发布日期: 2026-01-22
版本号: v3.3.0-rc4

Argo CD v3.3.0-rc4版本现已发布。快速安装分为非高可用与高可用两种模式，均需先创建argocd命名空间，随后分别应用对应的清单文件。所有容器镜像均通过cosign签名，并提供符合SLSA Level 3规范的出处证明以供验证。此次更新包含多项错误修复，涉及应用集、协调器及健康检查等功能的稳定性改进，并更新了通知引擎、Helm至3.19.4版本等依赖项。官方博客提供了详细的更新说明，如需从其他次版本升级，请务必查阅升级文档。

更新内容 （中文）

快速开始

非高可用：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0-rc4/manifests/install.yaml

高可用：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0-rc4/manifests/ha/install.yaml

发布签名与来源证明

所有 Argo CD 容器镜像均由 cosign 签名。符合 SLSA Level 3 规范的容器镜像和 CLI 二进制文件会生成来源证明。验证方法请参阅文档。

发布说明博客文章

本版本主要变更与改进的详细分析，请参阅官方博客文章。

升级指南

若从不同次版本升级，请务必阅读升级文档。

变更日志

错误修复

  • 15568cb9d57200927dd15858508f882826529153: 修复(appset)：更新集群密钥时，不为不属于允许命名空间的应用集触发协调（cherry-pick #25622 for 3.3）(#25909) (@argo-cd-cherry-pick-bot[bot])
  • b52a0750b2bf8c726d4a689000a723946f1c57b9: 修复(hydrator)：.gitattributes 包含深层嵌套文件（#25870）(cherry-pick #26011 for 3.3) (#26013) (@argo-cd-cherry-pick-bot[bot])
  • 48a9dcc23b962eafe0a74691769c2c891882ec31: 修复(hydrator)：操作失败时链接为空（#25025）(cherry-pick #26014 for 3.3) (#26018) (@argo-cd-cherry-pick-bot[bot])
  • 0fa47b11b258da9a082a5b206e7fb175e70a9fdd: 修复(hydrator)：将目标命名空间传递给清单渲染（#25478）(cherry-pick #25699 for 3.3) (#26019) (@argo-cd-cherry-pick-bot[bot])
  • 32c32a67cb2d0e4077e6e474dade43c798458e59: 修复：仅当规范…时显示请更新资源规范消息（cherry-pick #25066 for 3.3）(#25894) (@argo-cd-cherry-pick-bot[bot])
  • 74de77a24c80e0397f1c0f92e0f6ea9a19210e9d: 修复：切换 automated.enabled 以禁用回滚的自动同步（cherry-pick #25719 for 3.3）(#25943) (@argo-cd-cherry-pick-bot[bot])
  • a6472c83935700e43756ea7c19e91c5ef83f509b: 修复：允许使用 docker dhi helm charts（cherry-pick #25835 for 3.3）(#25964) (@argo-cd-cherry-pick-bot[bot])
  • cd6a9aaf3f8370d1c15afae9e7612420934d6f69: 修复：cherry-pick #25516 至 release-3.3（#26114）(@FourFifthsCode)
  • 8fbb44c336f06397840a7b626c6535d11b2183de: 修复：错误路径时关闭响应体以防止连接泄漏（cherry-pick #25824 for 3.3）(#26005) (@argo-cd-cherry-pick-bot[bot])
  • 3d64c21206c8756668df4eef2ef8f93014b16230: 修复：健康检查失败时的错误消息无效（#26040）(cherry-pick #26039 for 3.3) (#26063) (@argo-cd-cherry-pick-bot[bot])
  • 28e8472c69f35ec14a8df4c703899dce517d266d: 修复：空和忽略的差异（cherry-pick #25980 for 3.3）(#26000) (@argo-cd-cherry-pick-bot[bot])

文档

  • 8639b7be5e862a17b30efff441eb59ec3cd6a7d3: 文档：在升级指南中添加了 Helm 3.19.4 升级（#25776）(@reggie-k)

依赖更新

  • ac071b57a156d13ab0c2b26a70fe8e4e3555b93c: 杂务(deps)：更新 notifications-engine 以修复 GitHub PR 评论空指针 panic（cherry-pick #26065 for 3.3）(#26075) (@soutar)
  • 369fb7577e58d34faacf6dae439e014c36496530: 杂务(deps)：更新 notifications-engine 至 v0.5.1-0.20251223091026-8c0c96d8d530（cherry-pick #25785 for 3.3）(#25853) (@argo-cd-cherry-pick-bot[bot])
  • 5de1e6472d272b2c506960111acaf9faaed536dc: 杂务(deps)：由于 CVE 更新至 helm 3.19.4：https://github.com/helm/helm/releases/tag/v3.19.4（cherry-pick #25769 for 3.3）(#25774) (@argo-cd-cherry-pick-bot[bot])

