Skip to content

chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.5.4 to 3.5.5 - #1432

Merged
openshift-merge-bot[bot] merged 1 commit into
v1.22from
dependabot/go_modules/v1.22/github.com/argoproj/argo-cd/v3-3.5.5
Oct 19, 2026
Merged

openshift-merge-bot[bot] merged 1 commit into
v1.22from
dependabot/go_modules/v1.22/github.com/argoproj/argo-cd/v3-3.5.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/argoproj/argo-cd/v3 from 3.5.4 to 3.5.5.

Release notes

Sourced from github.com/argoproj/argo-cd/v3's releases.

v3.5.5

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

Dependency updates

  • 6b6f042ca2273444044a0b69a9b04ef06ed9b116: chore(deps): bump go-git dependency- #30013 for v3.5 (#30047) (@​ranakan19)
  • 59e320ff6af81722a355975ea956c79385dce2ed: chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.84.0 (cherry-pick release-3.5) (#30056) (@​dipakkarde)
  • d1b3091a834353fe71fe58b3137c979dd8554879: chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (cherry-pick #28696 for 3.5) (#30057) (@​argo-cd-cherry-pick-bot[bot])
  • 29f57d5d9b443d473fa699d3451981c63ba6e9a3: chore(deps): bump the golang-x group with 3 updates (#29705) (cherry-pick release-3.5) (#30072) (@​blakepettersson)
  • f89a094e6b92b3b83d47adc8f5edebd24302e118: chore(deps): update group golang to v1.26.9 (release-3.5) (#30092) (@​argoproj-renovate[bot])

Full Changelog: argoproj/argo-cd@v3.5.4...v3.5.5

... (truncated)

Commits
  • a5038b0 Bump version to 3.5.5 on release-3.5 branch (#30136)
  • f0f6bde fix(reposerver): stale manifests and goroutine leak after CMP failure (#29870...
  • a48be5a fix: cache the OCI tag list (#30117) (cherry-pick #30118 for 3.5) (#30119)
  • 3d31f1a fix(server): fill event count and timestamps for events.k8s.io events (#30015...
  • 1d0585d fix: synchronize OCI cache cleanup with extraction (#30020) (cherry-pick #300...
  • 3295d0c fix(ci): use curl in kustomize checksum helper so Renovate can refresh checks...
  • f89a094 chore(deps): update group golang to v1.26.9 (release-3.5) (#30092)
  • 29f57d5 chore(deps): bump the golang-x group with 3 updates (#29705) (cherry-pick rel...
  • 4d68ee3 fix: fixes flaky tests by making Log capturer thread-safe (cherry-pick #28328...
  • 33a47a5 fix(ui): show enableOCI only for Helm (cherry-pick #29974 for 3.5) (#30074)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/argoproj/argo-cd/v3](https://github.com/argoproj/argo-cd) from 3.5.4 to 3.5.5.
- [Release notes](https://github.com/argoproj/argo-cd/releases)
- [Changelog](https://github.com/argoproj/argo-cd/blob/master/CHANGELOG.md)
- [Commits](argoproj/argo-cd@v3.5.4...v3.5.5)

---
updated-dependencies:
- dependency-name: github.com/argoproj/argo-cd/v3
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 16, 2026
@coderabbitai

coderabbitai Bot commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository YAML (base), Organization UI (inherited)
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 4031c4c9-9f37-4b45-bfde-058263bae859

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@openshift-ci

openshift-ci Bot commented Oct 16, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@jgwest

jgwest commented Oct 16, 2026

Copy link
Copy Markdown
Member

/ok-to-test

@svghadi

svghadi commented Oct 19, 2026

Copy link
Copy Markdown
Member

/lgtm
/approve

@openshift-ci

openshift-ci Bot commented Oct 19, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: svghadi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot
openshift-merge-bot Bot merged commit daa9dea into v1.22 Oct 19, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved dependencies Pull requests that update a dependency file go Pull requests that update go code lgtm ok-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants