v0.17.0

[chengfang]

What's Changed

• chore(deps): Upgrade argo-cd version to 2.13.6 by @aali309 in chore(deps): Upgrade argo-cd version to 2.13.6 #1078
• chore(deps): bump golangci-lint from v1.61.0 to v1.64.8 by @chengfang in chore(deps): bump golangci-lint from v1.61.0 to v1.64.8 #1094
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.12.0 to 2.14.0 by @dependabot[bot] in chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.12.0 to 2.14.0 #1084
• chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot[bot] in chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 #1085
• chore(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 #1086
• chore(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.11.0 to 0.12.0 in /registry-scanner #1091
• chore(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.1 by @dependabot[bot] in chore(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.1 #1088
• chore(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 in /registry-scanner by @dependabot[bot] in chore(deps): bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 in /registry-scanner #1090
• chore(deps): bump github.com/redis/go-redis/v9 from 9.7.1 to 9.7.3 by @dependabot[bot] in chore(deps): bump github.com/redis/go-redis/v9 from 9.7.1 to 9.7.3 #1095
• fix: respect log level settings by @wd in fix: respect log level settings #1101
• chore(deps): bump k8s.io/kubernetes to v1.32.2 by @aali309 in chore(deps): bump k8s.io/kubernetes to v1.32.2 #1075
• chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /registry-scanner #1106
• chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 by @dependabot[bot] in chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 #1105
• feat: Add GetDurationVal to handle optional duration config from env by @dkarpele in feat: Add GetDurationVal to handle optional duration config from env #1110
• feat: Support setting run --interval via env variable. by @dkarpele in feat: Support setting run --interval via env variable. #1107
• chore(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 in /registry-scanner #1116
• chore(deps): bump golang.org/x/oauth2 from 0.27.0 to 0.29.0 by @dependabot[bot] in chore(deps): bump golang.org/x/oauth2 from 0.27.0 to 0.29.0 #1118
• chore(deps): bump google.golang.org/grpc from 1.70.0 to 1.72.0 by @dependabot[bot] in chore(deps): bump google.golang.org/grpc from 1.70.0 to 1.72.0 #1117
• chore(deps): bump argo-cd from 2.13.6 to 2.13.7 by @chengfang in chore(deps): bump argo-cd from 2.13.6 to 2.13.7 #1123
• chore(docs): fix bold formatting in command flags in reference.md by @chengfang in chore(docs): fix bold formatting in command flags in reference.md #1114
• chore(deps): bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 by @dependabot[bot] in chore(deps): bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #1119
• chore(docs): update branch name description from SHA1 to SHA256 representation in docs/basics/update-methods.md by @ellisvalentiner in chore(docs): update branch name description from SHA1 to SHA256 representation in docs/basics/update-methods.md #1125
• feat: Add configuration option to scope application listing / getting to particular namespace by @grahamalama in feat: Add configuration option to scope application listing / getting to particular namespace #1112
• chore(docs): Update update strategy docs on deprecated strategy values by @jacekn in chore(docs): Update update strategy docs on deprecated strategy values #1132
• docs: add instructions to authenticate to Azure Container Registry with workload identity by @etiennetremel in docs: add instructions to authenticate to Azure Container Registry with workload identity #676
• chore(ci): update ci-tests.yaml and create-release-draft.yaml to use go version from go.mod by @cjcocokrisp in chore(ci): update ci-tests.yaml and create-release-draft.yaml to use go version from go.mod #1139
• chore(cleanup): Remove unimported file pkg/config/config.go by @chansuke in chore(cleanup): Remove unimported file pkg/config/config.go #1138
• refactor: replace global metrics initialization by @chansuke in refactor: replace global metrics initialization #1140
• chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.7 to 2.13.8 by @dependabot[bot] in chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.13.7 to 2.13.8 #1144
• chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 in /registry-scanner #1155
• chore(deps): bump golang.org/x/sync from 0.12.0 to 0.14.0 by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.12.0 to 0.14.0 #1148
• chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.38.0 by @dependabot[bot] in chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.38.0 #1150
• chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.14.0 to 2.16.0 by @dependabot[bot] in chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.14.0 to 2.16.0 #1149
• chore(deps): bump github.com/go-git/go-git/v5 from 5.13.2 to 5.16.0 by @dependabot[bot] in chore(deps): bump github.com/go-git/go-git/v5 from 5.13.2 to 5.16.0 #1152
• chore(deps): bump alpine from 3.21 to 3.22 by @dependabot[bot] in chore(deps): bump alpine from 3.21 to 3.22 #1154
• chore(docs): add missing image updater command flags by @cjcocokrisp in chore(docs): add missing image updater command flags #1146
• chore(docs): document all supported application annotations by @cjcocokrisp in chore(docs): document all supported application annotations #1156
• chore: improve registry-scanner/hack/create-release.sh by @cjcocokrisp in chore: improve registry-scanner/hack/create-release.sh #1157
• chore: upgrade golangci-lint from v1.64.8 to v2.1.6 and the related action from v6 to v8 by @cjcocokrisp in chore: upgrade golangci-lint from v1.64.8 to v2.1.6 and the related action from v6 to v8 #1160
