Skip to content

Releases: argoproj-labs/gitops-promoter

v0.27.0

Choose a tag to compare

@github-actions github-actions released this 15 Apr 15:35
Immutable release. Only release title and notes can be modified.
fed1ce4
GitOps Promoter

If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.


Changelog

Features

Bug fixes

Documentation

Dependency updates

Other work

Verifying this release (Sigstore / cosign)

Container image (for tag v0.27.0):

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.27.0' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:v0.27.0

latest images on Quay are signed from release-latest.yaml on main:

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release-latest.yaml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:latest

Checksums file: The checksums file is signed with Sigstore. Download gitops-promoter_0.27.0_checksums.txt and its .sigstore.json bundle, then verify:

cosign verify-blob \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.27.0' \
  --bundle gitops-promoter_0.27.0_checksums.txt.sigstore.json \
  gitops-promoter_0.27.0_checksums.txt

Then verify any downloaded artifact against the checksums file:

sha256sum -c gitops-promoter_0.27.0_checksums.txt --ignore-missing

Full Changelog: v0.26.3...v0.27.0

v0.26.3

Choose a tag to compare

@github-actions github-actions released this 08 Apr 16:01
Immutable release. Only release title and notes can be modified.
8ea5465
GitOps Promoter

If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.


Changelog

Bug fixes

Documentation

  • 8ea5465: docs: bump manifest versions to v0.26.3 (#1308) (@github-actions[bot])

Other work

Verifying this release (Sigstore / cosign)

Container image (for tag v0.26.3):

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.26.3' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:v0.26.3

latest images on Quay are signed from release-latest.yaml on main:

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release-latest.yaml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:latest

Checksums file: The checksums file is signed with Sigstore. Download gitops-promoter_0.26.3_checksums.txt and its .sigstore.json bundle, then verify:

cosign verify-blob \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.26.3' \
  --bundle gitops-promoter_0.26.3_checksums.txt.sigstore.json \
  gitops-promoter_0.26.3_checksums.txt

Then verify any downloaded artifact against the checksums file:

sha256sum -c gitops-promoter_0.26.3_checksums.txt --ignore-missing

Full Changelog: v0.26.2...v0.26.3

v0.26.2

Choose a tag to compare

@github-actions github-actions released this 07 Apr 23:02
a630331
GitOps Promoter

This release comes with major improvements to the WebRequestCommitStatus as well as new metrics to track the number of Promoter resources being managed. It also fixes a major bug with GitLab CommitStatus support.

Note

0.26.0 and 0.26.1 were skipped as we worked through CI issues. 0.26.2 is the first release in the 0.26 series.


If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.


Changelog (since v0.25.1)

Features

  • feat: support promotionstrategy context for WRCS (#1259)
  • feat(security): signed releases (#1272)
  • feat(metrics): resource count gauge (#1260)

Bug fixes

  • fix(gitlab,api): optimize commit status updates and improve error handling (#1187)
  • fix(ci): only sign checksums (#1300)
  • fix(utils): UTF-8-safe TruncateStringFromBeginning; add fuzz CI and docs (#1293)
  • fix: replace panic with proper error returns in Forgejo and Gitea provider constructors (#1295)

Documentation

  • docs: bump manifest versions to v0.26.2 (#1301)
  • docs: bump manifest versions to v0.26.1 (#1299)
  • docs: bump manifest versions to v0.26.0 (#1297)
  • docs: example of linking to the ui (#1287)
  • docs: Add Contributor Covenant Code of Conduct (#1288)
  • docs: security info in docs, testing expectations (#1273)
  • docs: set dimensions on readme logo (#1267)
  • docs: Add OpenSSF Best Practices badge to README (#1266)
  • docs: fix grammar in tutorial-argocd-apps.md (#1265)
  • docs: contributing.md (#1261)
  • docs: add MAINTAINERS.md (#1263)
  • docs: add roadmap (#1262)

