github.com/argoproj-labs/argocd-image-updater

What's Changed

• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 by @dependabot[bot] in #1619
• chore: test/ginkgo: bump image-updater from v1.1.1 to v1.2.0 by @dkarpele in #1628
• chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @dependabot[bot] in #1618
• chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @dependabot[bot] in #1617
• chore(deps): bump argo-cd from 3.3.8 to 3.3.9 by @chengfang in #1632
• chore(deps): bump argo-cd from 3.3.9 to 3.4.1, go from 1.25.9 to 1.26.0, golangci-lint from 2.5.0 to 2.12.2 by @chengfang in #1636
• chore(ginkgo): remove role and rolebinding creation by @dkarpele in #1642
• fix(webhook): normalize ghcr repository casing by @FerasMaali in #1639
• fix(api): set WriteBackConfig.Method as optional in API by @dkarpele in #1647
• fix: allow webhook traffic through NetworkPolicy (#1544) by @ystkfujii in #1633
• chore(deps): bump argo-cd from 3.4.1 to 3.4.2 by @chengfang in #1650
• chore(deps): bump registry-scanner from v1.2.0 to v1.2.1 by @dkarpele in #1655
• fix(test): correct assert.Equal arg order and wrong webhook type in quay test by @immanuwell in #1663
• ci: add unit-tests flag to Codecov coverage uploads by @AdamSaleh in #1665
• chore(deps): bump argocd from 3.4.2 to 3.4.3 by @chengfang in #1671
• fix(webhook): align standalone webhook HTTP/2 hardening by @doup2001 in #1588
• chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 by @dependabot[bot] in #1670
• chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1 by @dependabot[bot] in #1666
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.29.0 by @dependabot[bot] in #1668
• chore(deps): bump image-updater from 1.2.0 to 1.2.1, and argocd-operator from 0.17 to 0.18 by @chengfang in #1674
• feat: support SourceHydrator applications for image updates by @julianderks in #1475
• chore(deps): bump github.com/distribution/distribution/v3 from 3.0.0-20230722181636-7b502560cad4 to 3.1.1 by @dkarpele in #1675
• feat(webhook): enforce mandatory webhook secret configuration by @dkarpele in #1678
• fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back by @chengfang in #1679
• feat(webhook): add Azure Container Registry (ACR) webhook handler by @ruturaj220 in #1681
• fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL by @chengfang in #1683
• ci: run CI tests on push to master by @AdamSaleh in #1676
• chore(deps): bump argocd from 3.4.3 to 3.4.4 by @chengfang in #1693
• chore(deps): bump ImageUpdater from 1.2.1 to 1.2.2 by @chengfang in #1705
• Add blank lines preservation on git writeback by @rvandernoort in #1702
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1711
• chore(deps): bump actions/cache from 5 to 6 by @dependabot[bot] in #1710
• chore(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #1709
• chore(deps): bump alpine from 3.23 to 3.24 by @dependabot[bot] in #1708
• chore(ci): add allow-unsafe-pr-checkout: true to actions/checkout@v7 to opt in to allow checkout of fork PRs by @chengfang in #1719
• fix(write-back): resolve correct git source for implicit kustomize in multi-source apps by @rvandernoort in #1703
• feat: implement image signature verification by @dkarpele in #1706
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 by @dependabot[bot] in #1714
• chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #1716
• chore(deps): bump github.com/onsi/gomega from 1.40.0 to 1.42.1 by @dependabot[bot] in #1718
• chore(e2e): install cosign to gh actions by @dkarpele in #1723
• feat: image verification to work with both modern registry signature lookup and legacy signature formats; test(e2e): image signature verification by @dkarpele in #1722
• feat(argocd): support Plugin source type with git write-back by @flobz in #1707
• chore(deps): bump argocd from 3.4.4 to 3.4.5 by @chengfang in #1726
• feat(pr): Avoid creating duplicate PRs for apps sharing the same write-back-target and updates by @chengfang in #1724
• docs: add chansuke to OWNERS reviewers by @chansuke in #1731
• fix: reject cross-namespace secret references in git write-back by @dkarpele in #1732
• fix: reject cross-namespace secret references in commonUpdateSettings.pullSecret by @dkarpele in #1733
• feat: preserve YAML formatting when writing back to Helm values files by @grahamalama in #1734
• feat(git): sign write-back commits via GitHub API with GitHub App creds by @josmo in #1728
• chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #1736
• chore(deps): bump github.com/google/cel-go from 0.27.0 to 0.29.0 by @dependabot[bot] in #1737
• feat(pr): skip git clone, checkout, commit and PR/MR creation if it already exists in the remote github or gitlab by @chengfang in #1738
• fix(docs): use current values of updateStrategy (semver, newest-build, digest and alphabetical) and de-emphasize deprecated values by @chengfang in #1740
• fix(log): pass the context to git commands by @dkarpele in #1742
• feat(plugin): support applications of type plugin and plugin env variables by @chengfang in #1741
• chore(deps): bump argocd from 3.4.5 to 3.4.6 by @chengfang in #1744
• chore(deps): bump github/codeql-action from 4 to 4.37.3 by @dependabot[bot] in #1755
• chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #1756
• chore(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.32.0 by @dependabot[bot] in #1751
• chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in #1749
• chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 by @dependabot[bot] in #1748
• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #1752
• chore(deps): bump github.com/go-git/go-git/v5 from 5.14.0 to 5.19.2 by @dependabot[bot] in #1750
• chore(ci): change to run CodeQL on cron schedule only by @chengfang in #1759
• feat: support custom CA certificates for registries by @w3lld1 in #1743
• chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.1 in /registry-scanner by @dependabot[bot] in #1754
• fix(semver): exclude pre-release tags when no semver constraint is set by @pujitha24 in #1758
• chore(deps): bump argocd from 3.4.6 to 3.5.0 by @chengfang in #1761
• chore(doc): remove obsolete breaking change labels by @dkarpele in #1762
• fix(digest): pick the right live image when multiple containers share the same image by @C4tWithShell in #1757
• test: add regression coverage for force-update image with empty registry tags by @pujitha24 in #1764
• chore(go-fix): modernize code with go fix command by @chengfang in #1765
• fix(kustomize): match images by alias to prevent cross-alias collisions by @pujitha24 in #1763
• fix(argocd): retain yaml document start if exists by @stphnlwlsh in #1767
• fix(helm): improve getHelmParamNames func to return defaults for image-name and image-tag param names by @chengfang in #1771
• chore(deps): bump argocd from 3.5.0 to 3.5.1 by @chengfang in #1772
• fix(git-writeback): only commit image-managed Helm parameters to .argocd-source override file by @pujitha24 in #1770
• fix(kustomize): reject mis-configured write-back target without kustomization prefix that is a standard kustomization.yaml by @pujitha24 in #1766
• chore(deps): bump registry-scanner from 1.2.1 to 1.3.0 by @chengfang in #1776
• Release 1.3.0 by @chengfang in #1777

