github.com/argoproj-labs/argocd-operator

Releases

1. ▸▾v0.18.1-0.20260624032346-7f9de9404cd824 Jun 2026pre-release

   Nothing published for this version

2. ▸▾v0.18.1-0.20260623132437-a55bef98e6b023 Jun 2026pre-release

   Nothing published for this version

3. ▸▾v0.18.029 May 2026Security

   [release-0.18] fix: CVE-2026-33186 gRPC-Go auth bypass (HTTP/2 path validation) by @Rizwana777 in #2153

   What's Changed

   • chore(deps): bump actions/upload-artifact from 4 to 5 by @dependabot[bot] in #1917
   • Documentation for support of notifications in any namespace by @nmirasch in #1938
   • fix: Add rbac & tests for notifications in any namespace by @nmirasch in #1940
   • chore: reduce Node resource pressure of E2E tests by @jgwest in #1946
   • fix: namespace validation by @jparsai in #1945
   • chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #1941
   • chore: add E2E test check for available GH runner storage by @jgwest in #1951
   • fix: namespace validation for notification by @svghadi in #1955
   • fix: namespace validation for sourcenamespace by @jparsai in #1956
   • fix: additional checks for appsets in any namespace field by @jgwest in #1953
   • chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in #1944
   • chore: don't output 'df -k' command string by @jgwest in #1954
   • fix: verify appset source namespaces cleanup logic is applied only to ArgoCD CR which owns the namespace by @jgwest in #1970
   • fix: Align image updater role binding code by @dkarpele in #1957
   • chore: fix E2E test flake in 1-015-validate-sso-status by @jgwest in #1975
   • fix: increase timeout on 1-020 E2E test and add debug hook by @jgwest in #1977
   • fix: verify argocd instance matches namespace label on notifications … by @nmirasch in #1978
   • chore: upgrade to Argo CD v3.2.1 and Go to 1.25 by @jgwest in #1989
   • chore(deps): bump pymdown-extensions from 10.2.1 to 10.16.1 in /docs by @dependabot[bot] in #1987
   • chore(deps): bump ubi8/ubi-minimal from 951ee3c to 7b6b45d in /build by @dependabot[bot] in #1969
   • chore(deps): bump ubi8/ubi-minimal from 7b6b45d to 2139859 in /build by @dependabot[bot] in #1992
   • chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #1982
   • Fix: Auto-scale redis-ha-haproxy deployment replicas during operator … by @nmirasch in #1991
   • fix: added mapping of timeout.reconciliation to env var by @alkakumari016 in #1994
   • chore: Update python and ubuntu version in readthedocs config by @svghadi in #2001
   • chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.2.1 to 3.2.3 by @dependabot[bot] in #2007
   • chore(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 by @dependabot[bot] in #2009
   • chore(deps): bump golang.org/x/mod from 0.29.0 to 0.31.0 by @dependabot[bot] in #2008
   • chore(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.8.3 in /tests/auxiliary/smtplistener by @dependabot[bot] in #1968
   • chore: add e2e tests for agent by @jparsai in #1952
   • chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #1983
   • chore: fix docs build by @svghadi in #2018
   • Add Wildcards support in ApplicationSet Source Namespaces by @nmirasch in #1988
   • chore: enable debug on 1-012 E2E test and increase wait timeout by @jgwest in #2021
   • doc: apps-in-any-namespace configuration by @Mangaal in #2022
   • chore(deps): bump ubi8/ubi-minimal from 2139859 to 9f50067 in /build by @dependabot[bot] in #2025
   • chore(deps): bump github.com/onsi/gomega from 1.36.2 to 1.39.0 by @dependabot[bot] in #2016
   • fix: Modify ownerReference from v1apha1 to v1beta1 during upgrade in configmaps by @akhilnittala in #2000
   • chore: add e2e tests for agent namespace validation by @jparsai in #2013
   • fix(makefile): Improve performance of make lint by @olivergondza in #2033
   • feat: Validation webhook to reject invalid SSO configs in ArgoCD CR by @akhilnittala in #2032
   • chore: Sync 0.14.1 and 0.17.0 released files by @svghadi in #2029
   • chore: synchronize E2E tests with downstream by @jgwest in #2035
   • fix: restoring tracking labels for cleaning up of orphaned roles and rolebindings by @akhilnittala in #2017
   • fix(api): Drop the trailing ' from spec display names by @olivergondza in #2044
   • chore: update to Argo CD v3.3.0 by @jgwest in #2051
   • chore(github): Do not propose major/minor dependabot upgrades for image-updater by @olivergondza in #2052
   • chore: log when Route status causes ArgoCD CR '.status.phase' to be pending by @jgwest in #2046
   • chore(ImageUpdater): update to version 1.1.0 by @dkarpele in #2055
   • chore: add redis proxy test to argocd-agent E2E tests by @jgwest in #2057
   • chore(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.5 by @dependabot[bot] in #2060
   • chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @dependabot[bot] in #2041
   • chore: update to latest released argocd-agent version v0.6.0 by @jgwest in #2061
   • chore(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 by @dependabot[bot] in #2064
   • Added policyRules to applicationSet clusterRole similar to the upstream by @alkakumari016 in #2063
   • feat(repo-server): Declare custom trust certs for repo-server and plugins by @olivergondza in #1876
   • feat:Skip OpenshiftDexConfig when OpenShift Cluster Authentication is based on OIDC Provider by @akhilnittala in #2073
   • test: Unit test cases to Skip OpenshiftDexConfig when OpenShift Cluster Authentication is based on OIDC Provider by @akhilnittala in #2077
   • fix(repo-server): Extend wait time for tests by @olivergondza in #2081
   • chore: Drop unneeded nolint annotations by @olivergondza in #2074
   • add network policy for argocd component by @anandrkskd in #2049
   • Deprecate prometheus CR by @Rizwana777 in #2054
   • upgrade argocd-image-updater from 1.1.0 to 1.1.1 by @chengfang in #2088
   • chore: update to argocd-agent v0.7.0 by @jgwest in #2096
   • chore: add argo-cd agent resource proxy E2E test by @jgwest in #2090
   • add networkPolicy for argocd-agent by @anandrkskd in #2091
   • fix(tests): Make sure the change is verified where it is induced by @olivergondza in #2093
   • chore: Bump Argo CD to 3.3.2 by @svghadi in #2110
   • [release-0.18] fix: CVE-2026-33186 gRPC-Go auth bypass (HTTP/2 path validation) by @Rizwana777 in #2153
   • fix: restore serving-cert annotation when tls termination is reencrypt that was stripped in older versions by @alkakumari016 in #2170
   • chore(deps): bump ImageUpdater from 1.1.1 to 1.1.2, and argo-cd from 3.3.2 to 3.3.9 by @chengfang in #2186
   • fix: dex copyutil initcontainer update of dex deployment by @Rizwana777 in #2199
   • fix: remove default true in CRD for network-policy enabled field (#2198) by @anandrkskd in #2202
   • chore: Bump argocd to 3.3.10 by @svghadi in #2205
   • chore: release 0.18.0 by @akhilnittala in #2188

   Full Changelog: v0.17.0...v0.18.0