Helm

Infrastructure & DevOpsApache-2.0

Helm release notes.

Latest v3.22.0 · by HelmWritten in GoWebsitehelm/helmRSS

Branches

4
v4.3.0
3
v3.22.0

Release activity

Release activity — 16 releases across 11 days since Apr 9, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Apr 9, 2026. Older weeks are hidden at this screen width.
JunJulAugSep
SundayNo releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026No releases on Aug 16, 2026No releases on Aug 23, 2026No releases on Aug 30, 2026No releases on Sep 6, 2026No releases on Sep 13, 2026
MondayNo releases on Jun 1, 2026No releases on Jun 8, 2026No releases on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026No releases on Aug 10, 2026No releases on Aug 17, 2026No releases on Aug 24, 20262 releases on Aug 31, 2026No releases on Sep 7, 2026No releases on Sep 14, 2026
TuesdayNo releases on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 2026No releases on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 2026No releases on Aug 18, 2026No releases on Aug 25, 2026No releases on Sep 1, 2026No releases on Sep 8, 2026
WednesdayNo releases on Jun 3, 2026No releases on Jun 10, 20261 release on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026No releases on Aug 19, 2026No releases on Aug 26, 2026No releases on Sep 2, 20261 release on Sep 9, 2026
ThursdayNo releases on Jun 4, 2026No releases on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 20262 releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 20261 release on Aug 13, 2026No releases on Aug 20, 2026No releases on Aug 27, 2026No releases on Sep 3, 20261 release on Sep 10, 2026
FridayNo releases on Jun 5, 20262 releases on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 20261 release on Aug 14, 2026No releases on Aug 21, 2026No releases on Aug 28, 2026No releases on Sep 4, 2026No releases on Sep 11, 2026
SaturdayNo releases on Jun 6, 2026No releases on Jun 13, 20261 release on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026No releases on Aug 15, 2026No releases on Aug 22, 2026No releases on Aug 29, 2026No releases on Sep 5, 2026No releases on Sep 12, 2026

16 releases since Apr 9, 2026, busiest day 2

Changelog

What changed from 3 to 4
Filter releases by branch
16 of 16 releases
v3.22.0Latest

Helm v3.22.0

Changed 1
  • Update k8s-io group dependencies to 0.37.0
Fixed 1
  • Set [pull,push] scope when helm push to a registry using token auth
Security 2
  • Bump google.golang.org/grpc to v1.82.1 for GO-2026-6061
  • Bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158

From Helm

Helm v3.22.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • primarily dependency updates and k8s-io group to 0.37.0
Installation and Upgrading

Download Helm v3.22.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump the k8s-io group across 1 directory with 6 updates 144ca65f8501953fa8b41cd1d37c7223051c85b7 (dependabot[bot])
  • bump version to 3.22 (#32606) b5de8bbe62975c8f9d4801fd7dfafacff462209f (Scott Rigby)
  • fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362) 9dbcb9f1edb4cdf2b055870dc9a07e0c0f4b05d1 (kimsungmin1)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32575) 665ab55b05ce3d8c5a9d40e22b14f920d84fa68a (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#32573) 0841093658d96f4787cc9599cd2a891a3c590971 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563) d0569c7d625151ee8c7b858d87218dd06087d613 (dependabot[bot])
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32557) bcbdb1e8ae5f1b1dd26a41652bc2f3e1e8f0f920 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554) 6cdcc8f91de2dbe181b19be8f5de0701b9c30acd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542) 158719fb4346eb65ee789abc09a922a84bf6ec3b (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 (#32536) a442b8cf64f5942ca9e920b46fceb15e0878ca80 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 (#32535) adab0ef15d40085b4ddad4334418dc1bf41c85c7 (Scott Rigby)
  • chore(deps): bump the github-actions group with 4 updates (#32524) c068b543256b64515c019644381cf57276a6fec6 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 74271c4258a35186cb621330f5026461d01e9032 (dependabot[bot])
  • chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 1c50d2f8bde0738c7f6df584d77fb469ec52848d (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates (#32509) 88215407a8901557b2318842d56e8e25aba9d84b (dependabot[bot])
  • chore(deps): bump actions/stale in the github-actions group (#32488) 05a27980df8f4b22454334dbb124494510de4af6 (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action in the github-actions group (#32461) c27e7577e3e2793b80550315dace983ec22a0664 (dependabot[bot])
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 bd392c6a60d09a6c9f467dc52dbfd249a641f80d (Karan V)
  • chore(deps): bump the k8s-io group with 7 updates 66a6f5601d26bb640e0de5f877268a48de2148dd (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 7cd01254d33ba41ec5020fd1af780cd26a6ca02a (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32449) 79330fceb94f73508d136f389802b41face2dc41 (dependabot[bot])
  • chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#32446) b29c7309f12ff72d631425b9398aceba979a81f0 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 973bb346b83480f4daff9eb5e8f9e0180fc48b5d (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 e25efcf2837674c3b6ab1449c8b69f3fb6ee4bc4 (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 98e547f8ed82720aca8b6287e1e76aad1ba55f9b (dependabot[bot])
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#32412) 7f4b72a711e1d6d3c40f904affd99991e84456c3 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#32381) 2cf1437c200dcd8586788d637340e7af3ffcc9d0 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#32383) 270f73b2df1887425cbe5eccceb7cafcfda81a89 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32382) 9e3a0100a994e4cf08372398f31cecab92ec3b2e (dependabot[bot])
  • ci: auto-label PRs targeting dev-v3 (#32340) c9ed0caebae6b24b8aa64c5f587d6c11297c7dd9 (Benoit Tigeot)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32331) b842ddfccba6a388df1dd2f959d16db3ce105e16 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32332) f6047c96c7a83f8004752f0be201e03181d3ef59 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#32357) f2f6bf6e99c8d1331c7894304eb9bacc8fb7a401 (dependabot[bot])
  • chore(deps): bump actions/checkout from 4.2.2 to 7.0.0 (#32368) 69f70a86748edae2d32b6106bddacba9a1c6e359 (dependabot[bot])
  • chore(deps): bump actions/stale from 9.0.0 to 10.4.0 (#32369) c95222ab5af136ce9e5f3624212b31f5a496c0ec (dependabot[bot])
  • chore(deps): bump actions/setup-go from 5.1.0 to 6.5.0 (#32358) fc71f51069104729717d718c324c07420059b89c (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32360) 6596318b34e93427ebdde2cfce83b94e81c229c6 (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#32359) 5d9943ca09fce64c9e98c68aedbc5ddb43eae793 (dependabot[bot])
  • chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#32356) a3d7a6c50a69008c97f42c456df1318135786c10 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#32354) 8e199708cc2a3323f31274026a16839a78984a3e (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#32353) 24ef09ac19305a8c225287d983ebd26dbcb4b260 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#32310) 8082dd4a0d9f1ca3dbd2052a8b0e1bba843a85c7 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 2c24490679681b0825c258576e9f7699f8dc8e54 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#32306) 953d280f928c4bc76912236bc2a8a0d11a39c016 (dependabot[bot])
  • fix(engine): prevent Files.Lines panic on empty file c02a9aed3452c0c7ee9d79ded44dd170ce5001ca (Mahesh Sadupalli)
  • Apply suggestions from code review 093015b3b7c466828d01697d4d3d8f4811c59942 (Benoit Tigeot)
  • fix: drop containerd v1 dep to resolve govulncheck CVEs a061886b724181526f5283789e78ec4369e25ff3 (Benoit Tigeot)
  • chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 f9798360983d9d964e2088427c693317a69f326e (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin c4446659f68e94db06f0e142376f8cf1b970a878 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 2 updates 1bf9b5fbba4df88a562a35eef40e6c60f12b5a90 (dependabot[bot])
  • fixes b7a0fd0ddc84fdfbf571486e5dac829bfb2bd78a (Matheus Pimenta)
  • chore(deps): bump the k8s-io group across 1 directory with 2 updates 119a7d9babffcec9e51d285153e09d8c4f54a69d (dependabot[bot])
  • fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 2fb05f8a35f6c0d5760c03c12d60c46adf2b3d12 (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 acc867b88e68e5f9c074c1c8c584a57b3ae6c127 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 b920935feb6b6c8729cdf6b98f4c8efc824779c5 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 5b5ef192c773f6448e4dcd845e643c573aff906b (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 af67af8951d5f9a7631efc3a97b6dc6b58247148 (dependabot[bot])
  • Update .github/env ceb9a62ec03c8d5aea94dee9c9456a7dfd89ba71 (Terry Howe)
  • ci: bump golangci-lint to v2.11.3 for go 1.26 0ed92f0696329495d87f8acdc42687c30b31d431 (Terry Howe)
  • chore: bump go to 1.26 c678c0c9c088fc2f9ddbad8c88416c77f4e048cc (Terry Howe)
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 12c4d45b146a8be1ca70bd15e3cad00e7d12733a (dependabot[bot])
  • chore(deps): bump github.com/distribution/distribution/v3 a0f97111f5607a5724a8af110480384827a81b41 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 995c31e20bf3ab9a4feb85cd4a54951d9418ea51 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 8c171688281d3c1f14d908cf682c742585848db0 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 fe141bd537ea42e64bec3b3b181dcf955260e939 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 980836f726fdfbd6a2f0662a0aa48fe35da3fd64 (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 1dde6c7551746a74a6f69db06eaf4fc58a90042b (Terry Howe)
  • chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 0162feda1d4d6dd0bd1f227ecdfe9f489e6d7284 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 a664a58f43c742987376bca589891fda3bf55668 (dependabot[bot])
  • [v3] Bump to version v3.21 (#32103) 3033a778b611b7501dffae7bd57c071dde318b6c (George Jenkins)
  • [v3 backport] Fix rollback for missing resources 0a4757359edcdfaad2e19e8ee3518188bd3cfa1b (Feruzjon Muyassarov)
  • fix(action): avoid nil REST client getter panic when installing CRDs 711a4eaf40a911b0864a01b99f59f62817443003 (sergiochan)
View originalPermalink
How v3.22.0 went
v4.3.0

