Argo Workflows - v3.5.6

Security

(2024-04-19)

  • 200f4d1e5 fix: don't load entire archived workflow into memory in list APIs (#12912)
  • fe5c6128c fix(ui): default to main container name in event source logs API call (#12939)
  • 06e6a0df7 fix(build): close pkg/apiclient/_.secondary.swagger.json (#12942)
  • 909fdaa98 fix: correct order in artifactGC error log message (#12935)
  • ab7bee7b0 fix: workflows that are retrying should not be deleted (Fixes #12636) (#12905)
  • 9c2581ad0 fix: change fatal to panic. (#12931)
  • 01f843828 fix: Correct log level for agent containers (#12929)
  • 30f2e0d93 fix: DAG with continueOn in error after retry. Fixes: #11395 (#12817)
  • 1c1f43313 fix: use multipart upload method to put files larger than 5Gi to OSS. Fixes #12877 (#12897)
  • 8c9a85761 fix: remove completed taskset status before update workflow. Fixes: #12832 (#12835)
  • ce7cad34b fix: make sure Finalizers has chance to be removed. Fixes: #12836 (#12831)
  • 5d03f838c fix(test): wait enough time to Trigger Running Hook. Fixes: #12844 (#12855)
  • 3d0648893 fix: filter hook node to find the correct lastNode. Fixes: #12109 (#12815)
  • c9dd50d35 fix: terminate workflow should not get throttled Fixes #12778 (#12792)
  • faaddf3ac fix(containerSet): mark container deleted when pod deleted. Fixes: #12210 (#12756)
  • 4e7d471c0 fix: return itself when getOutboundNodes from memoization Hit steps/DAG. Fixes: #7873 (#12780)
  • 519faf03c fix: pass dnsconfig to agent pod. Fixes: #12824 (#12825)
  • 56d7b2b9c fix: inline template loops should receive more than the first item. Fixes: #12594 (#12628)
  • 19a7edebb fix: workflow stuck in running state when using activeDeadlineSeconds on template level. Fixes: #12329 (#12761)
  • 68c089d49 fix: ensure workflowtaskresults complete before mark workflow completed status. Fixes: #12615 (#12574)
  • b189afa48 fix: patch report outputs completed if task result not exists. (#12748)
  • eec6ae0e4 fix(log): change task set to task result. (#12749)
  • a20f69571 chore(deps): upgrade mkdocs-material from 8.2.6 to 9.x (#12894)
  • c956d70ee fix(hack): various fixes & improvements to cherry-pick script (#12714)
  • 1c09db42e fix(deps): upgrade x/net to v0.23.0. Fixes CVE-2023-45288 (#12921)
  • 1c3401dc6 fix(deps): upgrade http2 to v0.24. Fixes CVE-2023-45288 (#12901)
  • ddf815fb2 chore(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 (#12378)
  • bc42b0881 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.9.0 to 1.9.1 (#12376)
  • ec84a61c6 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.8.0 to 1.9.0 (#12298)
  • 0d4bb58de docs(install): use material admonition instead of unicode caution (#12561)
  • d9f2184ac build(docs): add script to sync docs/README.md with README.md (#12752)
  • a1643357c refactor(build): simplify mkdocs build scripts (#12463)
  • c8082b6fc fix(deps): upgrade crypto from v0.20 to v0.22. Fixes CVE-2023-42818 (#12900)
  • 4fb03eef9 chore(deps): bump undici from 5.28.3 to 5.28.4 in /ui (#12891)
  • 4ce9e02d3 chore(deps): bump follow-redirects from 1.15.4 to 1.15.6 due to CVE
  • 20c81f8a5 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#12879)
  • ceef27bf2 build(deps): bump github.com/docker/docker from 24.0.0+incompatible to 24.0.9+incompatible (#12878)
  • 8fcadffc1 fix(deps): upgrade pgx from 4.18.1 to 4.18.2 due to CVE (#12753)
  • 43630bd8e chore(deps): upgrade Cosign to v2.2.3 (#12850)
  • 6d41e8cfa fix(deps): upgrade undici to 5.28.3 due to CVE (#12763)
  • 1f39d328d chore(deps): bump google.golang.org/protobuf to 1.33.0 to fix CVE-2024-24786 (#12846)
  • c353b0921 chore(deps): bump github.com/creack/pty from 1.1.20 to 1.1.21 (#12312)
  • d95791fdf fix: mark task result completed use nodeId instead of podname. Fixes: #12733 (#12755)
  • 03f9f7583 fix(ui): show correct podGC message for deleteDelayDuration. Fixes: #12395 (#12784)

Contributors

  • AlbeeSo
  • Andrei Shevchenko
  • Anton Gilgur
  • Jiacheng Xu
  • Shiwei Tang
  • Shunsuke Suzuki
  • Tianchu Zhao
  • Yuan Tang
  • Yulin Li
  • dependabot[bot]
  • guangwu
  • shuangkun tian
  • static-moonlight

Details

date
April 19, 2024, midnight
name
v3.5.6
type
Patch
👇
Register or login to:
  • 🔍View and search all Argo Workflows releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or