New Contributors

• @FerasMaali made their first contribution in #1639
• @ystkfujii made their first contribution in #1633
• @immanuwell made their first contribution in #1663
• @AdamSaleh made their first contribution in #1665
• @doup2001 made their first contribution in #1588
• @julianderks made their first contribution in #1475
• @ruturaj220 made their first contribution in #1681
• @rvandernoort made their first contribution in #1702
• @flobz made their first contribution in #1707
• @josmo made their first contribution in #1728
• @w3lld1 made their first contribution in #1743
• @pujitha24 made their first contribution in #1758
• @C4tWithShell made their first contribution in #1757
• @stphnlwlsh made their first contribution in #1767

Full Changelog: v1.2.2...v1.3.0

What's Changed

• chore(deps): bump argocd from 3.4.2 to 3.4.3 by @chengfang in #1684
• fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back (#1679) by @chengfang in #1685
• fix(test): correct assert.Equal arg order and wrong webhook type in quay test (#1663) by @chengfang in #1687
• fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL (#1683) by @chengfang in #1689
• chore(deps): bump argocd from 3.4.3 to 3.4.4 by @chengfang in #1694
• Release 1.2.2 by @chengfang in #1700

Full Changelog: v1.2.1...v1.2.2

What's Changed

• chore(deps): bump argo-cd from 3.3.8 to 3.3.9 by @chengfang in #1631
• chore(deps): bump argo-cd from 3.3.9 to 3.4.2, go from 1.25.9 to 1.26.0, golangci-lint from 2.5.0 to 2.12.2 (#1636) by @chengfang in #1638
• chore(deps): bump registry-scanner from v1.2.0 to v1.2.1 by @dkarpele in #1656
• Release 1.2.1 by @dkarpele in #1658