Helm v4.3.0

Added 5
  • Add duration functions
  • Add debug logging when lookup returns empty in engine
  • Add ownership verification before deleting resources during uninstall
  • Honor SOURCE_DATE_EPOCH for chart archives
  • Add --description flag to rollback command to provide rollback reason
Changed 3
  • Lower resync period from one hour to 3 minutes
  • Enable concurrent status computation to prevent multi-minute delays
  • Bump Kubernetes dependencies to 0.37.0
Fixed 5
  • Remove zero-width spaces from plugin name comment in internal plugin
  • Do not drop values files ending at a 4096-byte boundary in loader
  • Normalize StampModTimes timestamp to UTC and improve Chart.lock reproducibility
  • Support GnuPG keybox (pubring.kbx) keyrings in provenance
  • Route registry messages to stderr in template and show commands

From Helm

Helm v4.3.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
Installation and Upgrading

Download Helm v4.3.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 bec5b06ed841fe5269972d864d5177944fd5970f (dependabot[bot])
  • chore(deps): bump the k8s-io group across 1 directory with 6 updates d0d42e7dd2b3948281300e5ac2d8d3a74c2a7c8f (dependabot[bot])
  • bump version to 4.3 (#32605) 7328f42a01d7fb96bd41b8fc70abc1fd7258cdb5 (Scott Rigby)
  • chore: Fix independent-merge lint issues ca6681ca55d39913b880871b6aa259efdf15e0b9 (George Jenkins)
  • refactor(repo): Use byte buffer to build index file (#32579) 37752b70b2f9c49dc6ac2f01e2a0aca1f32f0529 (Tom Wieczorek)
  • chore: fix gofumpt extra-rules (#32486) 28e64bd2ddb5412bff6d94d62b0114bb53f40931 (Matthieu MOREL)
  • Remove deprecated internal/chart/v3/ code (#32365) 4dfbaa40c6cd67e1df345889113a7879ec66136c (George Jenkins)
  • fix(template): regression - route registry messages to stderr in template and show (#32217) 9a3c040369361678aef1ab251e83a38b455f5159 (Aaron Mark)
  • refactor: remove per-file decompression size limit (#31748) 11e2010aebedf9f495a5c295635df096de7252f7 (Benoit Tigeot)
  • Updating the Go version b5b498b77403f93de037cba383f424953e87eaaa (Matt Farina)
  • Updating the Go version 6d1f67cf6a9918ebe6c41f05096b6fa3fdde1b5b (Matt Farina)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32574) 0f4decb96b1c4ac45981f495d45eef6cc82e3192 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#32572) fb1930096eacec13ac911b8499905fc94eb09a8f (dependabot[bot])
  • fix: correct 'doest not match' in readiness debug logs 6888b0a280bb6fbb847c85d2a473c425b6a0862d (MsfPablo)
  • fix(provenance): support GnuPG keybox (pubring.kbx) keyrings (#32281) 67d54fd8808ab47e93dad40f4238d5fe28d1efd0 (Ruslan Shaydullin)
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32562) e9b85e4de16ad45805843fb121748018cf89094b (dependabot[bot])
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32556) c000a408b81266d328db64aea2ff9e2e70844790 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32555) bafdcde8ecd83119afd7f98363b364138d3b35dc (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32545) 2a29f1770b62844b27197d2507377361d45ad7c0 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.40.0 to 0.41.0 (#32543) edb94f897d1e0ec3335fb7268f07e0fd2666fbb8 (dependabot[bot])
  • test(loader): cover 8192-byte EOF boundary for LoadValues fd4ed4952b5f9f54344a0c014f7acd7885bd60c6 (Dean Chen)
  • fix(loader): do not drop values files ending at a 4096-byte boundary 601445e88cf1fe66b2885c793d564030aad1d707 (Dean Chen)
  • chore(deps): bump the github-actions group with 4 updates (#32523) f3d68cdbea3076a0283cbd1e3ec44a409ad48a43 (dependabot[bot])
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#32521) a0c2f6dade5180fdb08bcc5debef56357cd586ab (Terry Howe)
  • chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 (#32514) f8a308cd470bc1f087b3f4915ba775af18c5ffab (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 47eb219a71bac4638a9b9db916a5d8c415c553bc (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates (#32508) ae877c8bfb943d2cc1aa10b34f0c4fada55e6f56 (dependabot[bot])
  • test(action): poll for the interrupted install goroutine instead of a zero-margin sleep (#32328) a8ab76e86f11e2ece5a3d0262313140e21db249b (Nikolaus Schuetz)
  • chore(deps): bump actions/stale in the github-actions group (#32487) ac1c68746f72e5bbbe5b7e5a052629aab7e5ab61 (dependabot[bot])
  • test(package): fix errorlint + exact path match in lock test e92316751375bafd4621232bb39a1238a22e91c4 (Ilya Kiselev)
  • fix(chart): normalize StampModTimes timestamp + Chart.lock test 3c3be926aaea573cf94931877e8072aefb231b60 (Ilya Kiselev)
  • chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 ce27485634fcbd54be8fc8d99a5e4799456420c9 (dependabot[bot])
  • fix(scripts): clarify cache-busting behavior bc0114c70841e2a05c95e53e20358fb761dbfb2e (Solomon Wakhungu)
  • chore: fix gofumpt issues 24bbb46c62a54000394ce77c4e3fda17d5566ffc (Matthieu MOREL)
  • fix(scripts): address cache-busting review feedback bbaf420a101379dad4f8452129cf26f2fff7e536 (Solomon Wakhungu)
  • Make golangci-lint happy f3edb83df48c505878ffd3ebb89ef6a809e14008 (MrJack)
  • Added missing import 94a3315f4d699c6bb4140550d4c98b46bb4382d2 (MrJack)
  • Readded "unicode/utf8" 500f02d597628d8ca7be8b530edcbedbf397b676 (MrJack)
  • Potential fix for pull request finding f1ede7c9c114c745da2f5c6cef8d27e1eb342498 (MrJack)
  • Apply suggestions from code review 4fcc4e4b3db363654f3dd5240211b195e309970e (MrJack)
  • refactor(rollback): validate description length before cluster reachability check 91520a78063582ab8265d9364815665f688deebc (MrJack)
  • refactor(test): reuse existing rollback.txt golden file e73dfab5fb47c9f3a0f24cb3f3a7a4aa8b65143e (MrJack)
  • Removed extra space in rollback-with-description.txt b177a8e9060720e91c402cdba2224c6d58789fa3 (MrJack)
  • Enhance rune count in pkg/cmd/rollback.go and pkg/action/rollback.go a92611c20241be8e7dc32f9b229afd2a722a06f8 (MrJack)