• Add helpers to return a new context.Context that carries the provided logrus Entry. by @dkarpele in Add helpers to return a new context.Context that carries the provided logrus Entry. #1171
• fix: remove dummy digest and add comparison logic by @chansuke in fix: remove dummy digest and add comparison logic #1161
• chore(deps): upgrade registry-scanner by @dkarpele in chore(deps): upgrade registry-scanner #1184
• chore: use context.Background() instead of context.TODO() by @chansuke in chore: use context.Background() instead of context.TODO() #1163
• docs: fix typos by @chansuke in docs: fix typos #1169
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0 in /registry-scanner #1177
• chore(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 in /registry-scanner #1178
• chore(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 by @dependabot[bot] in chore(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 #1179
• chore(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot[bot] in chore(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 #1183
• chore(deps): bump github.com/go-git/go-git/v5 from 5.16.0 to 5.16.2 by @dependabot[bot] in chore(deps): bump github.com/go-git/go-git/v5 from 5.16.0 to 5.16.2 #1181
• chore(deps): bump sigs.k8s.io/kustomize/api from 0.18.0 to 0.20.0 by @dependabot[bot] in chore(deps): bump sigs.k8s.io/kustomize/api from 0.18.0 to 0.20.0 #1180
• chore(deps): bump github.com/argoproj/argo-cd/v2 from v2.13.8 to v2.14.15 by @cjcocokrisp in chore(deps): bump github.com/argoproj/argo-cd/v2 from v2.13.8 to v2.14.15 #1187
• fix: prevent concurrent registry credential refreshing by @korECM in fix: prevent concurrent registry credential refreshing #1175
• chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.27.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.27.0 in /registry-scanner #1191
• feat: implement webhook receiver for Docker, GHCR and Harbor to receive triggers for image update by @binhnguyenduc in feat: implement webhook receiver for Docker, GHCR and Harbor to receive triggers for image update #1159
• test(webhook): increase test coverage for server.go by @cjcocokrisp in test(webhook): increase test coverage for server.go #1194
• feat(webhook): add webhook handler for quay.io and make improvements to the community PR by @cjcocokrisp in feat(webhook): add webhook handler for quay.io and make improvements to the community PR #1197
• manifests(webhook): expose webhook feature by @cjcocokrisp in manifests(webhook): expose webhook feature #1198
• chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 in /registry-scanner by @dependabot[bot] in chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 in /registry-scanner #1204
• chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] in chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 #1202
• chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 #1200
• chore(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in chore(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 #1199
• chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.8.1 to 4.9.1 by @dependabot[bot] in chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.8.1 to 4.9.1 #1203
• chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] in chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 #1201
• docs(webhook): add documentation for webhook feature by @cjcocokrisp in docs(webhook): add documentation for webhook feature #1207
• feat: Allow yaml.SequenceNode type by @AntonShadrinNN in feat: Allow yaml.SequenceNode type #1208
• feat(webhook): add rate limiting to webhook endpoint by @cjcocokrisp in feat(webhook): add rate limiting to webhook endpoint #1210
• Feature/allow no exists helmvalues file by @will4j in Feature/allow no exists helmvalues file #1212
• chore(crd): add deprecation warnings for CRD branch removed functionality by @dkarpele in chore(crd): add deprecation warnings for CRD branch removed functionality #1223
• fix: whitespace only values.yaml files fail parsing by @MenD32 in fix: whitespace only values.yaml files fail parsing #1228
• chore: add dkarpele as maintainer and chengfang as owner by @chengfang in chore: add dkarpele as maintainer and chengfang as owner #1230
• chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.14.15 to 2.14.16 by @dependabot[bot] in chore(deps): bump github.com/argoproj/argo-cd/v2 from 2.14.15 to 2.14.16 #1229
• chore(deps): bump registry-scanner version to the latest in master, and activate the its replace clause for development by @chengfang in chore(deps): bump registry-scanner version to the latest in master, and activate the its replace clause for development #1234
• feat(registry): Improve repository selection, based on prefixes in config and full image name by @chengfang in feat(registry): Improve repository selection, based on prefixes in config and full image name #1233
• Add support for JSON log formatting by @mikepilat in Add support for JSON log formatting #1231
• chore(deps): bump go version in registry-scanner from 1.23.5 to 1.24.6 to be consistent with image updater main module by @chengfang in chore(deps): bump go version in registry-scanner from 1.23.5 to 1.24.6 to be consistent with image updater main module #1241
• chore(ci): set the correct working-directory in registry-scanner ci job by @chengfang in chore(ci): set the correct working-directory in registry-scanner ci job #1248
• Reuse transport of registry-scanner by @rainsun in Reuse transport of registry-scanner #1215
• chore(lint): fix some minor lint errors in registry-scanner submodule by @chengfang in chore(lint): fix some minor lint errors in registry-scanner submodule #1251
• chore(deps): bump registry-scanner from 0.1.0 to 0.2.0 by @chengfang in chore(deps): bump registry-scanner from 0.1.0 to 0.2.0 #1253
• Release 0.17.0 by @chengfang in Release 0.17.0 #1254