Dependency updates

  • chore(deps-dev): bump vite from 7.3.1 to 7.3.2 in /ui/dashboard (#1294)
  • chore(deps): bump vite from 8.0.3 to 8.0.5 in /ui/extension (#1291)
  • chore(deps): bump github.com/ktrysmt/go-bitbucket from 0.9.94 to 0.9.95 (#1289)
  • chore(deps): bump renovatebot/github-action from 46.1.7 to 46.1.8 (#1290)
  • chore(deps): update dependency regex to v2026.4.4 (#1281)
  • chore(deps): update dependency python to 3.14 (#1280)
  • chore(deps): update dependency pymdown-extensions to v10.21.2 (#1278)
  • chore(deps): update dependency mkdocs-get-deps to v0.2.2 (#1276)
  • chore(deps): update dependency eslint to v9.39.4 (#1275)
  • chore(deps): update dependency charset-normalizer to v3.4.7 (#1274)
  • chore(deps): update dependency ts-loader to v9.5.7 (#1271)
  • chore(deps): bump go to 1.26.1 (#1270)
  • chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#1264)
  • chore(deps): bump sigs.k8s.io/multicluster-runtime from 0.23.1 to 0.23.3 (#1256)
  • chore(deps): bump code.gitea.io/sdk/gitea from 0.23.2 to 0.24.1 (#1234)
  • chore(deps): bump docker/setup-docker-action from cb6cea3aa805e0f60b506fa07d08dbce8a08a60b to 994c3d50f9b4a990bfb91dced73607ccbc906a1c (#1257)
  • chore(deps): bump crate-ci/typos from 1.44.0 to 1.45.0 (#1258)
  • chore(deps): bump docker/setup-docker-action from 9d5b7667da0bfb2b97a34cc5758fa9bf41bbd6bb to cb6cea3aa805e0f60b506fa07d08dbce8a08a60b (#1255)

Other work

  • chore(ci): revert require release description (#1298)
  • chore(ci): require release description (#1292)
  • chore: update mkdocs-material to 9.7.6 and mkdocs-redirects to 1.2.3 (#1283)
  • test(ui): upload coverage to codecov (#1269)
  • test(refactor): different names for different resources (#1253)

Verifying this release (Sigstore / cosign)

Container image (for tag v0.26.2):

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.26.2' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:v0.26.2

latest images on Quay are signed from release-latest.yaml on main:

cosign verify \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release-latest.yaml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  quay.io/argoprojlabs/gitops-promoter:latest

Checksums file: The checksums file is signed with Sigstore. Download gitops-promoter_0.26.2_checksums.txt and its .sigstore.json bundle, then verify:

cosign verify-blob \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-identity 'https://github.com/argoproj-labs/gitops-promoter/.github/workflows/release.yaml@refs/tags/v0.26.2' \
  --bundle gitops-promoter_0.26.2_checksums.txt.sigstore.json \
  gitops-promoter_0.26.2_checksums.txt

Then verify any downloaded artifact against the checksums file:

sha256sum -c gitops-promoter_0.26.2_checksums.txt --ignore-missing

Full Changelog: v0.25.1...v0.26.2

v0.25.1

Choose a tag to compare

@github-actions github-actions released this 31 Mar 20:37
42a6d68
GitOps Promoter

If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.


Changelog

Bug fixes

Documentation

  • 42a6d68: docs: bump manifest versions to v0.25.1 (#1254) (@github-actions[bot])

Dependency updates

Full Changelog: v0.25.0...v0.25.1

v0.25.0

Choose a tag to compare

@github-actions github-actions released this 20 Mar 18:32
4e5821c
GitOps Promoter

If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.