  • Use rune count to count properly multi-byte UTF-8 characters 8a34f3b7b4d9ffa4e82c7893eb3d8572fd464198 (MrJack)
  • Enhanced rollback description length cb91040c447723a7338a513a6d1604e5daaa1e0b (MrJack)
  • Changed if construction e69e424ab1917f0d53eafe63c408b5280b39624a (MrJack)
  • Set 256 as limit for maxDescriptionLength. 256 comes from MAX value for key and value b606955f095408270914c47eac8414b9061bfb49 (MrJack)
  • feat(rollback): add --description flag to provide rollback reason f8180e6de473bb4b1008b76aa2ac63b8bcd104c0 (MrJack)
  • Update resource_test.go 622f16b37fdb1f1915aece9436165dc53c26b3c5 (Matthieu MOREL)
  • Update labels_test.go 61d99a8bdbc90219c474c96e11790ab6a90cde61 (Matthieu MOREL)
  • Update chartrepo_test.go 532eabf88afa2b119f90ef82d1bf309923cbbb78 (Matthieu MOREL)
  • Update show_test.go bfca0688b1a44b1cf7ae37ac5f64792a8dffe7f1 (Matthieu MOREL)
  • Update rollback_test.go b59dfd39015311d94c04541ec5b91959c6b4b6d3 (Matthieu MOREL)
  • Potential fix for pull request finding a27f3a062027d8b459eed2186076fb9384b82f38 (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 1 828d01a8786162987482408b7803ceb3f3c176ac (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 3 9a2be11e6f1af0c89dc0988b88fd339751baa44c (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 2 4d9c03f51c30f851a03676a1315f492de10210e6 (Matthieu MOREL)
  • chore(internal): refactor: finer tests conversions to testify part 1 5142ca8ddca79a19c8529508c77ab4b27cb23a8f (Matthieu MOREL)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates (#32459) 8f74dce6ba8d7264ce75f52507616720865e712d (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action in the github-actions group (#32458) 050d3e99b9dc8796ced4b99cb272cba91c43055f (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates ea7c838e0875449a4b2fe141a961aa29f1435a5d (dependabot[bot])
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 fe3f98b5641fe3a0a9fa2575df8698136c2a0029 (dependabot[bot])
  • chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#32441) ed246e29f7940fffa4631aa67cfef66c5722d4a7 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32440) 5223ceacda672bdd72efe8995d4abd9327c6539c (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 a0f954e277702f87883d18760207b34ba3efbf80 (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 cdccef4818c06e4d1ee9521cfb9bcadc30c282e9 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 065d3a6a3dcda016a9de88a9b32f0e9eedcf0876 (dependabot[bot])
  • chore: group github-actions dependabot updates cd4c5d3bfd7d19be9a3a01ba63a650cf044e1409 (Terry Howe)
  • chore(pkg): refactor: convert tests to testify assert/require part 19 33c28395695c53b579c1f94d3dfcadbe2ff2b862 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 22 0b1aa55cbb14ce3b7c805a6262e2159c4a70bf73 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 21 a934b827fa9569c8769c981b1d4847f72a4c1f94 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 20 1d4665e54c28a41a5631c19f3bff14ef3d4e058f (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 18 fb8a62bf13cbc0ad78d0856678365b246b224997 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 16 0fa9f7d427b99437e51dbb8ada21d19f93898652 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 17 4073566e285d5bfaafaf0cec2b927fa037bfcb2a (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 15 71733656a5c64307f85290bc9fe6480ad637a117 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 14 dc66ee7be786b1ac146a21fb2114b9678aaf25a4 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 13 aae82bf97a4c02c70982c14118912c459db43ec9 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 12 a3fa28ae22934450389ab31343c0ca20321d302c (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 11 dc3e3a5e7efadff49fd26eac511cf18801af0ebc (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 10 2f5a33fb77daca9ade910ed7fe557e3e85fd77f6 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 9 13d1edc5f346e136b249d4c8232e83689f07c3b4 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 8 e5f0e07b96580305c3902eceb738cef230b44bec (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 7 ca1767b81397e5ee3b3a5f7926590ddf1134c9c5 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 2 0daa77fa9bffe2c8359bb079d3e978fe74a0b5a4 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 1 d4ec8e9b87a002d48c2d7a8f3c145c9a324bfaef (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 6 0844b3b8b513e1ae6787c44fc5cfd224bf86c573 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 5 3ff05c835ecb1bbf794089d309556dbc75778ef7 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 4 658a8fac156a92a7462cc9aab98da796da6dc116 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 3 df2d013517b0a237ea8858677558db3129a92911 (Matthieu MOREL)
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#32411) 8c7f3a14d2cbde663847641b1f4274d266e6f0f3 (dependabot[bot])
  • chore(internal): refactor: convert tests to testify assert/require part 4 (#32408) 6c45810119937e8fcbbc4f0b7f56c32a40c52d87 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 3 668e7e580a01dbf66da0f620da6b980ee0cb4d80 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 5 f1d5979e7d8b9d1e36b3cf703d150e8078c2e16e (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 6 f3402c1cd69b84d278af5a30551e376d727d27c1 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 ba31ca0c0b455541f05986e8dcb8a0554fa70dd2 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 615a29987660b11909f984887b47f7f608757d87 (Matthieu MOREL)
  • fix: pass registry client to downloader.Manager in upgrade 0604d8fb1ee8ea172604cb739c93ea8d5ad068c6 (Gates Wang)
  • perf: enable concurrent status computation to prevent multi-minute delays (#32043) 3bcf965f997499c477436515e6ccf5d51ab82e5e (Zhaofeng Miao)
