Argo Workflows - v3.5.6
Security
(2024-04-19)
- 200f4d1e5 fix: don't load entire archived workflow into memory in list APIs (#12912)
- fe5c6128c fix(ui): default to
main
container name in event source logs API call (#12939) - 06e6a0df7 fix(build): close
pkg/apiclient/_.secondary.swagger.json
(#12942) - 909fdaa98 fix: correct order in artifactGC error log message (#12935)
- ab7bee7b0 fix: workflows that are retrying should not be deleted (Fixes #12636) (#12905)
- 9c2581ad0 fix: change fatal to panic. (#12931)
- 01f843828 fix: Correct log level for agent containers (#12929)
- 30f2e0d93 fix: DAG with continueOn in error after retry. Fixes: #11395 (#12817)
- 1c1f43313 fix: use multipart upload method to put files larger than 5Gi to OSS. Fixes #12877 (#12897)
- 8c9a85761 fix: remove completed taskset status before update workflow. Fixes: #12832 (#12835)
- ce7cad34b fix: make sure Finalizers has chance to be removed. Fixes: #12836 (#12831)
- 5d03f838c fix(test): wait enough time to Trigger Running Hook. Fixes: #12844 (#12855)
- 3d0648893 fix: filter hook node to find the correct lastNode. Fixes: #12109 (#12815)
- c9dd50d35 fix: terminate workflow should not get throttled Fixes #12778 (#12792)
- faaddf3ac fix(containerSet): mark container deleted when pod deleted. Fixes: #12210 (#12756)
- 4e7d471c0 fix: return itself when getOutboundNodes from memoization Hit steps/DAG. Fixes: #7873 (#12780)
- 519faf03c fix: pass dnsconfig to agent pod. Fixes: #12824 (#12825)
- 56d7b2b9c fix: inline template loops should receive more than the first item. Fixes: #12594 (#12628)
- 19a7edebb fix: workflow stuck in running state when using activeDeadlineSeconds on template level. Fixes: #12329 (#12761)
- 68c089d49 fix: ensure workflowtaskresults complete before mark workflow completed status. Fixes: #12615 (#12574)
- b189afa48 fix: patch report outputs completed if task result not exists. (#12748)
- eec6ae0e4 fix(log): change task set to task result. (#12749)
- a20f69571 chore(deps): upgrade
mkdocs-material
from 8.2.6 to 9.x (#12894) - c956d70ee fix(hack): various fixes & improvements to cherry-pick script (#12714)
- 1c09db42e fix(deps): upgrade x/net to v0.23.0. Fixes CVE-2023-45288 (#12921)
- 1c3401dc6 fix(deps): upgrade
http2
to v0.24. Fixes CVE-2023-45288 (#12901) - ddf815fb2 chore(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 (#12378)
- bc42b0881 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.9.0 to 1.9.1 (#12376)
- ec84a61c6 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.8.0 to 1.9.0 (#12298)
- 0d4bb58de docs(install): use material admonition instead of unicode caution (#12561)
- d9f2184ac build(docs): add script to sync docs/README.md with README.md (#12752)
- a1643357c refactor(build): simplify
mkdocs build
scripts (#12463) - c8082b6fc fix(deps): upgrade
crypto
from v0.20 to v0.22. Fixes CVE-2023-42818 (#12900) - 4fb03eef9 chore(deps): bump
undici
from 5.28.3 to 5.28.4 in /ui (#12891) - 4ce9e02d3 chore(deps): bump
follow-redirects
from 1.15.4 to 1.15.6 due to CVE - 20c81f8a5 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#12879)
- ceef27bf2 build(deps): bump github.com/docker/docker from 24.0.0+incompatible to 24.0.9+incompatible (#12878)
- 8fcadffc1 fix(deps): upgrade
pgx
from 4.18.1 to 4.18.2 due to CVE (#12753) - 43630bd8e chore(deps): upgrade Cosign to v2.2.3 (#12850)
- 6d41e8cfa fix(deps): upgrade
undici
to 5.28.3 due to CVE (#12763) - 1f39d328d chore(deps): bump google.golang.org/protobuf to 1.33.0 to fix CVE-2024-24786 (#12846)
- c353b0921 chore(deps): bump github.com/creack/pty from 1.1.20 to 1.1.21 (#12312)
- d95791fdf fix: mark task result completed use nodeId instead of podname. Fixes: #12733 (#12755)
- 03f9f7583 fix(ui): show correct podGC message for deleteDelayDuration. Fixes: #12395 (#12784)
Contributors
- AlbeeSo
- Andrei Shevchenko
- Anton Gilgur
- Jiacheng Xu
- Shiwei Tang
- Shunsuke Suzuki
- Tianchu Zhao
- Yuan Tang
- Yulin Li
- dependabot[bot]
- guangwu
- shuangkun tian
- static-moonlight
Security
Details
date
April 19, 2024, midnight
name
v3.5.6
type
Patch
👇
Register or login to:
- 🔍View and search all Argo Workflows releases.
- 🛠️Create and share lists to track your tools.
- 🚨Setup notifications for major, security, feature or patch updates.
- 🚀Much more coming soon!