chore(argo-cd): Update dependency argoproj/argo-cd to v2.14.1

[argoproj-renovate]

This PR contains the following updates:

Package	Update	Change
argoproj/argo-cd	minor	v2.13.4 -> v2.14.1

---

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v2.14.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Full Changelog: argoproj/argo-cd@v2.14.0...v2.14.1

v2.14.0

Compare Source

Important!

The 2.14.0 release manifests incorrectly use the 2.14.0-rc7 image. The 2.14.1 release will correct this error.

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.0/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.0/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Features

• 7d28c89: feat(health): resource customization for RabbitMQCluster (#​15286) (@​aaguilartablada)
• 29c59ab: Revert "feat: exclude Endpoints and EndpointSlices Kubernetes resource by default" (#​20334) (@​agaudreault)
• 83953fe: feat(app): Add optional 'name' to Source object (#​20470) (@​CefBoud)
• 4a14051: feat(app): add ignore-healthcheck annotation (#​20462) (@​CefBoud)
• 5543900: feat(applicationset): Add FlatList option to cluster generator - Fixes #​20212 (#​20231) (@​OpenGuidou)
• 92e0b55: feat(appset): Add a cache layer for Argo Projects to speed-up application validation (#​18703) (@​dacofr)
• 27eebaa: feat(appset): add 'project' to the Cluster Generator params (#​20338) (@​CefBoud)
• 9e9c9a9: feat(appset): parameterize requeue time #​20063 (#​20064) (@​rumstead)
• dfbfdba: feat(appset): reduce cluster secret logging (#​21109) (@​rumstead)
• 4c29c33: feat(cli): Add app diff option to specify exit code when diff (#​20144) (@​eugene70)
• 3988861: feat(cmp): parameter to enable git creds to be shared from repo server to the plugin (#​15107) (@​jmcshane)
• 19613a2: feat(controller): support Istio ServiceEntry network node #​20270 (#​20273) (@​zapkub)
• 19d85aa: feat(health): Adding more health checks for Keycloak, Postgres, Grafana, SolrCloud (#​20294) (@​rezellme)
• 2a199bc: feat(health): add healthchecks for Gloo resources (#​11379) (@​zelig81)
• e4599e1: feat(rbac): add disable fine-grained inheritance flag (#​20600) (#​21553) (@​agaudreault)
• d8dd2fc: feat(ui): Added a warning popup before closing the application create panel (#​20807) (@​surajyadav1108)
• 1120a08: feat(ui): Added timing info to container state UI (#​20920) (@​surajyadav1108)
• a94a07e: feat(ui): Added title label for filters (#​21149) (@​surajyadav1108)
• 36d189c: feat(ui): Support filter for configured and unchanged on SYNC STATUS view (#​20850) (@​aali309)
• e09ff60: feat(ui): add token diff support in diff view (#​19983) (@​linghaoSu)
• f4c519a: feat(ui): display sha's revision in every history release (#​19963) (@​Tchoupinax)
• 5796a7c: feat(ui): make name property for repos (#​20077) (@​surajyadav1108)
• fb825f7: feat(ui): move graphs by dragging mouse in app resource tree view (#​18025) (#​20009) (@​linghaoSu)
• 3088906: feat(ui): support auto theme (#​20080) (@​linghaoSu)
• 24e67df: feat(ui): support enable word wrap in live and desired manifest panel (#​20299) (@​linghaoSu)
• eb10b70: feat: Add ability to hide certain annotations on secret resources (#​18216) (@​svghadi)
• ab8fdb8: feat: Add nodeSelector for Linux nodes (#​20148) (@​leehosu)
• b5d8edd: feat: Add reusable interactive prompts and configure command (issue #​19528) (#​19637) (@​david-wu-octopus)
• 9b481b1: feat: Adding skipSchemaValidation flag (#​20771) (#​20831) (@​dmosesson)