  • remove legacy import comments from remaining packages (#31933) 82be04d7f2881f59b3a85483eb248417e1d18fc3 (Abhay Chaurasiya)
  • Potential fix for pull request finding c2fda5ac5835cd1eca44a29047c18edcde66e00f (Terry Howe)
  • fix: enhance error handling and improve test assertions (#32352) a2b1a60d51223254bd9c2f08cf3f411eb9d9fc58 (Matthieu MOREL)
  • fix(scripts): add cache-busting to get-helm-3 version check 5a30c7ae8504218fd68d87c5a7d929d0a3bb3891 (Solomon Wakhungu)
  • chore(deps): bump github/codeql-action init and analyze to 4.37.1 0563162dd95dcff0f7b1ac09e0c784ae21b72245 (Terry Howe)
  • chore(deps): bump github/codeql-action/upload-sarif (#32378) 06b95860dc2419062834a5e59921569676b45031 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#32376) a494169853d1e6f752eb838fedbb00d1a8593b66 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 eeb37edfeafffdb562b97774f85a394332cf58dd (dependabot[bot])
  • chore: Add AI Vendor specific paths to .gitignore 8cd3a48c34136f14fa6ba60554ef5ab0e12625be (George Jenkins)
  • ci: auto-label PRs targeting main with v4.x 9f3c89a4b50e99a46c23b6942b87b205bdd8c33f (Benoit Tigeot)
  • fix: 'gocritic: filepathJoin path seperator' lint error 96a25ab4f86c2c78de2acfe45a69c0a40055aa3c (George Jenkins)
  • chore(internal): refactor: convert tests to testify assert/require part 3 caac755f199adf5ac4fbbc8c46a741d004ed7276 (Matthieu MOREL)
  • feat: honor SOURCE_DATE_EPOCH for chart archives (#32162) ad93b7df635d032a71201206cc3490e76b83bef4 (Lohit Kolluri)
  • Fix missing conflict retry with server-side apply (#32088) aa1ae3a36017156817e89e59eee0e88af9fc6365 (Jakub Jaruszewski)
  • chore: fix elseif and ifElseChain issues from gocritic (#32289) a02a5713deef0c0c1bf4359dcb0218a9c640224d (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 f280d9c1b5da4e2f25cac76b2fcce58bad35aae9 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 d72b28ebcbecf1c582e57f17c1272536b90513d1 (Matthieu MOREL)
  • fix(ci): pin govulncheck-action to the v1.1.0 release (#32304) 68977ec0b5a446286668170dd72bdf59695f8cd5 (秀吉)
  • ci: track GitHub Actions updates on dev-v3 via Dependabot b963afaddfe127620c70773e46b1d3a1f9c559e8 (Terry Howe)
  • chore(deps): bump actions/stale from 10.3.0 to 10.4.0 (#32330) fb53c00ae72c08cf6d64289efde3aaeeda6c42fc (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32334) dad026acb8caab81411514715c50e50510f558ca (dependabot[bot])
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32333) 84e63e5c38913594e476b15609fb6c7ab2d60467 (dependabot[bot])
  • Address review comments 73c1fb245120df3f3adb53c12e69f29134147de7 (Matheus Pimenta)
  • Fix vanishing empty lines bfebbb7c1a3cea951dcc33d3253492f6a6df4eb2 (Matheus Pimenta)
  • fix: add missing https:// to Oracle link in ADOPTERS.md (#32324) 7b9a5c8911c7aa53eab1bfde995c63ff626a7ca4 (Akanksha Trehun)
  • fix: remove trailing whitespace in .golangci.yml (#32325) cfa3b24fe6c2a0e4bf22887cc1051d7674c6b348 (Akanksha Trehun)
  • fix(Makefile): update outdated .sha256 comment for Helm v4 (#32323) a91e9f6a249533cfd8fdb98cbd909ecb16bbc813 (Akanksha Trehun)
  • feat(linters): add new revive rules for better code quality 16787d65f5091cf5c5e4f2884ef0027ada117465 (Matthieu MOREL)
  • refactor: enable several checks from gocritic 9662fdd73b848e04889b452335b60250414ef6db (Matthieu MOREL)
  • fix(linters): update golangci-lint to 2.12.2 7bfcdb0fc34894ec6f1622f48608161188b2e2a8 (Matthieu MOREL)
  • chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 8118a4da1ed0ba470571ee3e150e4949b373ba9c (Terry Howe)
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 0fc3b9385348b0d346728de3b0969ae2a3b7d47f (Terry Howe)
  • chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 71901a4c7cc6280317b892341b5dde5a866c952c (Terry Howe)
  • chore(deps): bump github/codeql-action/init from 4.36.2 to 4.37.0 (#32313) a71eb99db4f0c08fae21d3bfafa3bdfb6465b2a4 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 (#32305) ea52bdf7e2c5155d629c85aa7eb7f625eef92936 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.39.0 to 0.40.0 (#32309) a242855a7e2c31efd1f0f69ad1c5ae24be0563de (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32311) f25f9555785b15fc7f41aa2e5e43979b1bca5021 (dependabot[bot])
  • Potential fix for pull request finding ed651de9b12ff98c0aa13985a88bca9aca0aa4fb (Benoit Tigeot)
  • fix(ci): resolve Node 20 deprecation in govulncheck ca24a55c314d2fd84430d88c55ce09a391798d8e (Benoit Tigeot)
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 e3fbe2e9d10985fa30aeeb678c376d9556a2b6f7 (dependabot[bot])
  • chore: fix emptyStringTest, nestingReduce and singleCaseSwitch checks issues from gocritic 96b315f188932b7602e1ab1497e2d81d1caa8068 (Matthieu MOREL)
  • Update pkg/cmd/history_test.go c1569ea83ff40ab534f3db531316cb0408717d3c (Matthieu MOREL)
  • test: replace assert.Equal with require.EqualError for improved error handling 65077c10fa3e4f339142f498d84c1c7bfb1d320b (Matthieu MOREL)
  • test: replace assert.Contains with assert.ErrorContains for better error handling 4ade4a5495b81a4cf465906a2414267ed0b1dcc8 (Matthieu MOREL)
  • chore: fix several checks issues from testifylint f34ad6c337a53f0d77d1e24b5d1c6cdd1c57bc63 (Matthieu MOREL)
  • test(cli): use t.Cleanup for resetEnv with t.Setenv 47bde119597961113d769a9d46a565f448565e7a (LarytheLord)
  • test(cli): isolate user-agent rest config test from host kubeconfig 9b30076180b8f73bbe25d0f4cd752207154ad0c1 (LarytheLord)
  • chore: fix several checks issues from gocritic 07259ecc86521db556c4a18331241bbefc6bb6b2 (Matthieu MOREL)
  • fix(engine): prevent Files.Lines panic on empty file 143631f7356d7f2250540c044ae20277f495cc2f (Mahesh Sadupalli)
  • Potential fix for pull request finding d539556a8d03c48258d08207aaf918c202c90df6 (kimsungmin1)
  • chore(deps): bump github/codeql-action/upload-sarif e9eda8c5988d74172862b3b72cb1f8edf2226191 (dependabot[bot])