Changelog

Features

Bug fixes

Documentation

Dependency updates

Other work

Full Changelog: v0.24.0...v0.25.0

v0.24.0

Choose a tag to compare

@github-actions github-actions released this 13 Mar 19:44
fd05e1a

gitops-promoter

2026-03-13T19:17:09Z

Container images

  • quay.io/argoprojlabs/gitops-promoter:v0.24.0

Changelog

Features

Bug fixes

Documentation

  • fd05e1a: docs: bump manifest versions to v0.24.0 (#1192) (@github-actions[bot])

Dependency updates

  • ff88239: chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 (#1183) (@dependabot[bot])
  • 2469c12: chore(deps): update dependency @vitejs/plugin-react to v5 (#1166) (@gitops-promoter-renovate-bot[bot])

Full Changelog: v0.23.1...v0.24.0


If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.

v0.23.1

Choose a tag to compare

@github-actions github-actions released this 10 Mar 20:22
7e75be1

gitops-promoter

2026-03-10T19:45:10Z

Container images

  • quay.io/argoprojlabs/gitops-promoter:v0.23.1

Changelog

Bug fixes

Documentation

  • 7e75be1: docs: bump manifest versions to v0.23.1 (#1182) (@github-actions[bot])

Dependency updates

  • eabe845: chore(deps): bump docker/setup-docker-action from a9a8a9dfba19f6d3512ac34364db2d6b7371c7d7 to d9a54c7876e8942f9e63816d1e23168466c7adfa (#1180) (@dependabot[bot])

Full Changelog: v0.23.0...v0.23.1


If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.

v0.23.0

Choose a tag to compare

@github-actions github-actions released this 10 Mar 00:57
4047f5e

gitops-promoter

The v0.23.0 release comes with one of our most-requested features: a commit status that queries arbitrary HTTP services, including the SCM! This allows you to use CI checks that are already configured in your SCM and reflect them back into the GitOps Promoter interface.

Check out the documentation, give it a try, and tell us how it goes!

Changelog

Features

Bug fixes

Documentation

Dependency updates

  • 3e90f58: chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#1145) (@dependabot[bot])
  • 5b89c3e: chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#1152) (@dependabot[bot])
  • eb875ff: chore(deps): bump docker/setup-docker-action from 2d1c60152387c7158db7c27ab8ef0fc4412e5b0b to da08d0c6e001ad2b65101c000e79548669fc7050 (#1140) (@dependabot[bot])
  • f15385d: chore(deps): bump docker/setup-docker-action from da08d0c6e001ad2b65101c000e79548669fc7050 to a9a8a9dfba19f6d3512ac34364db2d6b7371c7d7 (#1168) (@dependabot[bot])
  • d575423: chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#1151) (@dependabot[bot])
  • 77a68ac: chore(deps): bump github/codeql-action from 4.32.4 to 4.32.5 (#1139) (@dependabot[bot])
  • 1e38515: chore(deps): bump github/codeql-action from 4.32.5 to 4.32.6 (#1155) (@dependabot[bot])
  • 7f1c5db: chore(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 (#1170) (@dependabot[bot])
  • ff0a721: chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 (#1169) (@dependabot[bot])
  • 4a7b6ee: chore(deps): bump golang.org/x/time from 0.14.0 to 0.15.0 (#1172) (@dependabot[bot])
  • cd547a1: chore(deps): bump immutable from 5.1.3 to 5.1.5 in /ui/dashboard (#1150) (@dependabot[bot])
  • 48b66c7: chore(deps): bump immutable from 5.1.3 to 5.1.5 in /ui/extension (#1148) (@dependabot[bot])
  • 491c354: chore(deps): bump k8s.io/apiextensions-apiserver from 0.35.0 to 0.35.2 (#1156) (@dependabot[bot])
  • c4685ae: chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 (#1171) (@dependabot[bot])
  • de4193e: chore(deps): bump renovatebot/github-action from 46.1.3 to 46.1.4 (#1173) (@dependabot[bot])
  • 7dbff86: chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 (#1157) (@dependabot[bot])
  • c8445fa: chore(deps): update dependency @types/react to v19.2.10 (#975) (@gitops-promoter-renovate-bot[bot])
  • b939f94: chore(deps): update dependency @types/react to v19.2.14 (#1164) (@gitops-promoter-renovate-bot[bot])
  • 9e64894: chore(deps): update dependency css-loader to v7.1.3 (#980) (@gitops-promoter-renovate-bot[bot])
  • 455035c: chore(deps): update dependency node to v24 (#982) (@gitops-promoter-renovate-bot[bot])
  • 0a37064: chore(deps): update dependency zustand to v5.0.11 (#981) (@gitops-promoter-renovate-bot[bot])
  • 93f33c1: chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 in /ui/extension (#1135) (@dependabot[bot])