• fd4cc93: feat: Change the file name convention when downloading pod logs (#​19938) (@​itaynvn-runai)
• 99efafb: feat: Confluent Connector Resource Health Checker - #​17695 (#​17697) (@​Clint-Chester)
• 8ebf4a8: feat: Enable ignoreResourceUpdate by default #​19992 (#​20303) (@​jaehanbyun)
• 9741c06: feat: Sync timeouts for applications (#​6055) (#​20816) (@​andrii-korotkov-verkada)
• 8f0d3d0: feat: Timestamp for Health Status (#​16972) (#​18660) (@​mkieweg)
• c8dcd83: feat: add ARGOCD_APP_REVISION_SHORT_8 variable in build environment (#​19931) (@​Falanty)
• 4722a7f: feat: add Actions for PipelineRollout to allow/disallow data loss (#​20298) (@​juliev0)
• b05cafd: feat: add custom actions for Numaflow CRDs (#​20332) (@​dpadhiar)
• fdf539d: feat: add health check for ClusterResourceSet (#​20746) (@​nueavv)
• 5138dd5: feat: add orphaned resource count metric (#​20521) (@​jaehanbyun)
• 621330c: feat: add prompting to confirm account token deletion (#​20654) (@​pasha-codefresh)
• 36ef563: feat: add prompting to confirm application commands (#​20658) (@​pasha-codefresh)
• d44d7ec: feat: add prompting to confirm application resource deletion (#​20611) (@​pasha-codefresh)
• 29d5229: feat: add prompting to confirm delete certificate (#​20547) (@​pasha-codefresh)
• 16e7517: feat: add prompting to confirm deletion of gpg public key (#​20539) (@​pasha-codefresh)
• 83b1b6c: feat: add prompting to confirm project deletion (#​20612) (@​pasha-codefresh)
• 8a4e7e0: feat: add prompting to confirm project role deletion (#​20613) (@​pasha-codefresh)
• 2620593: feat: add prompting to confirm project window deletion (#​20656) (@​pasha-codefresh)
• 9b6d3a9: feat: add prompting to confirm prune during backup import (#​20546) (@​pasha-codefresh)
• eb6d2e6: feat: add prompting to confirm remove of repository credentials (#​20541) (@​pasha-codefresh)
• 0aa6c49: feat: add support for helm skipTests flag (#​20118) (@​jaehanbyun)
• b9d5387: feat: adopt delete app confirmation to new prompt util (#​20664) (@​pasha-codefresh)
• 4e13b7f: feat: allow auth token to be passed in via env (#​19898) (@​ctrlaltf24)
• 212efa4: feat: allow individual extension configs (#​20491) (@​leoluz)
• 7c9bd2d: feat: application resource deletion protection (#​20497) (@​alexmt)
• a25378f: feat: appset scm generators and PR generators should be able to access only secrets related to appset (#​20309) (@​pasha-codefresh)
• 2d8659b: feat: basic e2e tests in order to verify notification service health (#​20182) (@​pasha-codefresh)
• a288b4d: feat: exclude Endpoints and EndpointSlices Kubernetes resource by default (#​20251) (@​jaehanbyun)
• 82484ce: feat: introduce health checks for Numaflow CRDs (#​20297) (@​dpadhiar)
• 5d89339: feat: introduce pause/unpause actions for Numaplane CRDs (#​20128) (@​dpadhiar)
• d16df52: feat: manage clusters via proxy (#​20374) (@​pasha-codefresh)
• 4a38442: feat: move appset delete confirmation to new prompt logic (#​20677) (@​pasha-codefresh)
• eba559a: feat: option to disable writing k8s events(#​18205) (#​18441) (@​Jack-R-lantern)
• 433b317: feat: source hydrator (#​20345) (@​crenshaw-dev)
• 59ea2a8: feat: support Suspended state for MonoVertexRollout (#​20583) (@​dpadhiar)
• dc27102: feat: support using exponential backoff between self heal attempts (#​20275) (@​alexmt)
• b824956: feat: transmit manifest-generate-path resources to the cmp-server for plugin-based applications (#​19209) (@​jsolana)

