argocd: update quay.io/argoproj/argocd Docker tag to v3.3.8 by renovate[bot] · Pull Request #405 · hashbang/gitops

renovate · 2026-04-16T19:09:57Z

This PR contains the following updates:

Package	Type	Update	Change
quay.io/argoproj/argocd	Kustomization	patch	`v3.3.6` → `v3.3.8`

Release Notes

argoproj/argo-cd (quay.io/argoproj/argocd)

`v3.3.8`

Compare Source

`v3.3.7`

Compare Source

Quick Start

[!IMPORTANT]
A potential bug with application reconciliation has been identified in this release. The application controller may fail to refresh applications, causing an application to not sync / show resources as out of sync.

Issue: #27344 – Application controller not refreshing applications

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.7/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

ea51bd8: [release-3.3] fix: improve perf: switch parentUIDToChildren to map of sets, remove cache rebuild (#26863) (#27108) (@jcogilvie)
4d2f261: fix(ci): run yarn install with --frozen-lockfile (cherry-pick #27099 for 3.3) (#27351) (@dudinea)
671efff: fix(controller): reduce secret deepcopies and deserialization (#27049) (cherry-pick release-3.3) (#27129) (@rumstead)
a77c150: fix(docs): Fix manifest path in Source Hydrator docs (cherry-pick #27123 for 3.3) (#27167) (@argo-cd-cherry-pick-bot[bot])
f0b924f: fix(server): Ensure OIDC config is refreshed at server restart (cherry-pick #26913 for 3.3) (#27114) (@argo-cd-cherry-pick-bot[bot])
7eedc7a: fix(ui): OCI revision metadata never renders due to conflicting guard clause (#26948) (cherry-pick #27097 for 3.3) (#27365) (@argo-cd-cherry-pick-bot[bot])
b0e0415: fix(ui): handle 401 error in stream (cherry-pick #26917 for 3.3) (#27227) (@argo-cd-cherry-pick-bot[bot])
3b12b2e: fix: Add X-Frame-Options and CSP headers to Swagger UI endpoints (cherry-pick #26521 for 3.3) (#27154) (@argo-cd-cherry-pick-bot[bot])
4939e1f: fix: force attempt http2 with custom tls config (cherry-pick #26976 for 3.3) (#27358) (@SamyDjemai)
e372a7f: fix: pass repo.insecure flag to helm dependency build (cherry-pick #27078 for 3.3) (#27083) (@argo-cd-cherry-pick-bot[bot])
99e88e0: fix: prevent automatic refreshes from informer resync and status updates (cherry-pick #25290 for 3.3) (#27230) (@argo-cd-cherry-pick-bot[bot])
2512512: fix: trigger app sync on app-set spec change (cherry-pick #26811 for 3.3) (#27130) (@argo-cd-cherry-pick-bot[bot])
e451591: fix: use force flag in copyutil symlink to prevent repo-server crashes (cherry-pick #26613 for 3.3) (#27057) (@argo-cd-cherry-pick-bot[bot])
b948ff0: fix: use unique names for initial commits (cherry-pick #27171 for 3.3) (#27197) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

899c5e8: chore(deps): bump fast-xml-parser from 4.5.3 to 4.5.6 in /ui - 3.3 (#27360) (@keithchong)
7fd134a: chore(deps): bump go-jose from 4.1.3 to 4.1.4 (cherry-pick #27101 for… (#27208) (@blakepettersson)
2daefc0: chore(deps): update notifications-engine dependency in release-3.3 to v0.5.1-0.20260316232552-d27ba0152c1c (#27093) (@pasha-codefresh)

Other work

45cbc84: test(e2e): add e2e tests for reverse deletionOrder when progressive sync enabled (cherry-pick #26673 for 3.3) (#27340) (@ranakan19)

Full Changelog: argoproj/argo-cd@v3.3.6...v3.3.7

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-04-16T19:11:41Z

Infro diff for `f03ee50`

argocd.hashbang.sh > argocd (0 files changed)

Details

time="2026-04-21T19:11:16Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-04-21T19:11:28Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== apps/Deployment argocd/argocd-applicationset-controller ======
--- /tmp/argocd-diff2181331517/argocd-applicationset-controller-live.yaml
+++ /tmp/argocd-diff2181331517/argocd-applicationset-controller
@@ -579,7 +579,7 @@
               key: applicationsetcontroller.status.max.resources.count
               name: argocd-cmd-params-cm
               optional: true
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: Always
         name: argocd-applicationset-controller
         ports:

===== apps/Deployment argocd/argocd-dex-server ======
--- /tmp/argocd-diff1471183487/argocd-dex-server-live.yaml
+++ /tmp/argocd-diff1471183487/argocd-dex-server
@@ -358,7 +358,7 @@
         - -n
         - /usr/local/bin/argocd
         - /shared/argocd-dex
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: Always
         name: copyutil
         resources: {}

===== apps/Deployment argocd/argocd-notifications-controller ======
--- /tmp/argocd-diff1339758831/argocd-notifications-controller-live.yaml
+++ /tmp/argocd-diff1339758831/argocd-notifications-controller
@@ -276,7 +276,7 @@
               key: notificationscontroller.repo.server.plaintext
               name: argocd-cmd-params-cm
               optional: true
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: Always
         livenessProbe:
           failureThreshold: 3

===== apps/Deployment argocd/argocd-redis ======
--- /tmp/argocd-diff2150447625/argocd-redis-live.yaml
+++ /tmp/argocd-diff2150447625/argocd-redis
@@ -260,7 +260,7 @@
         - argocd
         - admin
         - redis-initial-password
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: IfNotPresent
         name: secret-init
         resources: {}

===== apps/Deployment argocd/argocd-repo-server ======
--- /tmp/argocd-diff628502721/argocd-repo-server-live.yaml
+++ /tmp/argocd-diff628502721/argocd-repo-server
@@ -919,7 +919,7 @@
           value: /helm-working-dir
         - name: HELM_DATA_HOME
           value: /helm-working-dir
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: Always
         livenessProbe:
           failureThreshold: 3
@@ -992,7 +992,7 @@
         env:
         - name: GNUPGHOME
           value: /gnupg-home/.gnupg
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: IfNotPresent
         name: import-gpg-key
         resources: {}
@@ -1024,7 +1024,7 @@
         command:
         - sh
         - -c
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: IfNotPresent
         name: copyutil
         resources: {}

===== apps/Deployment argocd/argocd-server ======
--- /tmp/argocd-diff2154809546/argocd-server-live.yaml
+++ /tmp/argocd-diff2154809546/argocd-server
@@ -903,7 +903,7 @@
               key: server.sync.replace.allowed
               name: argocd-cmd-params-cm
               optional: true
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: Always
         livenessProbe:
           failureThreshold: 3

===== apps/StatefulSet argocd/argocd-application-controller ======
--- /tmp/argocd-diff2857374469/argocd-application-controller-live.yaml
+++ /tmp/argocd-diff2857374469/argocd-application-controller
@@ -768,7 +768,7 @@
               optional: true
         - name: KUBECACHEDIR
           value: /tmp/kubecache
-        image: quay.io/argoproj/argocd:v3.3.4@sha256:9f68a9a360ff65aaca66dfccf675219be73f0ac8c5c96797b6cb7760ee1b9056
+        image: quay.io/argoproj/argocd:v3.3.8@sha256:5d45dc6db21db32a0638ac9128462c6d9956a90fc81760146dada5a243ff7516
         imagePullPolicy: Always
         name: argocd-application-controller
         ports:

argocd.hashbang.sh > cloudnative-pg (0 files changed)