Other work

Full Changelog: v0.22.7...v0.23.0


If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.

v0.22.7

Choose a tag to compare

@github-actions github-actions released this 02 Mar 18:42
b9f6773

gitops-promoter

2026-03-02T18:31:14Z

Container images

  • quay.io/argoprojlabs/gitops-promoter:v0.22.7

Changelog

Bug fixes

Documentation

  • 8f10f09: docs(cli): add info about command line (#1080) (@emirot)
  • 7c800ea: docs: add ArtifactHub link to install instructions (#1123) (@Copilot)
  • 1866da0: docs: add USERS.md and discussion prompts to README and release notes (#1117) (@Copilot)
  • eab62da: docs: add documentation for increasing controller log verbosity (#1101) (@Copilot)
  • b9f6773: docs: bump manifest versions to v0.22.7 (#1137) (@github-actions[bot])

Dependency updates

Other work

Full Changelog: v0.22.6...v0.22.7


If you're using GitOps Promoter, please add yourself to USERS.md!

If you're evaluating GitOps Promoter, we'd love to hear from you — please open a discussion to share your feedback.

v0.22.6

Choose a tag to compare

@github-actions github-actions released this 19 Feb 16:30
2217e1d

What's Changed

  • chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.29.0 to 1.30.0 by @dependabot[bot] in #1043
  • chore(deps): bump the k8s-deps group with 3 updates by @dependabot[bot] in #1042
  • chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.30.0 to 1.31.0 by @dependabot[bot] in #1045
  • chore(deps): bump renovatebot/github-action from 46.0.2 to 46.1.0 by @dependabot[bot] in #1048
  • chore(deps): bump github/codeql-action from 4.32.2 to 4.32.3 by @dependabot[bot] in #1055
  • chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.31.0 to 1.34.0 by @dependabot[bot] in #1054
  • chore(deps): bump crate-ci/typos from 1.43.4 to 1.43.5 by @dependabot[bot] in #1059
  • chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.34.0 to 1.35.0 by @dependabot[bot] in #1058
  • chore(deps): bump renovatebot/github-action from 46.1.0 to 46.1.1 by @dependabot[bot] in #1053
  • chore(deps): bump github.com/expr-lang/expr from 1.17.7 to 1.17.8 by @dependabot[bot] in #1052
  • chore: pin docker image in release CI by @emirot in #1057
  • fix: incorrect Docker step syntax by @emirot in #1060
  • fix: docker version in github action by @emirot in #1061
  • fix(pipeline): security issue for dev packages by @emirot in #1064
  • fix: docker push multi arch by @emirot in #1065
  • chore: improve docker images by @emirot in #1066
  • fix(ci): docker latest by @emirot in #1067
  • fix: noisy tests by @emirot in #1051
  • chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.35.0 to 1.36.0 by @dependabot[bot] in #1070
  • chore(deps): bump helm/kind-action from 1.13.0 to 1.14.0 by @dependabot[bot] in #1071
  • chore(golint): update by @emirot in #1073
  • fix(ci): golint cache by @emirot in #1074
  • Refactor tests to improve context initialization by @emirot in #1075
  • docs: bump manifest versions to v0.22.5 by @github-actions[bot] in #1076
  • chore: turn off provence in images by @zachaller in #1077
  • docs: bump manifest versions to v0.22.6 by @github-actions[bot] in #1078

Full Changelog: v0.22.4...v0.22.6