v2.9.4

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.9.4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues

The security patch causes major issues in the UI (many UI actions simply fail). A fix will be available in 2.9.5.

Changes

This release fixes a security issue: GHSA-92mw-q256-5vwg

🚨 Important: The security fix includes a breaking API change. Please read the GHSA before upgrading! 🚨

Bug fixes (7)

• fix: enforce content type header for API requests (#16860) (Cherry-pick release-2.9 ) (#16878)
• fix: add list permission deployments (#16785) (#16804)
• fix(ui):Fixed log horizontal scroll for issue #16411 (#16727) (#16761)
• fix(action): Add missing owner refs and annotation to create-job action (#16607) (#16608)
• fix(grpcproxy): add missing GRPCKeepAliveEnforcementMinimum (#15708) (#16576)
• fix(appset): don't emit k8s events for unchanged apps, log at debug (#16562)
• fix(appset): Don't use revision cache when reconciling after webhook (#16062) (#16241) (#16536)

Documentation (1)

• docs: Fix format issue in rbac.md (#16521) (#16538)

Other (3)

• chore(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.11.0 (#16912)
• Added missing 'alias:' prefix for repository name as described here: (#15902) (#16535)
• chore: upgrade k8s client from v0.24.2 to v0.24.17 (#16554)