FusionAuth vs Argo CD
Side-by-side trajectory, velocity, and editorial themes.
FusionAuth is in security-hardening mode, tightening API-key and OAuth boundaries
FusionAuth's recent releases center on security hardening and standards support: OAuth resource scoping (RFC 8707), and a series of breaking changes that lock down API-key scope on webhook and installation-wide endpoints. Interspersed are routine point releases and bug fixes; the two most recent tags captured only boilerplate upgrade text, not substantive notes.
The throughline is shrinking the blast radius of credentials — tenant-scoped keys can no longer reach installation-wide operations, and webhook endpoints now demand global keys. FusionAuth is prioritizing correctness and standards compliance over headline features, consistent with an identity vendor managing trust.
Expect continued standards adoption (OAuth/OIDC RFCs) and further API-key scoping refinements; the cadence suggests steady point releases rather than a large feature launch.
Argo CD's 3.5 line is in release-candidate hardening after a feature-heavy rc1 (Helm 4, supply-chain, Gateway API).
Argo CD shipped 3.4.0 to GA and has moved the 3.5 line into release candidates. The 3.5.0-rc1 carried a large feature set: Helm 3-to-4 migration, opt-in source-integrity verification for the hydrator, Gateway API support in the network view, mTLS in the repo-server, server-operation impersonation, and ApplicationSet UI work, while rc2 is bug-fix stabilization. The project keeps a strong supply-chain posture with cosign-signed images and SLSA Level 3 provenance.
Argo CD is converging 3.5 toward GA, so expect further rc bug-fix rounds until it stabilizes. The 3.5 theme blends supply-chain security (source integrity, provenance, mTLS), ecosystem currency (Helm 4, Gateway API), and ApplicationSet and UI maturation. After GA, the rolling stable tag advances and the 3.4 line drops to maintenance cherry-picks.
Expect one or more further 3.5.0 release candidates with bug-fix cherry-picks, then a 3.5.0 GA that moves the rolling stable tag forward.
See more alternatives to FusionAuth →
See more alternatives to Argo CD →