Update module github.com/argoproj-labs/argocd-operator to v0.18.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/argoproj-labs/argocd-operator	v0.17.0 → v0.18.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

argoproj-labs/argocd-operator (github.com/argoproj-labs/argocd-operator)

v0.18.0

Compare Source

What's Changed

• chore(deps): bump actions/upload-artifact from 4 to 5 by @​dependabot[bot] in #​1917
• Documentation for support of notifications in any namespace by @​nmirasch in #​1938
• fix: Add rbac & tests for notifications in any namespace by @​nmirasch in #​1940
• chore: reduce Node resource pressure of E2E tests by @​jgwest in #​1946
• fix: namespace validation by @​jparsai in #​1945
• chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @​dependabot[bot] in #​1941
• chore: add E2E test check for available GH runner storage by @​jgwest in #​1951
• fix: namespace validation for notification by @​svghadi in #​1955
• fix: namespace validation for sourcenamespace by @​jparsai in #​1956
• fix: additional checks for appsets in any namespace field by @​jgwest in #​1953
• chore(deps): bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​1944
• chore: don't output 'df -k' command string by @​jgwest in #​1954
• fix: verify appset source namespaces cleanup logic is applied only to ArgoCD CR which owns the namespace by @​jgwest in #​1970
• fix: Align image updater role binding code by @​dkarpele in #​1957
• chore: fix E2E test flake in 1-015-validate-sso-status by @​jgwest in #​1975
• fix: increase timeout on 1-020 E2E test and add debug hook by @​jgwest in #​1977
• fix: verify argocd instance matches namespace label on notifications … by @​nmirasch in #​1978
• chore: upgrade to Argo CD v3.2.1 and Go to 1.25 by @​jgwest in #​1989
• chore(deps): bump pymdown-extensions from 10.2.1 to 10.16.1 in /docs by @​dependabot[bot] in #​1987
• chore(deps): bump ubi8/ubi-minimal from 951ee3c to 7b6b45d in /build by @​dependabot[bot] in #​1969
• chore(deps): bump ubi8/ubi-minimal from 7b6b45d to 2139859 in /build by @​dependabot[bot] in #​1992
• chore(deps): bump actions/cache from 4 to 5 by @​dependabot[bot] in #​1982
• Fix: Auto-scale redis-ha-haproxy deployment replicas during operator … by @​nmirasch in #​1991
• fix: added mapping of timeout.reconciliation to env var by @​alkakumari016 in #​1994
• chore: Update python and ubuntu version in readthedocs config by @​svghadi in #​2001
• chore(deps): bump github.com/argoproj/argo-cd/v3 from 3.2.1 to 3.2.3 by @​dependabot[bot] in #​2007
• chore(deps): bump go.uber.org/zap from 1.27.0 to 1.27.1 by @​dependabot[bot] in #​2009
• chore(deps): bump golang.org/x/mod from 0.29.0 to 0.31.0 by @​dependabot[bot] in #​2008
• chore(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.8.3 in /tests/auxiliary/smtplistener by @​dependabot[bot] in #​1968
• chore: add e2e tests for agent by @​jparsai in #​1952
• chore(deps): bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in #​1983
• chore: fix docs build by @​svghadi in #​2018
• Add Wildcards support in ApplicationSet Source Namespaces by @​nmirasch in #​1988
• chore: enable debug on 1-012 E2E test and increase wait timeout by @​jgwest in #​2021
• doc: apps-in-any-namespace configuration by @​Mangaal in #​2022
• chore(deps): bump ubi8/ubi-minimal from 2139859 to 9f50067 in /build by @​dependabot[bot] in #​2025
• chore(deps): bump github.com/onsi/gomega from 1.36.2 to 1.39.0 by @​dependabot[bot] in #​2016
• fix: Modify ownerReference from v1apha1 to v1beta1 during upgrade in configmaps by @​akhilnittala in #​2000
