All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changes
This release includes 2 contributions from 1 contributors with 0 features and 0 bug fixes.
Security (1)
CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j)
Other (1)
chore: add dist to path to use our kustomize version (#12352)
chore: update redis to avoid CVE-2022-2097 (#10031)
chore: update haproxy to 2.0.29 for redis-ha (#10045)
v2.4.7 (2022-07-18)
Bug fixes
fix: Support files in argocd.argoproj.io/manifest-generate-paths annotation (#9908)
fix: terminal websocket write lock to avoid races (#10011)
fix: updated all a tags to Link tags in app summary (#9777)
fix: e2e test to use func from clusterauth instead creating one with old logic (#9989)
fix: add missing download CLI tool URL response for ppc64le, s390x (#9983)
Other
chore: upgrade parse-url to avoid SNYK-JS-PARSEURL-2936249 (#9826)
docs: use quotes to emphasize that ConfigMap value is a string (#9995)
docs: document directory app include/exclude fields (#9997)
docs: simplify Docker toolchain docs (#9966) (#10006)
docs: supported versions (#9876)
v2.4.6 (2022-07-12)
Features
feat: Treat connection reset as a retryable error (#9739)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot]
commented
1 year ago
Bumps github.com/argoproj/argo-cd/v2 from 2.2.12 to 2.6.2.
Release notes
Sourced from github.com/argoproj/argo-cd/v2's releases.
... (truncated)
Changelog
Sourced from github.com/argoproj/argo-cd/v2's changelog.
... (truncated)
Commits
6e02f8bBump version to 2.6.2e2b280cBump version to 2.6.274726cfMerge pull request from GHSA-3jfq-742w-xg8jd4a0c25chore: add dist to path to use our kustomize version (#12352)3f143c9Bump version to 2.6.17fadddcBump version to 2.6.1cac327cfix: sanitize repo creds in error messages (#12309) (#12320)acc554fBump version to 2.6.0f91b9f4Bump version to 2.6.0893569adocs: update config management plugin docs (#11690)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)