argocd: update dependency argoproj/argo-cd to v3.5.2

[renovate]

This PR contains the following updates:

Package	Update	Change
argoproj/argo-cd	patch	v3.5.0 → v3.5.2

---

Release Notes

argoproj/argo-cd (argoproj/argo-cd)

v3.5.2

Compare Source

v3.5.1

Compare Source

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.1/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.1/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

• 33f3bc5: fix(appset): stop progressive sync reconciling in a tight loop (#​27577) (#​29139) (@​himeshp)
• d358e75: fix(appset): verify terminating Applications against the API server (#​29042) (#​29138) (@​himeshp)
• ecf3737: fix(controller): cherry-pick treat timeout.reconciliation=0 as disabled soft expiry (#​27683) (#​29007) (@​aali309)
• 978fa65: fix(controller): reuse server-side diff result when masking Secret data (#​27858) (#​29074) (@​1ovsss)
• f399c84: fix(controller): use diff cache when timeout.reconciliation is disabled (cherry-pick #​29073 for 3.5) (#​29158) (@​argo-cd-cherry-pick-bot[bot])
• 960bed7: fix(server): prevent SSD CLI secret mask spoofing (cherry-pick #​29089 for 3.5) (#​29130) (@​argo-cd-cherry-pick-bot[bot])
• 9f360f4: fix(ssd): hide secret in last-applied-configuration annotation (#​28989) (#​29052) (@​pjiang-dev)

Other work

• 109ca7c: chore: bump version to 3.5.1 on release-3.5 branch (#​29165) (@​github-actions[bot])
• b44fbbc: fix(manifest-generate-paths): Consistent gen manifest cache key (#​28074 and #​29037) (#​29049) (@​agaudreault)

Full Changelog: argoproj/argo-cd@v3.5.0...v3.5.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Infro diff for 2b49033

argocd.hashbang.sh > cloudnative-pg (0 files changed)

Details

time="2026-08-27T12:45:24Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-08-27T12:45:33Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== coordination.k8s.io/Lease /db9c8771.cnpg.io ======
--- /tmp/argocd-diff4026285366/db9c8771.cnpg.io-live.yaml
+++ /tmp/argocd-diff4026285366/db9c8771.cnpg.io
@@ -0,0 +1,11 @@
+apiVersion: coordination.k8s.io/v1
+kind: Lease
+metadata:
+  annotations:
+    argocd.argoproj.io/tracking-id: cloudnative-pg:coordination.k8s.io/Lease:cloudnative-pg/db9c8771.cnpg.io
+  labels:
+    app.kubernetes.io/component: manager
+    app.kubernetes.io/instance: cloudnative-pg
+    app.kubernetes.io/name: cloudnative-pg
+  name: db9c8771.cnpg.io
+spec: {}

argocd.hashbang.sh > external-dns (0 files changed)

Details

time="2026-08-27T12:45:34Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2026-08-27T12:45:39Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== apps/Deployment external-dns/external-dns ======
--- /tmp/argocd-diff2797298262/external-dns-live.yaml
+++ /tmp/argocd-diff2797298262/external-dns
@@ -173,11 +173,6 @@
         - --provider=aws
         - --txt-owner-id=digitalocean-hashbang
         - --txt-prefix=_owner.
-        - --source=crd
-        - --domain-filter=hashbang.sh
-        - --managed-record-types=A
-        - --managed-record-types=CNAME
-        - --managed-record-types=TXT
         env:
         - name: AWS_REGION
           value: us-west-2