Details

time="2026-04-21T19:11:45Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-04-21T19:11:53Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== coordination.k8s.io/Lease /db9c8771.cnpg.io ======
--- /tmp/argocd-diff2182797931/db9c8771.cnpg.io-live.yaml
+++ /tmp/argocd-diff2182797931/db9c8771.cnpg.io
@@ -0,0 +1,11 @@
+apiVersion: coordination.k8s.io/v1
+kind: Lease
+metadata:
+  annotations:
+    argocd.argoproj.io/tracking-id: cloudnative-pg:coordination.k8s.io/Lease:cloudnative-pg/db9c8771.cnpg.io
+  labels:
+    app.kubernetes.io/component: manager
+    app.kubernetes.io/instance: cloudnative-pg
+    app.kubernetes.io/name: cloudnative-pg
+  name: db9c8771.cnpg.io
+spec: {}

argocd.hashbang.sh > external-dns (0 files changed)

Details

time="2026-04-21T19:11:55Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-04-21T19:11:58Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== apps/Deployment external-dns/external-dns ======
--- /tmp/argocd-diff733468964/external-dns-live.yaml
+++ /tmp/argocd-diff733468964/external-dns
@@ -172,11 +172,6 @@
         - --provider=aws
         - --txt-owner-id=digitalocean-hashbang
         - --txt-prefix=_owner.
-        - --source=crd
-        - --domain-filter=hashbang.sh
-        - --managed-record-types=A
-        - --managed-record-types=CNAME
-        - --managed-record-types=TXT
         env:
         - name: AWS_REGION
           value: us-west-2

argocd.hashbang.sh > keycloak (0 files changed)

Details

time="2026-04-21T19:12:11Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-04-21T19:12:14Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== apps/Deployment keycloak/keycloak ======
--- /tmp/argocd-diff1608018713/keycloak-live.yaml
+++ /tmp/argocd-diff1608018713/keycloak
@@ -259,7 +259,7 @@
             name: keycloak-config-5k62mm682d
         - secretRef:
             name: keycloak-config-hmkt6446bt
-        image: quay.io/keycloak/keycloak:26.5.6@sha256:8d44614c74798322c4e07fbe0ecb15cfbb5879d69b484628555f58ade06f0d8c
+        image: quay.io/keycloak/keycloak:26.5.7@sha256:45ae20191531eb608ddb0b775d012b40d3e4f942697f3214694887dd7c108d13
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3

argocd.hashbang.sh > wkd (0 files changed)

Details

time="2026-04-21T19:12:34Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-04-21T19:12:37Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== apps/Deployment wkd/wkd ======
--- /tmp/argocd-diff2555076020/wkd-live.yaml
+++ /tmp/argocd-diff2555076020/wkd
@@ -232,7 +232,7 @@
           value: enroll
         - name: FOLDER
           value: /tmp/keys
-        image: kiwigrid/k8s-sidecar:2.5.0@sha256:a6b3f707f883108376514489a94d6629109a327b2978e1d826cd104c4ca436df
+        image: kiwigrid/k8s-sidecar:2.5.4@sha256:6e9db2cd6630a663dfa9eec59916f8c289d1efa725a6e2d92ec1b5fef31bbd3d
         imagePullPolicy: IfNotPresent
         name: watcher
         resources: {}

argocd: update quay.io/argoproj/argocd Docker tag to v3.3.8

4684e7a

renovate Bot changed the title ~~argocd: update quay.io/argoproj/argocd Docker tag to v3.3.7~~ argocd: update quay.io/argoproj/argocd Docker tag to v3.3.8 Apr 21, 2026

renovate Bot force-pushed the renovate/quay.io-argoproj-argocd-3.x branch from 0657901 to 4684e7a Compare April 21, 2026 19:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

argocd: update quay.io/argoproj/argocd Docker tag to v3.3.8#405

argocd: update quay.io/argoproj/argocd Docker tag to v3.3.8#405
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/quay.io-argoproj-argocd-3.x

renovate Bot commented Apr 16, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v3.3.8

v3.3.7

Quick Start

Non-HA:

HA:

Release Signatures and Provenance

Release Notes Blog Post

Upgrading

Changelog

Bug fixes

Dependency updates

Other work

Configuration

Uh oh!

github-actions Bot commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Infro diff for f03ee50

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 16, 2026 •

edited

Loading

`v3.3.8`

`v3.3.7`

github-actions Bot commented Apr 16, 2026 •

edited

Loading

Infro diff for `f03ee50`