Bug fixes

• 684ee0b: Revert "fix: Graceful shutdown for the API server (#​18642) (#​20981)" (#​21221) (#​21222) (@​gcp-cherry-pick-bot[bot])
• 4471603: fix(api): send to closed channel in mergeLogStreams (#​7006) (#​21178) (@​crenshaw-dev)
• bce16e9: fix(appset): Fix appset generate in --core mode for cluster gen (#​21170) (@​OpenGuidou)
• e953a2d: fix(appset): avoid panic when no steps in rollingSync (#​20357) (@​CefBoud)
• bd75510: fix(appset): events not honouring configured namespaces (#​21219) (#​21241) (#​21519) (@​eadred)
• 479b182: fix(appset): reverted Gitlab SCM HasPath search and consider 404 errors as file not found (#​16253) (cherry-pick #​21597) (#​21602) (@​gcp-cherry-pick-bot[bot])
• ebf754e: fix(appset): update gitlab SCM provider to search on parent folder (#​16253) (#​21491) (#​21503) (@​gcp-cherry-pick-bot[bot])
• b8f85c9: fix(ci): get correct previous release version for release notes (#​19443) (#​20315) (@​crenshaw-dev)
• 79ba360: fix(ci): handle new k3s test version matrix (#​20223) (#​20427) (@​crenshaw-dev)
• 76fbc1f: fix(ci): ignore temporary files when checking for out of bound symlinks (#​20527) (@​CefBoud)
• c13c9c1: fix(ci): updating action-gh-release after upstream fix (#​21407) (#​21408) (@​gcp-cherry-pick-bot[bot])
• 2c2e669: fix(cli): Fix appset generate in --core mode (#​20717) (@​OpenGuidou)
• e654ed5: fix(cli): add missing resources and actions to cani CLI (#​20347) (@​crenshaw-dev)
• 438e01b: fix(codegen): use kube_codegen.sh deepcopy and client gen correctly (#​20644) (@​crenshaw-dev)
• 51471b3: fix(controller): rename cluster batch param and add to argocd-cmd-params-cm (#​21402) (#​21419) (@​gcp-cherry-pick-bot[bot])
• ec499bb: fix(diff): avoid cache miss in server-side diff (#​20423) (#​20424) (@​crenshaw-dev)
• e861b55: fix(diff): avoid cache miss in server-side diff (#​20605) (@​crenshaw-dev)
• d1ef0f8: fix(docs): ensure version dropdown sorts correctly regardless of browser language #​20289 (#​20322) (@​jaehanbyun)
• ca91dd9: fix(extension): add header to support apps-in-any-namespace (#​20123) (@​agaudreault)
• 5ba2405: fix(health): only consider non-empty health checks (#​20232) (@​blakepettersson)
• 3070297: fix(helm): escape consecutive commas in cleanSetParameters (#​19269) (#​20113) (@​eogns47)
• 35174dc: fix(hydrator): UI nil checks (cherry-pick #​21598) (#​21601) (@​gcp-cherry-pick-bot[bot])
• 092bb73: fix(pkce): 20111 PKCE auth flow does not return user to previous path like dex auth flow (#​20202) (@​austin5219)
• b187fbb: fix(redis): CPU stuck at 100% after rolling update (#​20645) (@​agaudreault)
• a68d057: fix(server): accept HTTP/1.1 for backward compatibility (#​20639) (@​agaudreault)
• c8c22d3: fix(server): make a copy of secret objects when listing from the informers #​19913 (#​20805) (@​rumstead)
• a7637cd: fix(server): missing selected ALPN property (#​20579) (@​agaudreault)
• 8a9de6a: fix(ui): ArgoCD history tab shows latest values in all recent releases (#​13006) (#​21161) (@​GuySaar8)
• b0e3160: fix(ui): Change tab title to Sync Windows (#​20018) (@​jsoref)
• 33ecbbc: fix(ui): Prevent versionId 0 Error on New Applications with No History (#​20574) (@​pasha-codefresh)
• 46f4945: fix(ui): Solve issue with navigating with dropdown from an application's page (cherry-pick #​21737) (#​21746) (@​gcp-cherry-pick-bot[bot])
• 9ac1670: fix(ui): Sync Health Statuses for Applications and everything else (#​20020) (@​jsoref)
• 555854c: fix(ui): add state parameter in the pkce flow (#​17235) (@​js3692)
• 159eeec: fix(ui): add optional check to avoid undefined reference in project detail (#​20044) (@​linghaoSu)
• 7718af1: fix(ui): adjust transform origin in application resource tree (#​20180) (@​srikanth597)
• 40c6077: fix(ui): carry over state when using full screen mode button (#​20022) (@​linghaoSu)
• f6eaaea: fix(ui): display correct init info in Pod UI (#​20387) (@​crenshaw-dev)
• 1fcbcc1: fix(ui): fix open application detail in new tab when basehref is set (#​20004) (@​lsq645599166)
• a78b628: fix(ui): fix select destination cluster type in create app (#​20970) (@​lsq645599166)
• d761c94: fix(ui): fix the slider tansition (#​20641) (@​ashutosh16)
• 0681098: fix(ui): hide resource actions menu if it's empty (#​20051) (@​CefBoud)
• 20e2e78: fix(ui): history error reported in the dev environment (#​20133) (@​youhonglian)
• ed4c0ee: fix(ui): source can in fact be undefined (#​20381) (@​blakepettersson)
• e31aebe: fix(ui): update ui e2e tests (#​14619) (@​ebuildy)
• fa9023a: fix: 20791 - sync multi-source application out of order source syncs (#​21071) (@​ishitasequeira)
