Release v3.5 patch releases discussion

[terrytangyuan]

This issue tracks commits for 3.5 patch releases.

[terrytangyuan]

#12025 needs to be fixed for this

[terrytangyuan]

I am thinking about releasing v3.5.1 next week. The most important fix would be #12068 since it blocks people from upgrading to v3.5.

[terrytangyuan]

Security fix: #12111

[terrytangyuan]

#12130

[terrytangyuan]

Released: https://github.com/argoproj/argo-workflows/releases/tag/v3.5.1

[agilgur5]

Would be good to get my UI code-splitting / bundle reductions changes into the next patch release once they're all merged in (#12061, #12097, #12150). They are primarily refactors in content, but their overall intent is to fix long wait times for the UI on slow networks or slow devices as described in #11970

[terrytangyuan]

#12133

[terrytangyuan]

#12203

[terrytangyuan]

TODO: @terrytangyuan to post a list of commits to cherry-pick here

[terrytangyuan]

The plan is to cherry-pick the following commits (unless there's conflict) for v3.5.2 release

Fixes:

• 9eadf2d fix: leak stream (fix: leak stream #12193)
• 206c901 fix: Fix for missing steps in the UI (fix: Fix for missing steps in the UI #12203)
• 939ce40 fix(server): allow passing loglevels as env vars to Server (fix(server): allow passing loglevels as env vars to Server #12145)
• 222d53c fix: Resource version incorrectly overridden for wfInformer list requests. Fixes Controller: High RAM Usage and Frequent Crashes on Large Scale Workflows #11948 (fix: Resource version incorrectly overridden for wfInformer list requests. Fixes #11948 #12133)
• f95a5fc fix: retry S3 on RequestError. Fixes saving log artifact to s3 missing retries #9914 (fix: retry S3 on RequestError. Fixes #9914 #12191)
• 6805c91 fix: ArtifactGC Fails for Stopped Workflows. Fixes Artifacts not set in Status.Nodes | ArtifactGC prevents Workflow deletion #11879 (fix: ArtifactGC Fails for Stopped Workflows. Fixes #11879 #11947)
• 873bacb fix(ui): Cost Opt should only apply to live Workflows (fix(ui): Cost Opt should only apply to live Workflows #12170)

Tests:

• test: add functional tests for memoization without outputs #12215
• test: add test for missing child node #12214

Chore(deps):

• 75d7eb1 chore(deps): bump github.com/aliyun/credentials-go from 1.3.1 to 1.3.2 (chore(deps): bump github.com/aliyun/credentials-go from 1.3.1 to 1.3.2 #12227)
• 63f53ea chore(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 (chore(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 #12226)
• b659002 chore(deps): bump golang.org/x/term from 0.13.0 to 0.14.0 (chore(deps): bump golang.org/x/term from 0.13.0 to 0.14.0 #12225)
• bce96ab chore(deps): bump cronstrue from 2.41.0 to 2.44.0 in /ui (chore(deps): bump cronstrue from 2.41.0 to 2.44.0 in /ui #12224)
• c95d9a1 chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 #12185)
• 877a2e7 chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 #12184)
• 460b30a chore(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 (chore(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 #12186)
• a47e462 chore(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.2.9+incompatible to 3.0.1+incompatible (chore(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.2.9+incompatible to 3.0.1+incompatible #12140)
• 69b47b9 chore(deps): bump monaco-editor from 0.43.0 to 0.44.0 in /ui (chore(deps): bump monaco-editor from 0.43.0 to 0.44.0 in /ui #12142)
• 664569b chore(deps): bump cronstrue from 2.32.0 to 2.41.0 in /ui (chore(deps): bump cronstrue from 2.32.0 to 2.41.0 in /ui #12144)
• 77173a5 chore(deps): bump github.com/creack/pty from 1.1.18 to 1.1.20 (chore(deps): bump github.com/creack/pty from 1.1.18 to 1.1.20 #12139)
• 789c608 chore(deps): bump cloud.google.com/go/storage from 1.33.0 to 1.34.1 (chore(deps): bump cloud.google.com/go/storage from 1.33.0 to 1.34.1 #12138)
• 2f0094c chore(deps): bump react-datepicker and @types/react-datepicker in /ui (chore(deps): bump react-datepicker and @types/react-datepicker in /ui #12096)
• 8f09108 chore(deps): upgrade swagger-ui-react to latest 4.x.x (fix(deps): upgrade swagger-ui-react to latest 4.x.x #12058)
• 5cc8484 chore(deps): bump google.golang.org/api from 0.147.0 to 0.148.0 (chore(deps): bump google.golang.org/api from 0.147.0 to 0.148.0 #12051)
• 7a25c05 chore(deps): bump github.com/coreos/go-oidc/v3 from 3.5.0 to 3.7.0 (chore(deps): bump github.com/coreos/go-oidc/v3 from 3.5.0 to 3.7.0 #12050)
• 35f7208 chore(deps): automatically audit fix UI deps (chore(deps): automatically audit fix UI deps #12036)
• 32d31ab chore(deps): bump google.golang.org/api from 0.143.0 to 0.147.0 (chore(deps): bump google.golang.org/api from 0.143.0 to 0.147.0 #12001)

Others:

• UI code-splitting PRs mentioned in Release v3.5 patch releases discussion #11997 (comment)
• ci: Fix lint check #12245