  • fix(registry): resolve golangci-lint issues in token-auth tests 503acff97580aa803f5d639fb1fbb06ad1226c31 (kimsm28)
  • chore: go mod tidy after rebase on main 4e9ca06856b1aeba65c4d4cd8e4dce4c83445776 (kimsm28)
  • fix(registry): use plain-http registry in token-auth scope test 3cbee7e935eb6e783c36b17d6eb79eb6edcda15b (kimsm28)
  • Update pkg/registry/client.go 26ada49c1ad50af5e11dbb8a65b703251295c689 (Terry Howe)
  • test: improve client_scope_test.go to avoid data races and brittle assertions 9b7a70f0ca4bf0dcfd242962d9eef211188057dd (kimsm28)
  • fix typos in withScopeHint function comment ee181f4570550d61379bf59f2a69b993b74d49cf (kimsm28)
  • fix registry test failures by adjusting DockerRegistryHost and auth server listener management 1f0a72849657c3fe167320f7f5729c377f6dadf8 (kimsm28)
  • fix variable naming requestUrl -> requestURL 8883c9cc7006eef7e3d07836b2d5dd7ca1066168 (kimsm28)
  • fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder 530e728ea932109befc4a8165cd9a2bc78170c07 (kimsm28)
  • change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) 26e5071f6680272d773f0ca22ea946a35c4dce66 (kimsungmin1)
  • change client_scope_test.go to use httptest 8c8d6e3262be77783ef42a47c9593b6e42a3066a (kimsungmin1)
  • fix typo 9d77ccd46ddf9b2675137891c159d1de35674072 (kimsungmin1)
  • remove freeport dependency fc743b2a1be47c69cc3bf58e0fdc023f8844f866 (kimsungmin1)
  • add newline in license header 319e06cda30e706db541066d5fe07249b0ed656c (kimsungmin1)
  • fix scope when helm push to a registry that use token auth 301e3a12d55c279ef3bd0b1976bafd43bc1e0b7b (kimsungmin1)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.1 to 1.2.2 5a9b8a788ff260c031f2d2f3e1b6903bd31b3496 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 f76136d39f8c1fd6110a23317786c4c53f6f9cb9 (dependabot[bot])
  • Potential fix for pull request finding 144246cd2893f92ee8e477c691837ea27e8c2733 (George Jenkins)
  • chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 07faec5593aabbde72c357d9c10123b6a3da33c5 (dependabot[bot])
  • Apply suggestions 61bba7c659e3b45ba4db195d58acc668a9c32441 (Will Noble)
  • Properly format the extra field in gzipped packages d887779b9b0eeb720672a7927479fc627e599c24 (Will Noble)
  • refactor(internal): convert tests to testify assert/require addbab2e6444954eb1a9bde86730ee7d11810b46 (George Jenkins)
  • refactor(internal/release): convert tests to testify assert/require 7ab295fcfcf3977599939d76ffbf7a266401bfbc (George Jenkins)
  • refactor(pkg/release): convert tests to testify assert/require 4cce0e9e2a870508864c1d497918e201dc0f339c (George Jenkins)
  • refactor(pkg/registry): convert tests to testify assert/require 8b0a167484a7f6de4a2cb12bf81641873a275d7b (George Jenkins)
  • refactor(internal): convert tests to testify assert/require 3ce02c585a18b38c5dba1177a54c3a0322c53d3c (George Jenkins)
  • refactor(repotest): convert tests to testify assert/require b42faba9d293d45d2654dac5b540adb5b50e5b4f (George Jenkins)
  • chore: enable contextcheck, fatcontext and noctx linters 34cfdfdbe57ec9690113e141395c499a7c00ca6b (Matthieu MOREL)
  • chore(deps): bump github.com/cyphar/filepath-securejoin a0c7d1e1f5ef222fb1be143e9846cebf8b3a2d54 (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 5848047c6b1e854fe7d451e451dbf748225232b9 (dependabot[bot])
  • test: use assert.Empty for zero-length assertions in validate_test c36e4d52bdf92a05a8d2d9f40e5927a1245dce2d (Terry Howe)
  • docs: fix typo in helm version command description dd442c0cc7c3d7f397bbf93ac5a9551a4e2f0139 (s3onghyun)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates fa68e6cb094e84076bfad53af494d7db7642ceee (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 3d2ff2a1aa3d8696105af5367a254c6824dff4a6 (dependabot[bot])
  • refactor(pkg/strvals): convert tests to testify assert/require daa045d4923007c1ab815b39038b81491506dc0a (George Jenkins)
  • refactor(pkg/cli): convert tests to testify assert/require 16b0760dfd99b5c501cbfc2138a207e1b3512c0f (George Jenkins)
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" d3bd09147bbae09ca85615452bda31b8215e66f5 (George Jenkins)
  • Update pkg/ignore/rules_test.go 9ad5620edc1b51507d111f7f998cc0f5b95e5726 (George Jenkins)
  • docs: improve CONTRIBUTING.md wording fa9cb4919423e80d1693275396f9d8fa6b324baf (devShaik010)
  • refactor(pkg): convert tests to testify assert/require f4d713abb210230b3935c4a9685f1f34a8330970 (George Jenkins)
  • refactor(cmd/helm): convert tests to testify assert/require ed76a36ab9b4c8f5a56049aa201dd8ce04836ecb (George Jenkins)
  • chore: rename savedErr to clear its specific purpose 9c1d5a3b249c6684bfe902455a61e728bbf7dcf6 (Jeaeun Kim)
  • chore: fix lint 99baa2edd493af15ffd98f39808fac5c4a9b12f7 (Jeaeun Kim)
  • chore: store err separately for clarity ea847fef95702ca53ec5ab3c627c696ea1488598 (Jeaeun Kim)
  • chore: Improve error reporting for helm template --debug with --show-only 2014946e550ed7a667b9ae8cfe15a377a2fe94ca (Jeaeun Kim)
  • fix panic on repeated IsReachable calls 1f7869c31f8d96638d238957b20a27d665001d88 (Mohammad Abdolirad)
  • fix: protect FailingKubeClient.RecordedWaitOptions from data race (#31925) a5552edf9fb0e23b475310d943a2ecd1df5aeafd (Terry Howe)
  • fix: route registry client output to stdout instead of stderr (#32056) c2f1b238a114d6d7a85b37f80fc6975bd48e4c09 (Terry Howe)
  • fix(engine): add debug logging when lookup returns empty (#32205) 7058f841af78112f81098e3f434f90d30c43b4fd (Ogulcan Aydogan)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 74c1702157722e44f72c4a731c652c9e6ed58f83 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 33b40718860fcb563ef34d0a4af2a1e565fdd108 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 1019146bb36fde225ee93fdb173d12c91d96b834 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 7f855dfe8a1176d41808451aa0e8ab7b11664f03 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 c603c50aa654b23c46c7e248cdf5cd016f0a3fa8 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 f8abbfd7d4ab7d9cd883fab5d24c8175eaec56b4 (dependabot[bot])