其他工作

  • 675f8cfe3f073d4ec070b1fb67d6c577f08d21b6: 杂务(cherry-pick-3.3)：将 expr 升级至 v1.17.7（#25888）(@nitishfy)
  • efca5b9144fab9aa4d5aabb1a51d6340d8fa0bd4: 杂务：将各处 golang 版本升级至最新的 1.25.5（cherry-pick #25716 for 3.3）(#25808) (@argo-cd-cherry-pick-bot[bot])
  • 9ae26e4e74c1ef269f70a79ac8fca138eb9fbc31: CI：针对 k8s 1.34.2 进行测试（cherry-pick #25856 for 3.3）(#25858) (@argo-cd-cherry-pick-bot[bot])

完整变更日志: https://github.com/argoproj/argo-cd/compare/v3.3.0-rc3...v3.3.0-rc4

更新内容 （原始）

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0-rc4/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.0-rc4/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

  • 15568cb9d57200927dd15858508f882826529153: fix(appset): do not trigger reconciliation on appsets not part of allowed namespaces when updating a cluster secret (cherry-pick #25622 for 3.3) (#25909) (@argo-cd-cherry-pick-bot[bot])
  • b52a0750b2bf8c726d4a689000a723946f1c57b9: fix(hydrator): .gitattributes include deeply nested files (#25870) (cherry-pick #26011 for 3.3) (#26013) (@argo-cd-cherry-pick-bot[bot])
  • 48a9dcc23b962eafe0a74691769c2c891882ec31: fix(hydrator): empty links for failed operation (#25025) (cherry-pick #26014 for 3.3) (#26018) (@argo-cd-cherry-pick-bot[bot])
  • 0fa47b11b258da9a082a5b206e7fb175e70a9fdd: fix(hydrator): pass destination.namespace to manifest rendering (#25478) (cherry-pick #25699 for 3.3) (#26019) (@argo-cd-cherry-pick-bot[bot])
  • 32c32a67cb2d0e4077e6e474dade43c798458e59: fix: Only show please update resource specification message when spec… (cherry-pick #25066 for 3.3) (#25894) (@argo-cd-cherry-pick-bot[bot])
  • 74de77a24c80e0397f1c0f92e0f6ea9a19210e9d: fix: Toggle automated.enabled to disable auto-sync for rollbacks (cherry-pick #25719 for 3.3) (#25943) (@argo-cd-cherry-pick-bot[bot])
  • a6472c83935700e43756ea7c19e91c5ef83f509b: fix: allow docker dhi helm charts to be used (cherry-pick #25835 for 3.3) (#25964) (@argo-cd-cherry-pick-bot[bot])
  • cd6a9aaf3f8370d1c15afae9e7612420934d6f69: fix: cherry pick #25516 to release-3.3 (#26114) (@FourFifthsCode)
  • 8fbb44c336f06397840a7b626c6535d11b2183de: fix: close response body on error paths to prevent connection leak (cherry-pick #25824 for 3.3) (#26005) (@argo-cd-cherry-pick-bot[bot])
  • 3d64c21206c8756668df4eef2ef8f93014b16230: fix: invalid error message on health check failure (#26040) (cherry-pick #26039 for 3.3) (#26063) (@argo-cd-cherry-pick-bot[bot])
  • 28e8472c69f35ec14a8df4c703899dce517d266d: fix: nil and empty ignoredifferences (cherry-pick #25980 for 3.3) (#26000) (@argo-cd-cherry-pick-bot[bot])

Documentation

  • 8639b7be5e862a17b30efff441eb59ec3cd6a7d3: docs: added Helm 3.19.4 upgrade to the upgrade guide (#25776) (@reggie-k)

Dependency updates

  • ac071b57a156d13ab0c2b26a70fe8e4e3555b93c: chore(deps): update notifications-engine to fix GitHub PR comments nil panic (cherry-pick #26065 for 3.3) (#26075) (@soutar)
  • 369fb7577e58d34faacf6dae439e014c36496530: chore(deps): update notifications-engine to v0.5.1-0.20251223091026-8c0c96d8d530 (cherry-pick #25785 for 3.3) (#25853) (@argo-cd-cherry-pick-bot[bot])
  • 5de1e6472d272b2c506960111acaf9faaed536dc: chore(deps): update to helm 3.19.4 due to cve : https://github.com/helm/helm/releases/tag/v3.19.4 (cherry-pick #25769 for 3.3) (#25774) (@argo-cd-cherry-pick-bot[bot])

Other work

  • 675f8cfe3f073d4ec070b1fb67d6c577f08d21b6: chore(cherry-pick-3.3): bump expr to v1.17.7 (#25888) (@nitishfy)
  • efca5b9144fab9aa4d5aabb1a51d6340d8fa0bd4: chore: bumps golang version everywhere to the latest 1.25.5 (cherry-pick #25716 for 3.3) (#25808) (@argo-cd-cherry-pick-bot[bot])
  • 9ae26e4e74c1ef269f70a79ac8fca138eb9fbc31: ci: test against k8s 1.34.2 (cherry-pick #25856 for 3.3) (#25858) (@argo-cd-cherry-pick-bot[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.0-rc3...v3.3.0-rc4

下载链接