Argo CD 3.3 Arrives with PreDelete Hooks and Automatic OIDC Token Refresh

Argo CD v3.3.0 shipped on February 2, 2026, followed by a v3.3.1 patch on February 18. The release introduces PreDelete hooks, automatic OIDC token refresh, and Source Hydrator improvements that address long-standing operational pain points for teams running GitOps workflows on Kubernetes.

PreDelete Hooks

PreDelete hooks are a new hook type that triggers Jobs before Argo CD removes an application's Kubernetes resources. When an application is deleted, the PreDelete hook runs first — executing data backups, external service cleanup, DNS record removal, or other teardown tasks that must complete before the application's resources are destroyed. If the cleanup job fails, deletion is blocked, preventing orphaned resources and data loss from incomplete teardown sequences.

This solves a real operational gap. Teams running stateful workloads — databases, message queues, persistent storage volumes — need to guarantee that cleanup procedures complete before the underlying resources are removed. Previously, this had to be handled outside Argo CD through external scripts or manual procedures, creating opportunities for human error and inconsistency.

OIDC Token Refresh

Argo CD 3.3 automatically refreshes OIDC tokens in the background before they expire, controlled by a new refreshTokenThreshold configuration option. This resolves a long-standing frustration: teams using enterprise SSO with short-lived tokens frequently experienced five-minute session timeouts that interrupted their work in the Argo CD web interface. The automatic refresh keeps sessions alive transparently, matching the behavior that users expect from modern web applications.

Source Hydrator Improvements

The Source Hydrator — the component that renders Helm charts, Kustomize overlays, and other templating formats into plain Kubernetes manifests — received improvements for inline parameters and monorepo support. Hydration now avoids unnecessary calls to Argo CD's repo-server for unchanged sources, reducing the latency of sync operations in repositories with many applications. For organizations running monorepos with hundreds of applications managed by a single Argo CD instance, the reduced repo-server calls translate to measurably faster sync cycles.

Dependency Updates

Helm was upgraded to 3.19.2 and Kustomize from 5.7.0 to 5.8.0, bringing the latest features and security fixes from both rendering tools. Argo CD v3.0 reached end-of-life on February 2, 2026, meaning teams still running 3.0.x should upgrade to 3.3.x to continue receiving security patches.