- 2.4.x reaches end‑of‑life; users must upgrade to 2.5 to continue receiving security updates.
- Breaking change: the API now returns HTTP 401 Unauthorized instead of 404 Not Found for non‑existent Applications, which may break clients relying on the previous response.
- Security fix prevents enumeration of Application names; all container images and CLI binaries are now signed with cosign.
v2.4.28
Official Argo CD changelog summary with source attribution, release tags, and community reactions.
Track this Argo CD release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Argo CD release note into a weekly digest for the tools you actually use.
Create digestMore Argo CD changelog updates
All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for verification.
All Argo CD container images and CLI binaries are now signed with cosign and include SLSA Level 3 provenance for verification (security).
All Argo CD container images are now signed with cosign and include SLSA Level 3 provenance for verification.