  • chore(deps): bump github.com/tetratelabs/wazero from 1.11.0 to 1.12.0 3aa1b742b9228219378ce3d1b978d8d9e30547cd (dependabot[bot])
  • Fix empty and len testifylint violations across test files 488c4a805debe0fc1b2777fa1823e079e79a5869 (Matthieu MOREL)
  • lower resync period 6dc1c1ccf8066b06f5e30c5bf1d2cdd2924c8c43 (Austin Abro)
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 7510b832149ee739b3ace110f8238e1ffd922cca (dependabot[bot])
  • ci: enable bidichk linter to prevent invisible Unicode characters e679ec9f041f9fa484f8539efd4b5e665526b883 (Arnav Nagzirkar)
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 54ae27fd841f33fd979476b1c378fe58fe7ff52f (Terry Howe)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 dbb3e353372f6e4abca9155c44d8b9a5f1e97626 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 60665e9035ccab375780ef77934bde2ffa674448 (dependabot[bot])
  • docs: update version status for v4 stable release 442e1460b9ec4450a7c12d6b6a59848e7b16d9d1 (Benoit Tigeot)
  • chore(deps): bump actions/stale from 10.2.0 to 10.3.0 ace245b8273e23c9f12993befa535a19ab1bc172 (dependabot[bot])
  • fix(provenance): check error return in Digest e095e690a8b3c31b6dbcb9af02f870cc41fbf18b (Sebastien Tardif)
  • internal/plugin: remove zero-width spaces from plugin name comment 979e68fbbd5a932c67b756884880d7641f268632 (Aleksei Sviridkin)
  • Renamed flag from show-rollback to show-rollback-revision d097d882d473b42c7460d0be674138a3b52c08da (MrJack)
  • fix: skip non-Pod test hooks in GetPodLogs 1a1ec6e3cc052f1358ff668eeb439acd3f8e60c1 (Gregory Man)
  • fix(upstream): upgrade to cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 378ceacd9ce239e5b3de1e7ce7c55cf18e16f69b (Matheus Pimenta)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.0 to 1.2.1 b5a9299eecefe45da13a01188cabac6af4c336d0 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 f772ffedc6154f82bc0ac680f9ffa46054112ac0 (dependabot[bot])
  • fix(repo): use structured slog args in index.go ea2343ebeaf7b4b6b115fd1c7b34a159d6a573ff (Sebastien Tardif)
  • docs: fix 'than'->'that' typo in deprecatedAPIError godoc 2032ec5cbaf168de0fadc59959319e4b580ff72e (Kai Tanaka)
  • refactor: use slices.Backward to simplify the code 432fc8a21724cc75e0cd8ec8fd754d2bde42c15f (box4wangjing)
  • Potential fix for pull request finding 53d5f13f46f7dd555be8bd90616abdc77d470000 (Sumit Solanki)
  • fix(downloader): order DiskCache.Get checks for overlayfs empty dirs 6620fec5d19f6c86425501ee64f8cb8a8fb3fa3e (Sumit Solanki)
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 2cc69251d81ad94e9e0edbea6c31dedf4e2c25d4 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 d9b2716be5fbb3309c3176b0c887d91ffb16c048 (dependabot[bot])
  • Bump to version v4.2 (#32102) 19b3656306829cae166f484feb4a1319f47844c0 (George Jenkins)
  • Fix lint errors 03a65a71f7397620315747ecac4ba60b73f63623 (Evans Mungai)
  • fix: address Copilot review on ownership-verified uninstall 007713087bd4f381bb8b74f66f35af9e3dafa376 (Evans Mungai)
  • Potential fix for pull request finding 9728c5af31c7039e9806037c4e59e46eeb43d79c (Evans Mungai)
  • fix: address review feedback 922558fc1a3b3f2c2b7e8ad0f32bd5bcd46ca70e (Sebastien Tardif)
  • fix: fetch logs from all containers in test pods 854f7f6b7217dcfe135df9e4652517d3ec9c3913 (Sebastien Tardif)
  • fix(registry): remove pre-Go-1.20 transport cloner fallback 73f71bceae2674d41fb2f082ee4fa5a842b613cc (Ogulcan Aydogan)
  • testifylint: enable error-is-as and error-nil rules f8ba28bb17f9254bc2c1b6409b24c16a59934a9c (Matthieu MOREL)
  • fix(kube): always propagate context.Canceled in WaitForDelete 5e09ee78ee5861b857a3526a2fd1ddf2f73950e2 (Terry Howe)
  • fix(kube): prevent spurious early exit in WaitForDelete during informer sync 4e24ee41a436889a2542a008eaa0ecab8332a1eb (Terry Howe)
  • fix(version): avoid false range detection on prerelease x/X 740174a2b12074f7ca506ff330a918a4ff335c39 (Benoit Tigeot)
  • fix(version): version range || can has no space b79d7f18813796f101f66eff6c513ded25edf0ad (Benoit Tigeot)
  • feat: report in debug the version we select with version range arg bf78b876c74ee4359a6cebb54e0b97183cdfe129 (Benoit Tigeot)
  • fix: prevent warning when using version range constraints 1e145ee2b243ef97bce0622cf55da8aa17ebb65f (Benoit Tigeot)
  • Add duration functions 722dd3e3a82b06fbda60ebf24edc653e7b74e3f9 (Jorge Rocamora)
  • chore: fix deprecatedComment issues from gocritic 83a0138172e22f5efb7d9852b3ed0fb5fc8117b2 (Matthieu MOREL)
  • chore: enable errorlint linter af31a679244b584317fd8053aee498c4d5ec301c (Matthieu MOREL)
  • chore: fix whitespace linter 1e0f702f00d5fd36c9de9448e3271787bc588273 (Matthieu MOREL)
  • fix: address Copilot review feedback on rollback revision PR 6927cde3f98d9e5f248418805e40c7408e629746 (MrJack)
  • feat(history): add --show-rollback flag for opt-in rollback column e889cff0896d842c7e1854729611ac520a925d0b (MrJack)
  • Update pkg/cmd/testdata/output/history-with-rollback.txt 681ccb19a68dab98b75e407ba38b37c45ee9c5d1 (MrJack)
  • Update pkg/cmd/history_test.go 0737e438aae04fca872b66f185b0f2aab8bd0d86 (MrJack)
  • Added missing pkg/cmd/testdata/output files d52b489459d51d67d9db877f169bd09273b6cd6c (MrJack)
  • feat(history): add rollback revision column to helm history output 300f71b1ebb1b383241a1806a813c6f30a8ff382 (MrJack)
  • Add ownership verification to uninstall action f552950b05066d4d6a9d6cf9a91c26656f4a90fc (Evans Mungai)
  • Additional logging for ownership verification in dry-run mode 6d5b5aab32be039f8f56b0c497a7f4af28ce21f0 (Evans Mungai)
  • feat: add ownership verification before deleting resources during uninstall 906f87ce1d6d7a46bc68601c1217623e40b78877 (Evans Mungai)
View originalPermalink
How v4.3.0 went
v3.22.0-rc.1Pre-release