• 7f6340f: fix: API server should not attempt to read secrets in all namespaces (#​20950) (@​alexmt)
• e2bc96b: fix: Ability to disable Server Side Apply on individual resource level (#​20697) (@​pasha-codefresh)
• fcc186b: fix: Add redis password to forwardCacheClient struct (#​19599) (@​NetanelK)
• 155514e: fix: Allow to delete repos with invalid urls (#​20921) (#​20975) (@​andrii-korotkov-verkada)
• 6d8d32f: fix: ApplicationSet webhooks should use stricter comparison of repository URL (#​20486) (@​dacofr)
• b8e118f: fix: Bitbucket Cloud PR Author is processed correctly (#​20769) (#​20990) (@​andrii-korotkov-verkada)
• f03146d: fix: CVE-2024-45296 Backtracking regular expressions cause ReDoS by upgrading path-to-regexp from 1.8.0 to 1.9.0 (#​20087) (@​chengfang)
• 0a26e0f: fix: Change applicationset generate HTTP method to avoid route conflicts (#​20758) (#​21299) (@​gcp-cherry-pick-bot[bot])
• fad534b: fix: Fix argocd appset generate failure due to missing clusterrole (#​20162) (@​pradithya)
• b2091e3: fix: Fix false positive in plugin application discovery (#​20196) (@​pradithya)
• 3da5a3d: fix: Fix repeated 403 due to app namespace being undefined (#​20699) (#​20819) (@​andrii-korotkov-verkada)
• d9be098: fix: Fix server side diff with fields removal (#​20792) (#​20842) (@​andrii-korotkov-verkada)
• 345c8a1: fix: GOLANGCI_LINT_VERSION (#​20264) (@​dcoppa)
• dce41c4: fix: Get pull request target branch for Azure DevOps (#​19869) (#​19871) ( <>)
• 730363f: fix: Graceful shutdown for the API server (#​18642) (#​20981) (@​andrii-korotkov-verkada)
• c6804e9: fix: Memory leak in repo-server (#​20876) (@​AJChandler)
• e1258cc: fix: Policy/policy.open-cluster-management.io health check is broken (#​20108) (#​20109) (@​itewk)
• 8a8fc37: fix: Policy/policy.open-cluster-management.io stuck in progressing status when no clusters match the policy (#​21296) (cherry-pick #​21297) (#​21614) (@​gcp-cherry-pick-bot[bot])
• 030a7be: fix: Populate destination name when destination server is specified (#​21063) (@​adriananeci)
• 7de5d27: fix: Rework git tag semver resolution (#​20083) (#​20096) (@​PaulSonOfLars)
• 8cf990b: fix: Rollback multi-source apps; 2nd follow-up to PR 14124 (#​20566) (@​keithchong)
• 522d07a: fix: UI: Nothing happens selecting cluster URL/Name dropdown (#​13655) (#​21028) (@​keithchong)
• 2fe9a22: fix: add missing fields in listrepositories (#​20991) (@​blakepettersson)
• 6002c7d: fix: allow pipes to be present in git username (#​20040) (@​blakepettersson)
• dc3f40c: fix: avoid resources lock contention (#​8172) (#​20329) (@​mpelekh)
• 9b11b21: fix: check err before use schedule and duration (#​20043) (@​daengdaengLee)
• 17c412e: fix: check for source position when --show-params is set (#​20682) (@​gdsoumya)
• 20f9719: fix: cleanup tempdir when errors occur in Helm chart extraction (#​19861) (@​ilia-medvedev-codefresh)
• fe67cd5: fix: corrected --roleARN to --role-arn as per updated CLI option (#​20065) (@​nueavv)
• cfa1c89: fix: disable automaxprocs logging (#​20069) (@​nitishfy)
• 76104da: fix: don't disable buttons for multi-source apps (#​20446) (@​blakepettersson)
• dbc94ba: fix: fix broken link (#​20070) (@​nitishfy)
• fe7771c: fix: handle incorrect cluster RESTconfig without panic (#​20150) (@​CefBoud)
• 6897c2e: fix: incorrect expr for server stats in Grafana dashboard.json (#​21098) (@​minchao)
• fa54ce2: fix: oras-go client should fallback to docker config if no credentials specified (#​18133) (@​tonyay163)
• 0ca1ddb: fix: order conditions summary (#​20759) (@​mmorel-35)
• be880ad: fix: refine deny destination checks (#​20045) (@​blakepettersson)
• be24ef4: fix: remove broken link from code-contributions.md (#​20795) ( <>)
• 951f749: fix: remove hardcoded conditions from Numaflow CRD health checks (#​20316) (@​dpadhiar)
• 52c3f93: fix: repo generate paths value in namespace install is incorrectly formatted (#​20139) (@​todaywasawesome)
• 70ea865: fix: resolve the failing e2e appset tests for ksonnet applications (cherry-pick #​21580) (#​21604) (@​gcp-cherry-pick-bot[bot])
• 32cc663: fix: show multisource details for an appset when using argocd appset get command (#​20903) (@​nitishfy)
• 03a1609: fix: support managing cluster with multiple argocd instances and annotation based tracking (#​20222) (@​alexmt)
• 4faf8dd: fix: the unmatching template issue introduced from #​20237 (#​20410) (@​xcompass)
• 49431b9: fix: update health check to support modelmesh (#​20142) (@​strangiato)
• 9687619: fix: updates to health status for Numaplane resources (#​20544) (@​juliev0)
• 1c6ec19: fix: use ErrorContains(t, err instead of Contains(t, err.Error() (#​20220) (@​mmorel-35)

