install.yaml ``` ##### HA: ```shell kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/ha/install.yaml ``` #### Release Signatures and Provenance All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the [documentation](https://argo-cd.readthedocs.io/en/stable/operator-manual/signed-release-assets) on how to verify. #### Release Notes Blog Post For a detailed breakdown of the key changes and improvements in this release, check out the [official blog post](https://blog.argoproj.io/argo-cd-v3-0-release-candidate-a0b933f4e58f) #### Upgrading If upgrading from a different minor version, be sure to read the [upgrading](https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/overview/) documentation. #### Changelog ##### Bug fixes - [`ea51bd8`](https://github.com/argoproj/argo-cd/commit/ea51bd8047e5ec171ea753bcce4008064b7b6393): \[release-3.3] fix: improve perf: switch parentUIDToChildren to map of sets, remove cache rebuild ([#&#8203;26863](https://github.com/argoproj/argo-cd/issues/26863)) ([#&#8203;27108](https://github.com/argoproj/argo-cd/issues/27108)) ([@&#8203;jcogilvie](https://github.com/jcogilvie)) - [`4d2f261`](https://github.com/argoproj/argo-cd/commit/4d2f2613d8f12fb38064c6f05a9f4ea6ba892a01): fix(ci): run yarn install with --frozen-lockfile (cherry-pick [#&#8203;27099](https://github.com/argoproj/argo-cd/issues/27099) for 3.3) ([#&#8203;27351](https://github.com/argoproj/argo-cd/issues/27351)) ([@&#8203;dudinea](https://github.com/dudinea)) - [`671efff`](https://github.com/argoproj/argo-cd/commit/671efff31dc8a2c2726f0066ea7b02e7e64efa71): fix(controller): reduce secret deepcopies and deserialization ([#&#8203;27049](https://github.com/argoproj/argo-cd/issues/27049)) (cherry-pick release-3.3) ([#&#8203;27129](https://github.com/argoproj/argo-cd/issues/27129)) ([@&#8203;rumstead](https://github.com/rumstead)) - [`a77c150`](https://github.com/argoproj/argo-cd/commit/a77c1501fe213602bfcb7a7d8da2657c783026e6): fix(docs): Fix manifest path in Source Hydrator docs (cherry-pick [#&#8203;27123](https://github.com/argoproj/argo-cd/issues/27123) for 3.3) ([#&#8203;27167](https://github.com/argoproj/argo-cd/issues/27167)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`f0b924f`](https://github.com/argoproj/argo-cd/commit/f0b924f0b01633b538e054b09ef6efb062faa10b): fix(server): Ensure OIDC config is refreshed at server restart (cherry-pick [#&#8203;26913](https://github.com/argoproj/argo-cd/issues/26913) for 3.3) ([#&#8203;27114](https://github.com/argoproj/argo-cd/issues/27114)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`7eedc7a`](https://github.com/argoproj/argo-cd/commit/7eedc7ac4e36ef9bc52a32f100fc65a861c3bb75): fix(ui): OCI revision metadata never renders due to conflicting guard clause ([#&#8203;26948](https://github.com/argoproj/argo-cd/issues/26948)) (cherry-pick [#&#8203;27097](https://github.com/argoproj/argo-cd/issues/27097) for 3.3) ([#&#8203;27365](https://github.com/argoproj/argo-cd/issues/27365)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`b0e0415`](https://github.com/argoproj/argo-cd/commit/b0e04154cf1fcc5bb6f892082665bb1c1135dd48): fix(ui): handle 401 error in stream (cherry-pick [#&#8203;26917](https://github.com/argoproj/argo-cd/issues/26917) for 3.3) ([#&#8203;27227](https://github.com/argoproj/argo-cd/issues/27227)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`3b12b2e`](https://github.com/argoproj/argo-cd/commit/3b12b2e0d537308703bd84bbc0a65ac9051936e2): fix: Add X-Frame-Options and CSP headers to Swagger UI endpoints (cherry-pick [#&#8203;26521](https://github.com/argoproj/argo-cd/issues/26521) for 3.3) ([#&#8203;27154](https://github.com/argoproj/argo-cd/issues/27154)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`4939e1f`](https://github.com/argoproj/argo-cd/commit/4939e1fb84beb75286e0a1eb2394f32e3c39e610): fix: force attempt http2 with custom tls config (cherry-pick [#&#8203;26976](https://github.com/argoproj/argo-cd/issues/26976) for 3.3) ([#&#8203;27358](https://github.com/argoproj/argo-cd/issues/27358)) ([@&#8203;SamyDjemai](https://github.com/SamyDjemai)) - [`e372a7f`](https://github.com/argoproj/argo-cd/commit/e372a7f09c8e5892f6cea13ab73ef1b4aa40d730): fix: pass repo.insecure flag to `helm dependency build` (cherry-pick [#&#8203;27078](https://github.com/argoproj/argo-cd/issues/27078) for 3.3) ([#&#8203;27083](https://github.com/argoproj/argo-cd/issues/27083)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`99e88e0`](https://github.com/argoproj/argo-cd/commit/99e88e0963b8975cde7fc6c1cda302cbdac5f6d7): fix: prevent automatic refreshes from informer resync and status updates (cherry-pick [#&#8203;25290](https://github.com/argoproj/argo-cd/issues/25290) for 3.3) ([#&#8203;27230](https://github.com/argoproj/argo-cd/issues/27230)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`2512512`](https://github.com/argoproj/argo-cd/commit/2512512b0cd9fc15aff334c60c89cd14d7e5f87c): fix: trigger app sync on app-set spec change (cherry-pick [#&#8203;26811](https://github.com/argoproj/argo-cd/issues/26811) for 3.3) ([#&#8203;27130](https://github.com/argoproj/argo-cd/issues/27130)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`e451591`](https://github.com/argoproj/argo-cd/commit/e451591448ac3897d54fdeed39338b1d78f01e07): fix: use force flag in copyutil symlink to prevent repo-server crashes (cherry-pick [#&#8203;26613](https://github.com/argoproj/argo-cd/issues/26613) for 3.3) ([#&#8203;27057](https://github.com/argoproj/argo-cd/issues/27057)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) - [`b948ff0`](https://github.com/argoproj/argo-cd/commit/b948ff074dc61fb0ccd80cab0caf1e66b59e59c3): fix: use unique names for initial commits (cherry-pick [#&#8203;27171](https://github.com/argoproj/argo-cd/issues/27171) for 3.3) ([#&#8203;27197](https://github.com/argoproj/argo-cd/issues/27197)) ([@&#8203;argo-cd-cherry-pick-bot](https://github.com/argo-cd-cherry-pick-bot)\[bot]) ##### Dependency updates - [`899c5e8`](https://github.com/argoproj/argo-cd/commit/899c5e819c7f95f5907a449c8dea878c85265ac7): chore(deps): bump fast-xml-parser from 4.5.3 to 4.5.6 in /ui - 3.3 ([#&#8203;27360](https://github.com/argoproj/argo-cd/issues/27360)) ([@&#8203;keithchong](https://github.com/keithchong)) - [`7fd134a`](https://github.com/argoproj/argo-cd/commit/7fd134a040307259745a0d56ac3844a5087a362f): chore(deps): bump go-jose from 4.1.3 to 4.1.4 (cherry-pick [#&#8203;27101](https://github.com/argoproj/argo-cd/issues/27101) for… ([#&#8203;27208](https://github.com/argoproj/argo-cd/issues/27208)) ([@&#8203;blakepettersson](https://github.com/blakepettersson)) - [`2daefc0`](https://github.com/argoproj/argo-cd/commit/2daefc045249285ea449095f32f676d4233a24a2): chore(deps): update notifications-engine dependency in release-3.3 to v0.5.1-0.20260316232552-d27ba0152c1c ([#&#8203;27093](https://github.com/argoproj/argo-cd/issues/27093)) ([@&#8203;pasha-codefresh](https://github.com/pasha-codefresh)) ##### Other work - [`45cbc84`](https://github.com/argoproj/argo-cd/commit/45cbc8421ca30a9777592fcf92bf9ac0f8dd40a1): test(e2e): add e2e tests for reverse deletionOrder when progressive sync enabled (cherry-pick [#&#8203;26673](https://github.com/argoproj/argo-cd/issues/26673) for 3.3) ([#&#8203;27340](https://github.com/argoproj/argo-cd/issues/27340)) ([@&#8203;ranakan19](https://github.com/ranakan19)) **Full Changelog**: <https://github.com/argoproj/argo-cd/compare/v3.3.6...v3.3.7> <a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" ></a> </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Chicago) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjUuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEyNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJnaXRodWItcmVsZWFzZXMiXX0=-->
renovate-bot added the automerge label 2026-04-16 20:03:28 +00:00
renovate-bot added 1 commit 2026-04-16 20:03:33 +00:00
chore(deps): update dependency argoproj/argo-cd to v3.3.7
Some checks are pending
renovate/stability-days Updates have not met minimum release age requirement
lint-test-helm / lint-helm (pull_request) Successful in 38s
lint-test-helm / validate-kubeconform (pull_request) Has been skipped
render-manifests / render-manifests (pull_request) Successful in 1m45s
b28a348679
renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-04-16 20:03:36 +00:00
renovate-bot merged commit c8517dd1c2 into main 2026-04-16 20:03:41 +00:00
renovate-bot deleted branch renovate/unified-argo-cd 2026-04-16 20:03:45 +00:00
Sign in to join this conversation.