New Contributors

• @ellisvalentiner made their first contribution in chore(docs): update branch name description from SHA1 to SHA256 representation in docs/basics/update-methods.md #1125
• @grahamalama made their first contribution in feat: Add configuration option to scope application listing / getting to particular namespace #1112
• @jacekn made their first contribution in chore(docs): Update update strategy docs on deprecated strategy values #1132
• @etiennetremel made their first contribution in docs: add instructions to authenticate to Azure Container Registry with workload identity #676
• @cjcocokrisp made their first contribution in chore(ci): update ci-tests.yaml and create-release-draft.yaml to use go version from go.mod #1139
• @chansuke made their first contribution in chore(cleanup): Remove unimported file pkg/config/config.go #1138
• @korECM made their first contribution in fix: prevent concurrent registry credential refreshing #1175
• @binhnguyenduc made their first contribution in feat: implement webhook receiver for Docker, GHCR and Harbor to receive triggers for image update #1159
• @AntonShadrinNN made their first contribution in feat: Allow yaml.SequenceNode type #1208
• @will4j made their first contribution in Feature/allow no exists helmvalues file #1212
• @MenD32 made their first contribution in fix: whitespace only values.yaml files fail parsing #1228
• @mikepilat made their first contribution in Add support for JSON log formatting #1231
• @rainsun made their first contribution in Reuse transport of registry-scanner #1215

Full Changelog: v0.16.0...v0.17.0

---

This discussion was created from the release v0.17.0.

[chengfang]

Image published to quay.io: https://quay.io/repository/argoprojlabs/argocd-image-updater?tab=tags

[chengfang]

Thanks to the participation of this great community, from submitting PRs, issues, discussions, and sharing your user experience, we were able to include numerous bug and CVE fixes, library upgrades, and new features into this long-awaited release. Ideally, we should've released it often, and early. Some of the new features include webhook support, registry scanner http transport pooling, json logging format, better handling of non-existent and empty helm values file. See github discussion for a complete list.

Looking ahead, we'll shift our focus to the crd-based configuration and controller-based reconciliation, and phase out the annotation-based application configuration. You may have noticed the development activities in crd branch, which contains all the work we've been done to implement image updater CRD and controller, and this will be the main driver of our 1.0.0 release in the future. In the meantime, we'll continue to address critical issues in 0.17.x releases, and help users adopt the crd-based configuration once 1.0.0 is available.