Full Changelog: v1.2.0...v1.2.1

What's Changed

• feat(webhook): add Aliyun Container Registry (ACR) webhook handler by @jincong8973 in #1418
• docs: fix callout indents by @sh-cho in #1503
• chore: update argocd-image-updater from v1.1.0 to v1.1.1 in ginkgo module by @dkarpele in #1513
• fix: remove command override to preserve tini entrypoint from Dockerfile by @siner308 in #1520
• feat(status): implement ImageUpdater CR status logics by @chengfang in #1501
• docs(status): add docs for ImageUpdater CR status subresource by @chengfang in #1533
• tests(e2e): add e2e tests to verify status subresource by @chengfang in #1534
• fix: don't write empty tag in helm values file by @Resousse in #1531
• tests(e2e): add e2e tests to verify status subresource for CRs using legacy annotations by @chengfang in #1536
• feat: Implement metrics for images by @dkarpele in #1532
• chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1528
• docs: improve documentation, bump mkdocs 1.3.0 to 1.6.1 mkdocs-material 7.1.8 to 9.7.1 by @sh-cho in #1504
• chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 in /test/ginkgo by @dependabot[bot] in #1517
• chore(deps): bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0 by @dependabot[bot] in #1530
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.21.0 to 0.21.1 by @dependabot[bot] in #1526
• chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.3.0 to 3.3.2 by @dependabot[bot] in #1524
• chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by @dependabot[bot] in #1516
• fix: limit webhook request body size to prevent resource exhaustion by @mark-liu in #1519
• fix: don't write empty tag when registry returns no tags by @mark-liu in #1505
• test: e2e test for ArgoCD Application in Any Namespace by @dkarpele in #1538
• fix: getCredsFromSecret ignores GitHub Enterprise base URL by @mark-liu in #1510
• fix: resolve unauthorized error when listing ACR tags with scope map token by @RyuKwanKon in #1515
• fix: add platform-specific functions for process management syscall by @chengfang in #1541
• Add Support for Fetching Docker/OCI Image Labels by @SajeelKhan in #1407
• fix(ci): fix workflow build-push-images.yaml to get the digest for single-platform images by @chengfang in #1546
• chore(deps): bump argo-cd from 3.3.2 to 3.3.4 by @chengfang in #1545
• fix: refresh registry creds if password/token changes before credsexpire by @dkarpele in #1540
• feat: Add pull request/merge request creation support for Git write-back operations. API. by @dkarpele in #1551
• feat: commit to custom branch in PR/MR mode by @dkarpele in #1553
• docs: Add ability to toggle dark-mode by @dkarpele in #1552
• feat(tls): configure and support required webhook tls server settings by @chengfang in #1555
• chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.3.4 to 3.3.6 by @dependabot[bot] in #1562
• chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 by @dependabot[bot] in #1568
• chore(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #1565
• chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #1567
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1566
• chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.49.0 by @dependabot[bot] in #1563
• chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @dependabot[bot] in #1564
• chore(deps): bump pygments from 2.19.2 to 2.20.0 in /docs by @dependabot[bot] in #1558
• docs(tls): update docs for webhook server tls settings and configurations by @chengfang in #1569
• feat: create PR for GitHub by @dkarpele in #1570
• feat(config): default Image Updater to namespace scope by @dkarpele in #1576
• test: add tests to ext/git module by @dkarpele in #1586
• doc: documentation for PR/MR workflow by @dkarpele in #1583
• chore: remove .spec.namespace from the API by @dkarpele in #1590
• fix: GetImagesAndAliasesFromApplication returns only the images that are live in the cluster by @dkarpele in #1591
• feat(pr): support creating merge request to gitlab by @chengfang in #1592
• test(e2e): test different installation modes by @dkarpele in #1602
• chore(deps): bump argocd from 3.3.6 to 3.3.8 by @chengfang in #1612
• fix(test): add --no-gpg-sign when creating the unsigned commit to prevent the global git config commit.gpgsign=true by @chengfang in #1611
• test(e2e): create pull_request_target for GH PR workflow by @dkarpele in #1610
• test(e2e): GitHub PR by @dkarpele in #1609
• chore(deps): bump go version from 1.25.5 to 1.25.9 by @chengfang in #1615
• chore: bump registry-scanner from v1.1.1 to v1.2.0 by @dkarpele in #1622
• Release 1.2.0 by @dkarpele in #1625

New Contributors

• @jincong8973 made their first contribution in #1418
• @sh-cho made their first contribution in #1503
• @siner308 made their first contribution in #1520
• @Resousse made their first contribution in #1531
• @mark-liu made their first contribution in #1519
• @RyuKwanKon made their first contribution in #1515
• @SajeelKhan made their first contribution in #1407

Full Changelog: v1.1.1...v1.2.0

What's Changed

• chore(deps): bump argocd from 3.3.9 to 3.3.11 by @chengfang in #1688
• Reapply "fix: implement git command process cleanup and use context-aware git command execution (#1477)"; fix: add platform-specific functions for process management syscall (#1541) by @chengfang in #1690
• fix(git-write): Thread/Goroutine leak due to un-reaped informer factories during Git write-back (#1679) (#1685) by @chengfang in #1691
• chore(deps): bump argocd from 3.3.11 to 3.3.12 by @chengfang in #1692
• fix(test): correct assert.Equal arg order and wrong webhook type in quay test (#1663) (#1687); fix(webhook-quay): Self-hosted Quay images redirect to quay.io, not self-hosted URL (#1683) (#1689) by @chengfang in #1697
• Release 1.1.3 by @chengfang in #1698

Full Changelog: v1.1.2...v1.1.3

What's Changed

• fix(ci): fix workflow build-push-images.yaml to get the digest for single-platform images (#1546) by @chengfang in #1604
• chore(deps): bump argocd from 3.3.0 to 3.3.8 by @chengfang in #1613
• chore(deps): bump go version from 1.25.5 to 1.25.9 by @chengfang in #1616
• chore(deps): bump argo-cd from 3.3.8 to 3.3.9 by @chengfang in #1630
• Release 1.1.2 by @chengfang in #1634

Full Changelog: v1.1.1...v1.1.2