LoginSign Up
← Back to all sparks
A

Argo CD

DEVOPS
Velocity5.0

Declarative GitOps continuous delivery tool for Kubernetes

argo-cd.readthedocs.io ↗

Argo CD's 3.5 train is all hydrator, supply-chain verification and OIDC session repair.

gitopssource-hydratorsupply-chain-integrityapplicationsetoidc-authrelease-candidates
◆Current state
Argo CD is mid-release-candidate on 3.5, with rc1 carrying the feature payload and rc2/rc3 narrowing to fixes. The 3.4 line went stable in May and picked up a 3.4.3 patch. Feature work concentrates in three places: the source hydrator and promoter, ApplicationSet scale and concurrency, and the long tail of resource health checks contributed by users.
◆Where it's heading
The hydrator is becoming the centre of gravity — configurable hydration queue concurrency, ConfigMap-managed README templates, a separate destination repo for syncSource, and opt-in source integrity verification for dry sources in alpha. Paired with cosign-signed images and SLSA Level 3 provenance on every release, Argo CD is moving toward a GitOps pipeline where what gets hydrated is verified, not just applied. The rc2/rc3 fix lists are dominated by sync-correctness and auth-session bugs, which is where a 3.5 GA will stand or fall.
◆Prediction
3.5.0 GA is the next step once the cherry-pick stream dries up; on current evidence source integrity verification stays alpha and opt-in through that release.

◆Recent moves

  1. 22d ago

    Argo CD 3.5.0-rc3: OIDC session renewal and diff-filtering fixes

    rc3 is almost entirely cherry-picked fixes, but two of them matter for anyone running SSO: expired sessions now renew via OIDC refresh tokens, and Entra ID tokens fall back to the uti claim when jti is absent. The diff engine also stops dropping manager-owned descendant fields when filtering webhook mutations, a recurring source of phantom drift.

    View source ↗
  2. 1mo ago

    Argo CD 3.5.0-rc2: sync and cluster-informer bug fixes

    A fixes-only candidate: cluster informer locking, APIService watching, auto-sync skipped when a newer commit lands mid-sync, and Helm valuesObject normalization. Stabilization work on the way to 3.5 GA with no new surface.

    View source ↗
  3. 2mo ago

    Argo CD 3.5.0-rc1: hydrator source integrity, AppSet concurrency

    rc1 carries the 3.5 feature load: opt-in source integrity verification for dry sources in alpha, configurable hydration queue concurrency, ApplicationSet concurrency and archived-repo filtering, webhook refresh jitter, and a batch of new resource health checks. It is the release that shows where the maintainers are investing — the hydrator and promoter path, plus scale limits on the repo server.

    View source ↗
  4. 2mo ago

    Argo CD 3.4.3 patch release

    A version bump on the release-3.4 branch, cut by the release bot. Patch maintenance for the stable line while 3.5 works through its candidates.

    View source ↗
  5. 3mo ago

    Argo CD 3.4.0 stable release

    3.4.0 goes stable, closing the previous minor line and setting the baseline most operators are upgrading from. The release entry itself is only the version bump commit; the substance landed across the 3.4 candidates.

    View source ↗
  6. 3mo ago

    Argo CD 3.4.0-rc7: final pre-stable fixes

    The last 3.4 release candidate, fixes only, ahead of the stable cut days later. Routine end-of-candidate stabilization.

    View source ↗