发布日期: 2026-07-31
版本号: v3.4.6

这是Argo CD v3.4.6版本的发布说明。用户可通过提供的kubectl命令快速安装非高可用或高可用版本。所有发布的容器镜像均经过cosign签名，并提供符合SLSA Level 3规范的出处证明。如果从其他次要版本升级，需参考相关升级文档。本次更新主要修复了包括应用集创建回退、Helm注册表密码传递、仓库服务器pprof启用在内的多项错误。

更新内容 （中文）

快速开始

非高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.6/manifests/install.yaml

高可用部署：

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.6/manifests/ha/install.yaml

发布签名与来源证明

所有Argo CD容器镜像均由cosign签名。符合SLSA Level 3规范的容器镜像和CLI二进制文件会生成来源证明。请参阅文档了解验证方法。

发布说明博文

关于本次发布关键变更与改进的详细分解，请查阅官方博文

升级指南

若从不同次版本进行升级，请务必阅读升级文档。

变更日志

错误修复

  • aa9970b380b8c2e9e7cb9bc93be08b52fc9164a1: 修复(appset)：当补丁操作返回NotFound时回退至创建操作 (#17312) (cherry-pick #28645 for 3.4) (#28718) (@rickbrouwer)
  • 9a91802c48b074fec01e1b07949c4e55caf146f8: 修复(diff)：过滤webhook变更时不再丢弃由manager拥有的后代字段 (cherry-pick #28819 for 3.4) (#28894) (@argo-cd-cherry-pick-bot[bot])
  • 4907a99fd2948bc0db78b0a9347cd3077dbba9f7: 修复(helm)：通过标准输入传递注册表密码 (#17821) (#28835) (@nitishfy)
  • b6d7c82be121ce650749bf07c8ece119313781dc: 修复：在repo-server中挂载argocd-cmd-params-cm以启用pprof (cherry-pick #28863 for 3.4) (#28864) (@argo-cd-cherry-pick-bot[bot])
  • cf7c4a73ffd6a9c41e245295cec30a1da21e17db: 修复：仅在实际资源未设置时进行注释回填 (cherry-pick #28770 for 3.4) (#28776) (@argo-cd-cherry-pick-bot[bot])
  • a3d8e280627905ff58d47e1dc84ea2965bfad7b8: 修复：渐进式同步修复 (3.4版本cherry-picks) (#29000) (@blakepettersson)
  • 2aa646b934fb5b48f9c03d8dee134a8870f08b10: 修复：当jti缺失时使用Entra ID uti声明作为令牌ID (#28625) (cherry-pick #28656 for 3.4) (#28676) (@argo-cd-cherry-pick-bot[bot])
  • 275d11ec49199ea83d6532d18a6ed6d2790150c7: 修复：使用OIDC刷新令牌续期过期会话 (#27041, #12189) (cherry-pick #27777 for 3.4) (#28688) (@argo-cd-cherry-pick-bot[bot])

其他工作

  • e1becb74c728a992804d39c3ceb2e9e6ae58f0ae: 维护：在release-3.4分支上将版本号升至3.4.6 (#28959) (@github-actions[bot])

完整变更日志：https://github.com/argoproj/argo-cd/compare/v3.4.5…v3.4.6

<a href="https://argoproj.github.io/cd/"><img src="https://raw.githubusercontent.com/argoproj/argo-site/master/content/pages/cd/gitops-cd.png" width="25%" >

更新内容 （原始）

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.6/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.6/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

  • aa9970b380b8c2e9e7cb9bc93be08b52fc9164a1: fix(appset): fall back to create when patch returns NotFound (#17312) (cherry-pick #28645 for 3.4) (#28718) (@rickbrouwer)
  • 9a91802c48b074fec01e1b07949c4e55caf146f8: fix(diff): don’t drop manager-owned descendant fields when filtering webhook mutations (cherry-pick #28819 for 3.4) (#28894) (@argo-cd-cherry-pick-bot[bot])
  • 4907a99fd2948bc0db78b0a9347cd3077dbba9f7: fix(helm): pass registry passwords through stdin (#17821) (#28835) (@nitishfy)
  • b6d7c82be121ce650749bf07c8ece119313781dc: fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (cherry-pick #28863 for 3.4) (#28864) (@argo-cd-cherry-pick-bot[bot])
  • cf7c4a73ffd6a9c41e245295cec30a1da21e17db: fix: only do annotation backfill if live unset (cherry-pick #28770 for 3.4) (#28776) (@argo-cd-cherry-pick-bot[bot])
  • a3d8e280627905ff58d47e1dc84ea2965bfad7b8: fix: progressive sync fixes (3.4 cherry-picks) (#29000) (@blakepettersson)
  • 2aa646b934fb5b48f9c03d8dee134a8870f08b10: fix: use Entra ID uti claim as token id when jti is absent (#28625) (cherry-pick #28656 for 3.4) (#28676) (@argo-cd-cherry-pick-bot[bot])
  • 275d11ec49199ea83d6532d18a6ed6d2790150c7: fix: use OIDC refresh tokens to renew expired sessions (#27041, #12189) (cherry-pick #27777 for 3.4) (#28688) (@argo-cd-cherry-pick-bot[bot])

Other work

  • e1becb74c728a992804d39c3ceb2e9e6ae58f0ae: chore: bump version to 3.4.6 on release-3.4 branch (#28959) (@github-actions[bot])

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.4.5...v3.4.6

下载链接