## argoproj/argo-cd — v3.5.0-rc2…v3.5.0-rc3

_14 commits._

### Features
- **feat(impersonation): allow to disable strict enforcement (#27084) (cherry-pick #27573 for 3.5) (#28595)** (41b6fee)

### Fixes
- **fix(diff): don't drop manager-owned descendant fields when filtering webhook mutations (cherry-pick #28819 for 3.5) (#28895)** (a62624a)
- **fix: mount argocd-cmd-params-cm in repo-server so pprof can be enabled (cherry-pick #28863 for 3.5) (#28866)** (b6bff3b)
- **fix(helm): pass registry passwords through stdin (Cherry-Pick) (#28834)** (0b42a6d)
- **fix(ui): update cluster count logic in ApplicationsSummary (cherry-pick #28768 for 3.5) (#28777)** (bc5d359)
- **fix: only do annotation backfill if live unset (cherry-pick #28770 for 3.5) (#28775)** (061bd2b)
- **fix(appset): fall back to create when patch returns NotFound (#17312) (cherry-pick #28645 for 3.5) (#28716)** (06fae9d)
- **fix(repo-server): honor `ARGOCD_REPO_SERVER_OTLP_HEADERS` in repo-server (Cherry-pick - 3.5) (#28715)** (faaa0b6)
- **fix: use OIDC refresh tokens to renew expired sessions (#27041, #12189) (cherry-pick #27777 for 3.5) (#28689)** (7cde9f4)
- **fix: use Entra ID uti claim as token id when jti is absent (#28625) (cherry-pick #28656 for 3.5) (#28675)** (f1b39c8)
- **fix(progressivesync): check if error == notfound (cherry-pick #28663 for 3.5) (#28670)** (5c1b930)

### Tests
- **test: fix commit-server missing argocd in path (cherry-pick #28876 for 3.5) (#28930)** (fd30e59)
- **test(e2e): fix github's failure to show complete results of e2e test (#28727) (cherry-pick #28726 for 3.5) (#28728)** (8ffead8)

### Chore
- **chore:  bump version to 3.5.0-rc3 on release-3.5 branch (#28938)** (7660efb)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/argoproj/argo-cd?utm_source=github-action)._