Skip to content

chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.5.2 to 3.5.5 - #1426

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/master/github.com/argoproj/argo-cd/v3-3.5.5
Open

chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.5.2 to 3.5.5#1426
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/master/github.com/argoproj/argo-cd/v3-3.5.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/argoproj/argo-cd/v3 from 3.5.2 to 3.5.5.

Release notes

Sourced from github.com/argoproj/argo-cd/v3's releases.

v3.5.5

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.5/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.5/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

Dependency updates

  • 6b6f042ca2273444044a0b69a9b04ef06ed9b116: chore(deps): bump go-git dependency- #30013 for v3.5 (#30047) (@​ranakan19)
  • 59e320ff6af81722a355975ea956c79385dce2ed: chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.84.0 (cherry-pick release-3.5) (#30056) (@​dipakkarde)
  • d1b3091a834353fe71fe58b3137c979dd8554879: chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (cherry-pick #28696 for 3.5) (#30057) (@​argo-cd-cherry-pick-bot[bot])
  • 29f57d5d9b443d473fa699d3451981c63ba6e9a3: chore(deps): bump the golang-x group with 3 updates (#29705) (cherry-pick release-3.5) (#30072) (@​blakepettersson)
  • f89a094e6b92b3b83d47adc8f5edebd24302e118: chore(deps): update group golang to v1.26.9 (release-3.5) (#30092) (@​argoproj-renovate[bot])

Full Changelog: argoproj/argo-cd@v3.5.4...v3.5.5

... (truncated)

Commits
  • a5038b0 Bump version to 3.5.5 on release-3.5 branch (#30136)
  • f0f6bde fix(reposerver): stale manifests and goroutine leak after CMP failure (#29870...
  • a48be5a fix: cache the OCI tag list (#30117) (cherry-pick #30118 for 3.5) (#30119)
  • 3d31f1a fix(server): fill event count and timestamps for events.k8s.io events (#30015...
  • 1d0585d fix: synchronize OCI cache cleanup with extraction (#30020) (cherry-pick #300...
  • 3295d0c fix(ci): use curl in kustomize checksum helper so Renovate can refresh checks...
  • f89a094 chore(deps): update group golang to v1.26.9 (release-3.5) (#30092)
  • 29f57d5 chore(deps): bump the golang-x group with 3 updates (#29705) (cherry-pick rel...
  • 4d68ee3 fix: fixes flaky tests by making Log capturer thread-safe (cherry-pick #28328...
  • 33a47a5 fix(ui): show enableOCI only for Helm (cherry-pick #29974 for 3.5) (#30074)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 15, 2026
@openshift-ci

openshift-ci Bot commented Oct 15, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign chengfang for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Oct 15, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@coderabbitai

coderabbitai Bot commented Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository YAML (base), Organization UI (inherited)
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: d9ac930a-2efc-483d-8880-b3826dd4a059
📥 Commits

Reviewing files that changed from the base of the PR and between 97ddce1 and cd27fbb.

⛔ Files ignored due to path filters: 1
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing: 1
  • go.mod
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

📝 Summary

Summary by CodeRabbit

  • Chores
    • Updated underlying Argo CD and gRPC components to newer versions.

The module updates github.com/argoproj/argo-cd/v3 from v3.5.2 to v3.5.5 and indirect google.golang.org/grpc from v1.83.2 to v1.84.0.

Changes: Dependency version updates

Layer / File(s) Summary
Update dependency versions
go.mod		 The required Argo CD version changes to v3.5.5. The indirect gRPC version changes to v1.84.0.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: jgwest

Merge Risk: ⚪ Minimal · up to cd27f

No actionable user-facing regression is established in the supplied change; no merge-blocking risk remains.

Pre-merge checks: Passed 5
Check name Status Explanation
Title check Passed The title clearly identifies the dependency and the exact version upgrade from 3.5.2 to 3.5.5.
Description check Passed The description directly explains the Argo CD dependency upgrade and includes its release notes.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.

Comment @coderabbitai help to get the list of available commands.

@jgwest

jgwest commented Oct 16, 2026

Copy link
Copy Markdown
Member

/ok-to-test

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/master/github.com/argoproj/argo-cd/v3-3.5.5 branch from cd27fbb to 56b0ef2 Compare October 16, 2026 13:58
@dependabot
chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.5.2 to 3.5.5
6c28e67 
Bumps [github.com/argoproj/argo-cd/v3](https://github.com/argoproj/argo-cd) from 3.5.2 to 3.5.5.
- [Release notes](https://github.com/argoproj/argo-cd/releases)
- [Changelog](https://github.com/argoproj/argo-cd/blob/master/CHANGELOG.md)
- [Commits](argoproj/argo-cd@v3.5.2...v3.5.5)

---
updated-dependencies:
- dependency-name: github.com/argoproj/argo-cd/v3
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/master/github.com/argoproj/argo-cd/v3-3.5.5 branch from 56b0ef2 to 6c28e67 Compare October 19, 2026 06:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AdamSaleh AdamSaleh Awaiting requested review from AdamSaleh
@chetan-rns chetan-rns Awaiting requested review from chetan-rns

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code ok-to-test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jgwest