0.30.2

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.30.2

Bug fixes

• security fixes

0.30.1

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.30.1

Bug fixes

• security fixes

0.30.0

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.30.0

⚠️ Breaking Changes

1. This release bumps the bundled ArgoCD to v3.4.6 .
   ArgoCD 3.4 introduces a breaking change to cluster version reporting:

• Cluster version format change: ArgoCD now stores/reports Kubernetes cluster versions as vMajor.Minor.Patch instead of the previous Major.Minor format, to align with how Helm 3.19.0+ interprets versions.
• Application Sets with Cluster Generators, that fetch clusters based on their Kubernetes version and use argocd.argoproj.io/auto-label-cluster-info on the cluster secret, need to be updated to use argocd.argoproj.io/kubernetes-version with the vMajor.Minor.Patch format instead of the previous Major.Minor format. More details here.
• API, UI, and CLI cluster info queries return the new format Major.Minor.Patch instead of the previous format Major.Minor.
  Please reader full changelog here: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/3.3-3.4/

2. Increased minimal supported version of BYOA up from 3.2

Behavior Changes (non-breaking, but worth calling out)

• Application health status refinement: an Application now shows Missing health only when all of its resources are missing (e.g. before the first sync). Previously, any missing resource could degrade the overall health. If your automation depends on health status to detect missing resources, switch to checking OutOfSync instead.
• gRPC DNS TXT lookups disabled by default: GRPC_ENABLE_TXT_SERVICE_CONFIG now defaults to false, avoiding excessive _grpc_config.<hostname> DNS TXT queries (this was causing timeouts/crashes in dual-stack IPv4+IPv6 clusters). Re-enable via controller.grpc.enable.txt.service.config: "true" in argocd-cmd-params-cm if you rely on it.

Dependency Upgrades

Component	Change
ArgoCD	v3.3.x → v3.4.6
Dex	→ v2.45.0 (ContinueOnConnectorFailure now enabled by default)
go-oidc	→ v3.17.0 (token signature is now verified before claims are parsed — expired tokens signed with rotated keys will redirect to login instead of silent SSO)
OpenTelemetry	→ v1.42.0 (metric names/attributes updated per semantic conventions v1.40.0 — review Grafana dashboards/alerts)

---

Chart changes

• chore: fix security vulnarabilities (#1256 )

0.29.22

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.29.22

Chart changes

• chore: fix security vulnarabilities (#1247)
• chore: fix various security vulnerabilities for argo-workflows (#1246)

0.29.21

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.29.21

Chart changes

• chore: fix security vulnerabilities for csdp-image-enrichers

0.29.20

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.29.20

Chart changes

• chore: fix various security vulnerabilities for cap-app-proxy (#1237)

0.29.19

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.29.19

Chart changes

• chore: fix various security vulnerabilities for argo-gateway, codefresh-gitops-operator, csdp-image-enrichers, cap-app-proxy (#1234)

0.29.18

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.29.18

Chart changes

• fix: version of applications with a Helm-only source (#1232)
• fix: add ignoreDifference to the in-cluster application to prevent drift detection

0.29.17

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.29.17

Chart changes

• fix(cf-argocd-extras): security fix, bump image tag to ace3860 (#1227)

0.29.16

Installation

To get Helm chart for this release run:

helm pull oci://quay.io/codefresh/gitops-runtime --version 0.29.16

Chart changes

• fix(internal-router): bump nginx-unprivileged for security fix (#1223)