Helm v3.22.0-rc.1

Helm v3.22.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v3.22.0 is officially released.

The official changelog will come out with the v3.22.0 release. For now, you can see the commit changes from v3.21.4 here.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.22.0-rc.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

View originalPermalink
How v3.22.0-rc.1 went
v4.3.0-rc.1Pre-release

Helm v4.3.0-rc.1

Helm v4.3.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v4.3.0 is officially released.

The official changelog will come out with the v4.3.0 release. For now, you can see the commit changes from v4.2.4 here.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v4.3.0-rc.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

View originalPermalink
How v4.3.0-rc.1 went
v3.21.4

Helm v3.21.4

Changed 3
  • Bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158
  • Bump google.golang.org/grpc to v1.82.1 for GO-2026-6061
  • Bump golang.org/x/crypto from 0.53.0 to 0.54.0 and golang.org/x/text to v0.40.0 to fix GO-2026-5970
Fixed 2
  • Prevent Files.Lines panic on empty file in engine
  • Migrate provenance to ProtonMail/go-crypto to resolve GO-2026-5932

From Helm

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308
Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

Full Changelog: https://github.com/helm/helm/compare/v3.21.3...v3.21.4

View originalPermalink
How v3.21.4 went
v4.2.4

Helm v4.2.4

Fixed 10
  • Improve error reporting for helm template --debug with --show-only
  • Fetch logs from all containers in test pods
  • Check error return in Digest and encodeRelease
  • Fix panic on repeated IsReachable calls
  • Set [pull,push] scope when helm push to a registry using token auth
  • Fix missing conflict retry with server-side apply
Security 1
  • Bump google.golang.org/grpc from 1.80.0 to 1.82.1 for GO-2026-6061

From Helm

Helm v4.2.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • fix: Improve error reporting for helm template --debug with --show-only- #31185 by @kyokuping
  • fix: fetch logs from all containers in test pods- #32099 by @SebTardif
  • fix(provenance): check error return in Digest and encodeRelease- #32136 by @SebTardif
  • fix panic on repeated IsReachable calls- #32184 by @atkrad
  • fix: set [pull,push] scope when helm push to a registry(use token auth) - v4- #31211 by @kimsungmin1
  • Fix missing conflict retry with server-side apply- #32088 by @Kajot-dev
  • Properly format the extra field in gzipped packages- #31884 by @ouillie
  • Fix vanishing empty lines- #32327 by @matheuscscp
  • fix: pass registry client to downloader.Manager in upgrade- #32400 by @SetagGnaw
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1- for GO-2026-6061 #32450
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158- #32521 by @TerryHowe
Installation and Upgrading

