Skip to content

build(deps): Bump github.com/argoproj/argo-rollouts from 1.9.1 to 1.10.0 - #107

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/argoproj/argo-rollouts-1.10.0
Open

build(deps): Bump github.com/argoproj/argo-rollouts from 1.9.1 to 1.10.0#107
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/argoproj/argo-rollouts-1.10.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/argoproj/argo-rollouts from 1.9.1 to 1.10.0.

Release notes

Sourced from github.com/argoproj/argo-rollouts's releases.

v1.10.0

v1.10.0 (2026-08-05)

Fix

  • guard empty Values in injected anti-affinity check (cherry-pick #4832 for 1.10) (#4917)
  • uprade pnpm for sbom (cherry-pick #4821 for 1.10) (#4830)
  • controller: skip unnecessary ephemeral metadata pod listing (cherry-pick #4951 for 1.10) (#4952)
  • controller: sync desired-replicas annotation during abort scale-… (#4919)
  • controller: log the underlying error when newRolloutContext returns nil (cherry-pick #4850 for 1.10) (#4906)
  • controller: select namespace-support notification controller via self-service flag (cherry-pick #4851 for 1.10) (#4866)
  • controller: Downgrade log level for unconfigured notification triggers. Fixes #3459 (cherry-pick #4833 for 1.10) (#4849)
  • controller: prevent panic when notifications write Unstructured … (cherry-pick #4844 for 1.10) (#4846)
  • controller: deepcopy ALB status updates. Fixes #3673, #4184 (cherry-pick #4780 for 1.10) (#4916)
  • experiments: add API fallback when ReplicaSet lister is stale on AlreadyExists (#4842) (cherry-pick #4855 for 1.10) (#4870)

Test

  • fixed flaky test close channel (cherry-pick #4908 for 1.10) (#4909)
  • fix flaky unit test TestListWithWatch (cherry-pick #4905 for 1.10) (#4907)

v1.10.0-rc1

v1.10.0-rc1 (2026-06-30)

Build

  • skip full CI for documentation only changes (#4737)
  • Parameterized build system for company forks (#4605)
  • Stop rendering gh-pages (#4583)

Chore

  • Address CVE-2026-35469 (#4814)
  • switch to *bool for clusterScope (#4551)
  • update notification engine (#4715)
  • don't use httpbin.org it's flaky (#4554)
  • add OneSignal to USERS.md (#4765)
  • add Code owners similar to Argo CD (#4628)
  • Migrate to pnpm (#4699) (#4712)
  • update expr version from v1.16.9 to v1.17.7 (#4588)
  • update USERS.md to remove duplicates and fix numbering (#4620)
  • support team workflows and Nats.io for notifications (#4625)
  • deps: bump actions/cache from 4 to 5 (#4622)
  • deps: bump golang to 1.26 (#4638)
  • deps: update debian11 to debian12 (#4652)
  • deps: bump actions/upload-artifact from 5 to 6 (#4601)
  • deps: update dependencies to latest (#4659)
  • deps: bump actions/setup-go from 6.0.0 to 6.1.0 (#4549)
  • deps: update google.golang.org/grpc. Fixes #4667 (#4686)

... (truncated)

Changelog

Sourced from github.com/argoproj/argo-rollouts's changelog.

v1.10.0-rc1 (2026-06-30)

Build

  • skip full CI for documentation only changes (#4737)
  • Parameterized build system for company forks (#4605)
  • Stop rendering gh-pages (#4583)

Chore

  • Address CVE-2026-35469 (#4814)
  • switch to *bool for clusterScope (#4551)
  • update notification engine (#4715)
  • don't use httpbin.org it's flaky (#4554)
  • add OneSignal to USERS.md (#4765)
  • add Code owners similar to Argo CD (#4628)
  • Migrate to pnpm (#4699) (#4712)
  • update expr version from v1.16.9 to v1.17.7 (#4588)
  • update USERS.md to remove duplicates and fix numbering (#4620)
  • support team workflows and Nats.io for notifications (#4625)
  • deps: bump actions/cache from 4 to 5 (#4622)
  • deps: bump golang to 1.26 (#4638)
  • deps: update debian11 to debian12 (#4652)
  • deps: bump actions/upload-artifact from 5 to 6 (#4601)
  • deps: update dependencies to latest (#4659)
  • deps: bump actions/setup-go from 6.0.0 to 6.1.0 (#4549)
  • deps: update google.golang.org/grpc. Fixes #4667 (#4686)
  • deps: bump actions/checkout from 5 to 6 (#4550)
  • deps: migrate to go.yaml.in/yaml/v2 (#4683)
  • deps: update dependencies for cves (#4801)
  • deps: bump softprops/action-gh-release from 2.4.1 to 2.4.2 (#4530)
  • deps: bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#4525)

Ci

  • skip checks for documentation PR (#4816)
  • Bring Cherry pick functionality from Argo CD (#4797)
  • Speedup test timing with effective caching part 2 (#4714)
  • upload unit and e2e coverage separately with Codecov flags (#4761)
  • Speedup Go build timing with effective caching (#4702)
  • pin pr-check version (#4685)
  • Speed up ci by ignoring codeql for docs only change (#4641)
  • pin k3s version to avoid breakage of e2e tests (#4644)
  • test e2e against k8s 1.35 (#4636)
  • Llm disclosure (#4627)

Docs

... (truncated)

Commits
  • d90700a fix(controller): skip unnecessary ephemeral metadata pod listing (cherry-pick...
  • f2e26c0 fix(controller): sync desired-replicas annotation during abort scale-… (#4919)
  • be5731d fix: guard empty Values in injected anti-affinity check (cherry-pick #4832 fo...
  • 59ee385 fix(controller): deepcopy ALB status updates. Fixes #3673, #4184 (cherry-pick...
  • 30df9e7 test: fixed flaky test close channel (cherry-pick #4908 for 1.10) (#4909)
  • 2f8b4ad test: fix flaky unit test TestListWithWatch (cherry-pick #4905 for 1.10) (#4907)
  • 82aeb0f fix(controller): log the underlying error when newRolloutContext returns nil ...
  • d84750b fix(experiments): add API fallback when ReplicaSet lister is stale on Already...
  • 5fab5d3 fix(controller): select namespace-support notification controller via self-se...
  • 6a75737 fix(controller): Downgrade log level for unconfigured notification triggers. ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/argoproj/argo-rollouts](https://github.com/argoproj/argo-rollouts) from 1.9.1 to 1.10.0.
- [Release notes](https://github.com/argoproj/argo-rollouts/releases)
- [Changelog](https://github.com/argoproj/argo-rollouts/blob/master/CHANGELOG.md)
- [Commits](argoproj/argo-rollouts@v1.9.1...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/argoproj/argo-rollouts
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants