Argo CD - v2.5.6

Security

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.5.6/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 21 contributions from 11 contributors (4 of them new) with 0 features and 6 bug fixes.

A special thanks goes to the 4 new contributors:
- Gaël Jourdan-Weil
- Matt Clegg
- Ryan Umstead
- yanyx

Bug fixes (6)

  • fix(redis): explicit bind to redis and sentinel for IPv4 clusters (#11388) (#11862)
  • fix: upgrade qs to avoid CVE-2022-24999
  • fix: web terminal namespace handler (#11891)
  • fix: web terminal outside argocd namespace (#11166) (#11400)
  • fix: ssa e2e tests failing after updating to kubectl 1.26 (#11753)
  • fix: sign container images by digest (#11151)

Documentation (7)

  • docs: note risks of secret-injection plugins (#11617)
  • docs: clarify project destination possibilities (#11706)
  • docs: correct SSO configuration URL in example configmap (#11720)
  • docs: Update example dockerfile (#11721)
  • docs: clarify that all labels must exist (#11693)
  • docs: update cosign docs (#11749)
  • docs: Document applications in any namespace (#10678)

Other (8)

  • chore: upgrade redis to 7.0.7 to avoid CVE-2022-3996 (#11925)
  • chore(deps): bump actions/cache from 3.2.0 to 3.2.2 (#11839)
  • chore(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 (#11894)
  • chore(deps): bump actions/cache from 3.0.11 to 3.2.0 (#11809)
  • chore: fix lint error (#11788)
  • chore: get image digest in seperate step (#11778)
  • chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#11697)
  • doc: correct kustomize demo path (#11762)

Details

date
Jan. 10, 2023, 8:14 p.m.
name
v2.5.6
type
Patch
👇
Register or login to:
  • 🔍View and search all Argo CD releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or