Documentation

• b546ea7: docs(applicationset): complete sentence about Application deletion (#​20944) (@​tdabasinskas)
• ac69f52: docs(applicationset): explain how to add repo credentials (#​20453) (@​ruant)
• 9b15589: docs(cli): fix example command (#​20402) (@​crenshaw-dev)
• bab2c41: docs(hydrator): document signature verification limitation (cherry-pick #​21504) (#​21585) (@​gcp-cherry-pick-bot[bot])
• 205b3d3: docs(ingress): use GRPC instead of HTTP2 (#​21029) (@​agaudreault)
• b60d28c: docs(proposal): manifest hydrator (#​17755) (@​crenshaw-dev)
• f89e1cf: docs(rbac): clarify glob pattern behavior for fine-grain RBAC (#​20624) (@​crenshaw-dev)
• 735d090: docs(reconcile): adding optional condition when ignoring json (#​20010) (@​rumstead)
• ff08643: docs(resource_actions): specify when mergeBuiltinActions was introduced (#​20917) (@​morey-tech)
• 6b19f10: docs(ui): sorting version (#​20181) (@​nueavv)
• 6a9fe45: docs: Add 404 Not Found github notify error to troubleshooting docs (#​20085) (@​moleus)
• 4b478ef: docs: Add empty GitHub.repoURL error to troubleshooting docs

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mkilchhofer]

There are lots of changes in 2.14 which need to be synced manually. I try to file a PR asap in the morning of Feb 4 at around 9 AM CET.

[mbevc1]

Ah, though that might be the case but wasn't able to check last night 😁

[mbevc1]

Needs upstream sync

[mkilchhofer]

Upgrade was handled in #3155