Argo CD 3.5 adds internal mTLS and signed-commit verification
Argo CD 3.5 (GA August 2026) introduces mutual TLS between internal components, native Git commit signature verification called Source Integrity, and a new ApplicationSet UI. A v3.6 release candidate followed in September.
- mTLS between repo-server and other components, with automatic self-signed certificates
- Source Integrity allows only signed commits to sync; GPG verification is deprecated
- New ApplicationSet UI includes a Preview Apps tab before deployment
- Beta features: Impersonation, Source Hydrator, Helm 4 support
Read next
Software