发布日期: 2026-07-31
版本号: v3.3.13

Argo CD v3.3.13版本提供了两种部署方式：非高可用模式通过创建argocd命名空间并应用官方安装清单文件即可快速部署；高可用模式则使用专门的HA安装清单。所有容器镜像均通过cosign签名，并生成符合SLSA Level 3规范的溯源证明。从其他次要版本升级时请务必参考官方升级文档。此版本主要修复了健康检查、Helm仓库密码传递、源代码深度处理、SSA认证调和、UI中已删除资源显示等多个问题，并更新了form-data和golang.org/x/crypto等依赖。

更新内容 （中文）

快速开始

非高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.13/manifests/install.yaml

高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.13/manifests/ha/install.yaml

版本签名与来源证明

所有 Argo CD 容器镜像均由 cosign 签名。对于符合 SLSA Level 3 规范的容器镜像和 CLI 二进制文件，会生成来源证明。请参阅文档了解验证方法。

版本说明博客文章

如需了解此版本关键变更和改进的详细分解，请查看官方博客文章

升级指南

如果从不同的次版本升级，请务必阅读升级文档。

变更日志

问题修复

  • 1853165f399f73d1ec567e6d7d8f4adc62c4d711: fix(health): configconnectorcontext 和 configconnector (#26308) (#26309) (3.3) (#28611) (@crenshaw-dev)
  • 2536ce315f8bf29b23e1519e85bff65038ac18b0: fix(helm): 通过 stdin 传递注册表密码 (#17821) (cherry-pick… (#28836) (@nitishfy)
  • 853e2c0caea4efd2ef7d2dcb3254d5b631e58a46: fix(reposerver): 遵循引用源的深度而非主源 (cherry-pick #28339 for 3.3) (#28342) (@alexandresavicki)
  • fac2752f152560331da5e0e96181e5e737fb80ba: fix(ssa): 不随 SSA 运行认证协调 (cherry pick of #28027 and #27601 to 3.3) (#28266) (@akhilnittala)
  • d73c512462fbfb55f32509cd4184ff5dc9e28aac: fix: 回退 "fix: 避免不必要调用 UpdateRevisionForPaths (#25151)" (cherry-pick #27241 for 3.3) (#28949) (@ranakan19)
  • 91a603b8059d12fb3ee1653304990f70823ca813: fix: 已删除资源在 UI 中错误显示 (cherry-pick #28322 for 3.3) (#28336) (@argo-cd-cherry-pick-bot[bot])
  • f6faa38bb234cc32e34da5903a42a2dbf9eb739d: fix: 在 "replace" 时不要覆盖非忽略字段 (cherry-pick #27136 for 3.3) (#28506) (@argo-cd-cherry-pick-bot[bot])
  • ea08dfae730aad73963b7e41d506f8c9913063d1: fix: 修复 dex 配置环境变量替换的回归问题 - Cherry pick of #28369 in 3.3 (#28410) (@ppapapetrou76)
  • 28d47f473d22055b290fde431a1650e13235ee8f: fix: 将 argocd-cmd-params-cm 挂载到 repo-server 以便启用 pprof (cherry-pick #28863 for 3.3) (#28865) (@argo-cd-cherry-pick-bot[bot])

依赖更新

  • 676d6f58ee5b434d190b05b882cd661dfab3de7e: chore(deps): 在 /ui 中将 form-data 升级至 4.0.6 以修复 CVE-2026-12143 (#28831) (@alkakumari016)
  • 5aa0befdbc1e359b49209b5d1948a0aa02ad4446: chore(deps): 将 golang.org/x/crypto 升级至 0.53.0 (release-3.3) (#28338) (@nmirasch)

其他工作

  • 58a3ab2df2390717685809caa0d0d180dc0bf70e: chore: 在 release-3.3 分支上将版本号升级至 3.3.13 (#28960) (@github-actions[bot])

完整变更日志: https://github.com/argoproj/argo-cd/compare/v3.3.12...v3.3.13

<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" >

更新内容 （原始）

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.13/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.13/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

  • 1853165f399f73d1ec567e6d7d8f4adc62c4d711: fix(health): configconnectorcontext and configconnector (#26308) (#26309) (3.3) (#28611) (@crenshaw-dev)
  • 2536ce315f8bf29b23e1519e85bff65038ac18b0: fix(helm): pass registry passwords through stdin (#17821) (cherry-pic… (#28836) (@nitishfy)
  • 853e2c0caea4efd2ef7d2dcb3254d5b631e58a46: fix(reposerver): honor depth of referenced source instead of primary source (cherry-pick #28339 for 3.3) (#28342) (@alexandresavicki)
  • fac2752f152560331da5e0e96181e5e737fb80ba: fix(ssa): do not run auth reconcile with SSA (cherry pick of #28027 and #27601 to 3.3) (#28266) (@akhilnittala)
  • d73c512462fbfb55f32509cd4184ff5dc9e28aac: fix: Revert “fix: avoid calling UpdateRevisionForPaths unnecessary (#25151)” (cherry-pick #27241 for 3.3) (#28949) (@ranakan19)
  • 91a603b8059d12fb3ee1653304990f70823ca813: fix: deleted resource are incorrectly shown in UI (cherry-pick #28322 for 3.3) (#28336) (@argo-cd-cherry-pick-bot[bot])
  • f6faa38bb234cc32e34da5903a42a2dbf9eb739d: fix: don’t clobber non-ignored fields on “replace” (cherry-pick #27136 for 3.3) (#28506) (@argo-cd-cherry-pick-bot[bot])
  • ea08dfae730aad73963b7e41d506f8c9913063d1: fix: fixes a regression of dex config env vars substituion - Cherry pick of #28369 in 3.3 (#28410) (@ppapapetrou76)
  • 28d47f473d22055b290fde431a1650e13235ee8f: fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (cherry-pick #28863 for 3.3) (#28865) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

  • 676d6f58ee5b434d190b05b882cd661dfab3de7e: chore(deps): bump form-data to 4.0.6 in /ui for fixing CVE-2026-12143 (#28831) (@alkakumari016)
  • 5aa0befdbc1e359b49209b5d1948a0aa02ad4446: chore(deps): bump golang.org/x/crypto to 0.53.0 (release-3.3) (#28338) (@nmirasch)

Other work

  • 58a3ab2df2390717685809caa0d0d180dc0bf70e: chore: bump version to 3.3.13 on release-3.3 branch (#28960) (@github-actions[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.12...v3.3.13

下载链接