ArgoCD

v3.4.5 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 17d GitOps

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

argo argo-cd ci-cd devops docker gitops

+5 more

helm jsonnet kubernetes kustomize pipeline

Affected surfaces

auth deps

Summary

AI summary

Updates Quick Start, Bug fixes, and Dependency updates across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Dependency	Low	Updates Ubuntu base image to version 26.04 LTS. Updates Ubuntu base image to version 26.04 LTS. Source: llm_adapter@2026-07-16 Confidence: high	—
Dependency	Low	Bumps golang.org/x/crypto to version 0.53.0. Bumps golang.org/x/crypto to version 0.53.0. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes auto-sync skipping when newer commit arrives during sync with manifest-generate-paths. Fixes auto-sync skipping when newer commit arrives during sync with manifest-generate-paths. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes incorrect display of deleted resources in the UI. Fixes incorrect display of deleted resources in the UI. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Prevents clobbering of non‑ignored fields on "replace" operations. Prevents clobbering of non‑ignored fields on "replace" operations. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes regression of Dex config environment variable substitution. Fixes regression of Dex config environment variable substitution. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Low	Honors depth of referenced source instead of primary source in reposerver. Honors depth of referenced source instead of primary source in reposerver. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Low	Prevents auth reconcile with SSA (SSA) from running. Prevents auth reconcile with SSA (SSA) from running. Source: granite4.1:30b@2026-07-16-audit Confidence: low	—

Full changelog

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

e77e4b645cc1ad28b1af74931d8810c514fa75e7: fix(reposerver): honor depth of referenced source instead of primary source (cherry-pick #28339 for 3.4) (#28341) (@alexandresavicki)
63e67d5e7f502f85b69cd52d6d56e1123b087992: fix(ssa): do not run auth reconcile with SSA (cherry pick of #27624 and #27601 to 3.4) (#28265) (@Mangaal)
240390732e7b593a53a237c4f149426e7268f295: fix: auto-sync skipped when newer commit arrives during sync with manifest-generate-paths (#27875) (cherry-pick #28227 for 3.4) (#28331) (@argo-cd-cherry-pick-bot[bot])
2d18587a4c36d4676dd0514bc4a3c5e0cc8b2ed4: fix: deleted resource are incorrectly shown in UI (cherry-pick #28322 for 3.4) (#28337) (@argo-cd-cherry-pick-bot[bot])
a82e158db8a56037d8e8b5085d188abd9fba12f0: fix: don't clobber non-ignored fields on "replace" (cherry-pick #27136 for 3.4) (#28507) (@argo-cd-cherry-pick-bot[bot])
d4c8f1c3c724d4d71c1f4ddb6b255ab36d3bef4a: fix: fixes a regression of dex config env vars substituion - Cherry pick of #28369 in 3.4 (#28411) (@ppapapetrou76)

Dependency updates

8c7ece50a4dfd731d5e10bedf3a3e692808b3d23: chore(deps): bump golang.org/x/crypto to 0.53.0 (release-3.4) (#28375) (@nmirasch)
a8f245b7a0a9b4b9ca8538038b521da29b5932f6: chore(deps): update Ubuntu base image to 26.04 LTS (3.4) (#28430) (@suii2210)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.4...v3.4.5

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track ArgoCD

Get notified when new releases ship.

About ArgoCD

Declarative Continuous Deployment for Kubernetes

All releases →