Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.8/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.8.8/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Known Issues

The security patch causes major issues in the UI (many UI actions simply fail). A fix is available in 2.8.9.

Changes

This release fixes a security issue: https://github.com/argoproj/argo-cd/security/advisories/GHSA-92mw-q256-5vwg

🚨 Important: The security fix includes a breaking API change. Please read the GHSA before upgrading! 🚨

Bug fixes (6)

• fix(ui): set content-type for certain UI requests (#16923) (#16930) (#16934)
• fix: enforce content type header for API requests (#16860) (Cherry-pick release-2.8) (#16879)
• fix(action): Add missing owner refs and annotation to create-job action (#16607) (#16609)
• fix(grpcproxy): add missing GRPCKeepAliveEnforcementMinimum - Cherrypick 2.8 (#16566)
• fix(appset): Don't use revision cache when reconciling after webhook (#16062) (#16241) (#16543)
• fix: check for double definition (#16435)

Documentation (1)

• docs: Fix format issue in rbac.md (#16521) (#16539)

Other (1)

• chore(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#16913)