发布日期: 2026-04-30
版本号: v3.3.9

Argo CD v3.3.9版本发布，此版本包含针对一个关键漏洞的重要安全修复。主要变更包括修复了服务端重复删除操作错误、UI日志查看器崩溃问题、ApplicationSet生成器在某些值下的panic问题，以及OCI元数据缓存问题。同时更新了文档和依赖项。安装时可选择非高可用或高可用模式，通过kubectl命令部署。所有发布镜像均经过cosign签名，符合SLSA Level 3来源验证标准。若从其他版本升级，请务必参阅升级文档。

更新内容 （中文）

[!IMPORTANT] 此版本包含针对严重漏洞的安全修复：https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3

快速开始

非高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/install.yaml

高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/ha/install.yaml

发布签名与出处证明

所有Argo CD容器镜像均由cosign签名。满足SLSA Level 3规范的容器镜像和CLI二进制文件会生成出处证明。验证方法请参阅文档。

发布说明博文

欲了解此版本关键变更与改进的详细分解，请查阅官方博文。

升级指南

若从不同次版本进行升级，请务必阅读升级文档。

变更日志

缺陷修复

  • 81786559682714d487536a919e2f37137f47f481: fix(server): 避免执行第二次删除操作时出现错误 (cherry-pick #27495 for 3.3) (#27501) (@argo-cd-cherry-pick-bot[bot])
  • c89b3a96ae0b48f77a4edf821822059eb3d92188: fix(ui): 防止Pod日志查看器因过时容器索引而崩溃 (cherry-pick #27553 for 3.3) (#27565) (@argo-cd-cherry-pick-bot[bot])
  • 96107fe7a3edbd1152468897a8f6433f3288b034: fix: ApplicationSet DuckType生成器在集群非字符串值上发生panic (cherry-pick #27265 for 3.3) (#27525) (@argo-cd-cherry-pick-bot[bot])
  • 741a6f59650ba4f892fbad276f097f2732718a38: fix: 将OCI元数据存入/取出Redis缓存 (#27521) (cherry-pick #27589 for 3.3) (#27593) (@argo-cd-cherry-pick-bot[bot])

文档

  • 5a3a892ed3b705bfb122df6173c44a8689a4f9f6: docs: 修正渐进式同步功能版本说明，反映v3.3.0中的Beta正式发布 (cherry-pick #27608 for 3.3) (#27612) (@argo-cd-cherry-pick-bot[bot])

依赖更新

  • 0a2ba7c4c16c711532e557bd8d796d7fda95c745: chore(deps): 将SonarSource/sonarqube-scan-action从7.0.0升级至8.0.0 (cherry pick #27602 to release-3.3) (#27610) (@dudinea)
  • 184b8a915ac2fc4b467395465912fc943fb5cdd7: chore(deps): 升级Go版本以解决CVE漏洞 (#27509) (@crenshaw-dev)

其他工作

  • fd7ecb33235498cc0913b9444d327a289a0ab218: 从fork合并提交 (@alexmt)

完整变更日志：https://github.com/argoproj/argo-cd/compare/v3.3.8…v3.3.9

<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" >

更新内容 （原始）

[!IMPORTANT] This release contains a security fix to a critical vulnerability: https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.3.9/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

  • 81786559682714d487536a919e2f37137f47f481: fix(server): Avoid error when attempting a second delete operation (cherry-pick #27495 for 3.3) (#27501) (@argo-cd-cherry-pick-bot[bot])
  • c89b3a96ae0b48f77a4edf821822059eb3d92188: fix(ui): prevent pod logs viewer crash on stale container index (cherry-pick #27553 for 3.3) (#27565) (@argo-cd-cherry-pick-bot[bot])
  • 96107fe7a3edbd1152468897a8f6433f3288b034: fix: ApplicationSet DuckType Generator panics on non-string values in Clus… (cherry-pick #27265 for 3.3) (#27525) (@argo-cd-cherry-pick-bot[bot])
  • 741a6f59650ba4f892fbad276f097f2732718a38: fix: put/get ocimetadata to/from redis cache (#27521) (cherry-pick #27589 for 3.3) (#27593) (@argo-cd-cherry-pick-bot[bot])

Documentation

  • 5a3a892ed3b705bfb122df6173c44a8689a4f9f6: docs: fix progressive sync since version to reflect beta promotion in v3.3.0 (cherry-pick #27608 for 3.3) (#27612) (@argo-cd-cherry-pick-bot[bot])

Dependency updates

  • 0a2ba7c4c16c711532e557bd8d796d7fda95c745: chore(deps): bump SonarSource/sonarqube-scan-action from 7.0.0 to 8.0.0 (cherry pick #27602 to release-3.3) (#27610) (@dudinea)
  • 184b8a915ac2fc4b467395465912fc943fb5cdd7: chore(deps): bump go version to resolve CVEs (#27509) (@crenshaw-dev)

Other work

  • fd7ecb33235498cc0913b9444d327a289a0ab218: Merge commit from fork (@alexmt)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.3.8...v3.3.9

下载链接