• chore: add e2e tests for agent namespace validation by @​jparsai in #​2013
• fix(makefile): Improve performance of make lint by @​olivergondza in #​2033
• feat: Validation webhook to reject invalid SSO configs in ArgoCD CR by @​akhilnittala in #​2032
• chore: Sync 0.14.1 and 0.17.0 released files by @​svghadi in #​2029
• chore: synchronize E2E tests with downstream by @​jgwest in #​2035
• fix: restoring tracking labels for cleaning up of orphaned roles and rolebindings by @​akhilnittala in #​2017
• fix(api): Drop the trailing ' from spec display names by @​olivergondza in #​2044
• chore: update to Argo CD v3.3.0 by @​jgwest in #​2051
• chore(github): Do not propose major/minor dependabot upgrades for image-updater by @​olivergondza in #​2052
• chore: log when Route status causes ArgoCD CR '.status.phase' to be pending by @​jgwest in #​2046
• chore(ImageUpdater): update to version 1.1.0 by @​dkarpele in #​2055
• chore: add redis proxy test to argocd-agent E2E tests by @​jgwest in #​2057
• chore(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.5 by @​dependabot[bot] in #​2060
• chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @​dependabot[bot] in #​2041
• chore: update to latest released argocd-agent version v0.6.0 by @​jgwest in #​2061
• chore(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​2064
• Added policyRules to applicationSet clusterRole similar to the upstream by @​alkakumari016 in #​2063
• feat(repo-server): Declare custom trust certs for repo-server and plugins by @​olivergondza in #​1876
• feat:Skip OpenshiftDexConfig when OpenShift Cluster Authentication is based on OIDC Provider by @​akhilnittala in #​2073
• test: Unit test cases to Skip OpenshiftDexConfig when OpenShift Cluster Authentication is based on OIDC Provider by @​akhilnittala in #​2077
• fix(repo-server): Extend wait time for tests by @​olivergondza in #​2081
• chore: Drop unneeded nolint annotations by @​olivergondza in #​2074
• add network policy for argocd component by @​anandrkskd in #​2049
• Deprecate prometheus CR by @​Rizwana777 in #​2054
• upgrade argocd-image-updater from 1.1.0 to 1.1.1 by @​chengfang in #​2088
• chore: update to argocd-agent v0.7.0 by @​jgwest in #​2096
• chore: add argo-cd agent resource proxy E2E test by @​jgwest in #​2090
• add networkPolicy for argocd-agent by @​anandrkskd in #​2091
• fix(tests): Make sure the change is verified where it is induced by @​olivergondza in #​2093
• chore: Bump Argo CD to 3.3.2 by @​svghadi in #​2110
• [release-0.18] fix: CVE-2026-33186 gRPC-Go auth bypass (HTTP/2 path validation) by @​Rizwana777 in #​2153
• fix: restore serving-cert annotation when tls termination is reencrypt that was stripped in older versions by @​alkakumari016 in #​2170
• chore(deps): bump ImageUpdater from 1.1.1 to 1.1.2, and argo-cd from 3.3.2 to 3.3.9 by @​chengfang in #​2186
• fix: dex copyutil initcontainer update of dex deployment by @​Rizwana777 in #​2199
• fix: remove default true in CRD for network-policy enabled field (#​2198) by @​anandrkskd in #​2202
• chore: Bump argocd to 3.3.10 by @​svghadi in #​2205
• chore: release 0.18.0 by @​akhilnittala in #​2188

Full Changelog: argoproj-labs/argocd-operator@v0.17.0...v0.18.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign dminnear-rh for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a validatedpatterns member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.5 -> 1.25.9
sigs.k8s.io/controller-runtime	v0.21.0 -> v0.22.3
github.com/argoproj/gitops-engine	v0.7.1-0.20250908182407-97ad5b59a627 -> v0.7.1-0.20251217140045-5baed5604d2d