Update quay.io/argoproj/argocd Docker tag to v2.3.17 - autoclosed

[vshn-renovate]

This PR contains the following updates:

Package	Update	Change
quay.io/argoproj/argocd	patch	v2.3.12 -> v2.3.17

---

Release Notes

argoproj/argo-cd (quay.io/argoproj/argocd)

v2.3.17

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.17/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.17/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

2.3.x has reached EOL

This is the last patch release in the 2.3 series. Please upgrade to >=2.4 to continue to receive security updates. Read the upgrading documentation before upgrading.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 4 contributions from 3 contributors with 0 features and 0 bug fixes.

Security (1)

• CRITICAL: Users with any cluster secret update access may update out-of-bounds cluster secrets (GHSA-3jfq-742w-xg8j)

Documentation (2)

• docs: Fix heading to not include a v for the second version (#​12218)
• docs: add destination.name example (#​12242)

Other (1)

• chore: add dist to path to use our kustomize version (#​12352)

v2.3.16

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.16/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.16/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 8 contributions from 7 contributors (4 of them new) with 0 features and 2 bug fixes.

A special thanks goes to the 4 new contributors:

• Adam Jensen
• James Brady
• Nobuo Takizawa
• Panagiotis Georgiadis

Bug fixes (2)

• fix: Upgrade gopkg.in/yaml.v2 to v2.2.4 (#​12248)
• fix: Upgrade goutils to v1.1.1 [release-2.3] (#​12219) (#​12223)

Documentation (3)

• docs: Fix copy that refers to a different CLI flag (#​12236)
• docs: Clarify directory recursion (#​12037)
• docs: Fix list formatting in "Resource Actions" docs page (#​12061)

Other (3)

• chore(deps): bump docker/setup-buildx-action from 2.2.1 to 2.4.0 (#​12227)
• chore(deps): bump actions/cache from 3.2.3 to 3.2.4 (#​12228)
• chore: Update dex's image tag that is forgotten to be updated (#​12234)

v2.3.15

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.15/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.15/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 2 contributions from 2 contributors (1 of them new) with 0 features and 2 bug fixes.

A special thanks goes to the 1 new contributors:

• Eugen Friedland

Bug fixes (2)

• fix(health): Handling SparkApplication CRD health status if dynamic allocation is enabled (#​7557) (#​11522)
• fix: add CLI client IDs to default OIDC allowed audiences (#​12170) (#​12179)

v2.3.14

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.14/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.14/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues

If you use the bundled Dex instance for SSO, a bug in 2.3.14 will prevent CLI clients from successfully authenticating with the Argo CD API. A patch for the bug is being tested as of Friday, Jan 27, and a fix will be released shortly.

Changes

This release includes 2 contributions from 2 contributors with 0 features and 0 bug fixes.

Security (1)

• CRITICAL: JWT audience claim is not verified (GHSA-q9hr-j4rf-8fjc)

Other (1)

• chore: disable docker sbom and attestations (#​12059)

v2.3.13

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.13/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.3.13/manifests/ha/install.yaml

Release signatures

All Argo CD container images and CLI binaries are signed by cosign. See the documentation on how to verify the signatures.

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEesHEB7vX5Y2RxXypjMy1nI1z7iRG
JI9/gt/sYqzpsa65aaNP4npM43DDxoIy/MQBo9s/mxGxmA+8UXeDpVC9vw==
-----END PUBLIC KEY-----

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changes

This release includes 20 contributions from 8 contributors (3 of them new) with 0 features and 2 bug fixes.

A special thanks goes to the 3 new contributors:

• Gaël Jourdan-Weil
• Matt Clegg
• yanyx

Bug fixes (2)

• fix: ssa e2e tests failing after updating to kubectl 1.26 (#​11753)
• fix: sign container images by digest (#​11151)

Documentation (4)

• docs: note risks of secret-injection plugins (#​11617)
• docs: clarify project destination possibilities (#​11706)
• docs: correct SSO configuration URL in example configmap (#​11720)
• docs: Update example dockerfile (#​11721)

Other (14)

• chore: upgrade github.com/prometheus/client_golang to v1.11.1 to avoid CVE-2022-21698 (#​12015)
• chore(deps): bump actions/cache from 3.2.2 to 3.2.3 (#​11928)
• chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 (#​11895)
• Revert "fix: ssa e2e tests failing after updating to kubectl 1.26 (#​11753)"
• chore(deps): bump actions/setup-node from 3.5.1 to 3.6.0 (#​11896)
• chore(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 (#​11929)
• chore: upgrade redis to 6.2.8 to avoid CVE-2022-3996 (#​11926)
• chore(deps): bump actions/cache from 3.2.0 to 3.2.2 (#​11839)
• chore(deps): bump actions/download-artifact from 3.0.1 to 3.0.2 (#​11894)
• chore(deps): bump actions/cache from 3.0.11 to 3.2.0 (#​11809)
• chore: fix lint error (#​11788)
• chore: get image digest in seperate step (#​11778)
• chore(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#​11697)
• doc: correct kustomize demo path (#​11762)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.