deps: update dependency argoproj/argo-cd to v2.6.7

[renovate]

This PR contains the following updates:

Package	Update	Change
argoproj/argo-cd	patch	v2.6.6 -> v2.6.7

---

Release Notes

argoproj/argo-cd

v2.6.7

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.7/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.6.7/manifests/ha/install.yaml

Breaking changes

As part of the fix for GHSA-2q5c-qw9c-fmvq, the API will now return "Unauthorized" instead of "Not found" if an Application does not exist. This change prevents leaking the existence or non-existence of Applications to unauthorized parties.

This change may break applications which depend on "Not found" responses from the Argo CD API's application endpoints.

Workarounds and potential long-term solutions will be discussed on https://github.com/argoproj/argo-cd/issues/13000.

The argocd app create CLI command for versions >= 2.5.0-rc1 and before this security patch is one such application which was affected. (See upgrade notes for details on that issue.)

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 1 contributions from 1 contributors with 0 features and 0 bug fixes.

Security (1)

• MODERATE: Authenticated but unauthorized users may enumerate Application names via the API (GHSA-2q5c-qw9c-fmvq)

---

Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Vienna, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov]

Codecov Report

Merging #1121 (c0b303d) into main (559acee) will not change coverage.
The diff coverage is n/a.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1121   +/-   ##
=======================================
  Coverage   59.05%   59.05%           
=======================================
  Files         126      126           
  Lines       10023    10023           
=======================================
  Hits         5919     5919           
  Misses       3888     3888           
  Partials      216      216           

Flag	Coverage Δ
certificate-operator	64.15% <ø> (ø)
component-tests	60.61% <ø> (ø)
lifecycle-operator	78.52% <ø> (ø)
metrics-operator	77.35% <ø> (ø)
scheduler	21.17% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[thschue]

lgtm