Argo CD

argoproj/argo-cd last check 2026-10-03 02:06 UTC 451 releases

Notes

Release notes

2.12.4 · 1y+

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.12.4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

15681651664e29a2546f6b87f6f976ef6cc1ce9d: fix(appset): Fix perpetual appset reconciliation (#19822) (#19995) (@gcp-cherry-pick-bot[bot])
b76a09e07079cd8a60999a0769d51472a981d682: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#20087) (#20090) (@gcp-cherry-pick-bot[bot])
d56ef7641cfa40b88cf3a1151e093568631496c1: fix: diffing should not fail if resource fail schema validation (#19714) (#19729) (@gcp-cherry-pick-bot[bot])

Documentation

02b83368902d5b4d1339794d9edab4b19d557649: docs: note cluster scoping changes in 2.12x (#19684) (#19702) (@gcp-cherry-pick-bot[bot])

Dependency updates

ff3ef717e224fa02a3aa853a05007b17eb696971: cherry-pick chore(deps-dev): bump webpack from 5.84.1 to 5.94.0 in /ui (#20056) (@ishitasequeira)
08fe6f5aea1a45195c6440d6f36bf200eccdcb3a: chore(deps): bump dompurify from 2.3.6 to 2.5.6 in /ui (#19955) (#20016) (@gcp-cherry-pick-bot[bot])
8590550a2215c4dcae93316cd52c2449129032c4: chore(deps): bump express from 4.19.2 to 4.20.0 in /ui (#19883) (#19987) (@chengfang)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.12.3...v2.12.4