Download Helm v4.2.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Minimal fix to build failure from #31211. 3900f434fd3ef2b84065dc04508df48f288dba00 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#32521) f7c6e8f0f1e0e649e8d03b1535db4f3b8d0c9af2 (Terry Howe)
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 035a2c38e9a75ca0988c8449c0b7257f30d04064 (dependabot[bot])
  • fix: pass registry client to downloader.Manager in upgrade f76a5f46a952f731cc1543f348121297c8b3f6cc (Gates Wang)
  • Apply suggestions 5a7c6c7c732b04ad6517b452d538da9e18993d67 (Will Noble)
  • Properly format the extra field in gzipped packages 22818486ce0fc18d92e01ba39faf65f70ffa8865 (Will Noble)
  • Fix missing conflict retry with server-side apply (#32088) 2c979a17ac6b6d7bfe2d6650b69fa9effe963d4d (Jakub Jaruszewski)
  • Potential fix for pull request finding 2bd2c66544634e419ede3cfa18952cce5a5acd08 (kimsungmin1)
  • fix(registry): resolve golangci-lint issues in token-auth tests 183a5402291c553898b9c404bc17c95c81ea1c6c (kimsm28)
  • chore: go mod tidy after rebase on main 08d8da1aa9080772e57ab5bf5b00b3c13364af00 (kimsm28)
  • fix(registry): use plain-http registry in token-auth scope test 9655b5aecc0d36142d0620ff5ed762065a997739 (kimsm28)
  • Update pkg/registry/client.go 430dfac3eeab03886f511761e3969f738f760364 (Terry Howe)
  • test: improve client_scope_test.go to avoid data races and brittle assertions 9569605eccf8318fe25bf78c46c4eb462ce8fc3f (kimsm28)
  • fix typos in withScopeHint function comment 63f2b6809919e5e8e3e04f52064a536a14f1ff9b (kimsm28)
  • fix registry test failures by adjusting DockerRegistryHost and auth server listener management f7488c0be8c65dd16386c215cac4332900667278 (kimsm28)
  • fix variable naming requestUrl -> requestURL 8fe78fbe46eb2db5c75ab1cc89699c750017dca6 (kimsm28)
  • fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder d0670d2fb2c3426cde4b41927b5e9b8b4370df93 (kimsm28)
  • change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) 804256ef659226f26b2222ccb8f9cf18ef1b1946 (kimsungmin1)
  • change client_scope_test.go to use httptest d79bceb807692512461d8007040c41bcd1547041 (kimsungmin1)
  • fix typo d34fcd9264225a1e6296c4b0ee124dc69f3b3ecc (kimsungmin1)
  • remove freeport dependency 9fbd190c30addb4786e4fe930a0fe98bf354116a (kimsungmin1)
  • add newline in license header 9275661357afdfe12b8ce561e8103673f16cca8d (kimsungmin1)
  • fix scope when helm push to a registry that use token auth fef91f3e6942a20148542461eaebfb24f2c09584 (kimsungmin1)
  • fix panic on repeated IsReachable calls e89ce68bc5fec430bc1e2f0aef1aca6a2e71f795 (Mohammad Abdolirad)
  • fix(provenance): check error return in Digest ff1ac83bfb1246cdf1b57a4db0042085cc8b265d (Sebastien Tardif)
  • fix: address review feedback 4b4dedb2bdcfac886c124a361a5126e3c5e3c5df (Sebastien Tardif)
  • fix: fetch logs from all containers in test pods 7c8010322b8639cdf7844ac1ae5f8d444db43935 (Sebastien Tardif)
  • chore: rename savedErr to clear its specific purpose ecc9cd2f1b5b53dadcd12395c032bc5b3ca02937 (Jeaeun Kim)
  • chore: fix lint f6211ba49bfbf5768ea44be3a1402869a4709b37 (Jeaeun Kim)
  • chore: store err separately for clarity 3507ea5bfdbad921684ac131896b6968c76e9ca6 (Jeaeun Kim)
  • chore: Improve error reporting for helm template --debug with --show-only 211ffae93d2d741a2dbcd74b4aa2a1bc2fc27d5f (Jeaeun Kim)
  • Address review comments 51a9837ba177812c381515886c4f0cd0b7a633e6 (Matheus Pimenta)
  • Fix vanishing empty lines 83a8b70ffc1bcf97bb293cf6b35bd3b5093e8c30 (Matheus Pimenta)

Full Changelog: https://github.com/helm/helm/compare/v4.2.3...v4.2.4

View originalPermalink
How v4.2.4 went
v3.21.3

Helm v3.21.3

Fixed 1
  • drop containerd v1 dependency to resolve govulncheck CVEs

From Helm

Helm v3.21.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.21.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Apply suggestions from code review 1ad6e68924fdf6fb0c7dcef8e9e1dfc0f36eaed6 (Benoit Tigeot)
  • fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e7d51b08e30a0233bd546c345ab3ea3bba (Benoit Tigeot)
  • chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178ba06a8a1eeacaab1df9162b658b1e07fe9 (dependabot[bot])
View originalPermalink
How v3.21.3 went
v4.2.3

Helm v4.2.3

Changed 1
  • Bump golang.org/x/crypto from 0.53.0 to 0.54.0

From Helm

Helm v4.2.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v4.2.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7feece8beb0fcba47059ec9b522fd929a64 (Terry Howe)
View originalPermalink
How v4.2.3 went
v3.21.2

Helm v3.21.2

Changed 1
  • Update Kubernetes client libraries to v1.36

From Helm

Helm v3.21.2 is a patch release to correct bump the Kubernetes client libraries (client-go, etc) to match the expected Kubernetes v1.36 release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Update Kubernetes client libraries to v1.36
Installation and Upgrading

Download Helm v3.21.2. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.21.3 will contain only bug fixes.
  • 3.22.0 is the next (and final) Helm 3 feature release
Changelog
  • chore(deps): bump the k8s-io group with 2 updates 125963406833fe0525be91f46c8b5b0f22fb9e32 (dependabot[bot])
  • fixes b52e27609b4420d206c1874ce9b0c75e271665e7 (Matheus Pimenta)
  • chore(deps): bump the k8s-io group across 1 directory with 2 updates 3342dbfec8f39776a9accd50fa91a52d68673af1 (dependabot[bot])

Full Changelog: https://github.com/helm/helm/compare/v3.21.1...v3.21.2

View originalPermalink
How v3.21.2 went
v4.2.2

Helm v4.2.2

Fixed 1
  • Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite

From Helm

Helm v4.2.2 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #32214
Installation and Upgrading

Download Helm v4.2.2. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.3 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" b05881cf967a5a09e19866799d0edfd40675803a (George Jenkins)

Full Changelog: https://github.com/helm/helm/compare/v4.2.1...v4.2.2

View originalPermalink
How v4.2.2 went
v4.2.1

Helm v4.2.1

Changed 1
  • Upgraded dependencies: cli-utils to 1.2.1, controller-runtime to 0.24.1 and k8s to 1.36.1
Fixed 4
  • Data race detected by -race flag when concurrent goroutines both call GetWaiterWithOptions on the same FailingKubeClient instance
  • Helm command success messages writing to stderr instead of stdout
  • Helm 4 emitting "unable to find exact version" when using version range constraints
  • Race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite
Security 1
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026

From Helm

Helm v4.2.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Fixed data race detected by -race flag when concurrent goroutines (upgrade + rollback, install + uninstall) both call GetWaiterWithOptions on the same FailingKubeClient instance #31925
  • Fixed helm command success messages writing to stderr instead of stdout. Now correctly outputing to stdout #32056
  • Fixed Helm 4 emitting "unable to find exact version" when using version range constraints #31757
  • Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #32081
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #32153
  • Fixed SDK errors by upgrading dependencies: cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 #32128
  • Dependency updates
Installation and Upgrading

Download Helm v4.2.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • fix: protect FailingKubeClient.RecordedWaitOptions from data race (#31925) d591a19b953bd9cfdf7d9ddd83c2f4ffdaeafb29 (Terry Howe)
  • fix: route registry client output to stdout instead of stderr (#32056) 2a9fcae29280472edec988c6bf0528e4ae79b33a (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 ffa5bd693eee68ba9c1ba42d160c69114eda962c (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 9f9dbaf94008044a516cda4837565237306578a7 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 64a2891699ae9c8f2d0e06d5db3dd117649886a2 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 e54a4a2b7d4ed9ca3bb4be7562f76dd5f2fd8f71 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 acb762b0ef8882b062ba8f6b87261411309875b8 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 768586df3f2a79fca5202b6713f8675bb097a904 (dependabot[bot])
  • fix(version): avoid false range detection on prerelease x/X eabfae560459d1ffe1f7a3268d5441238e9f84b2 (Benoit Tigeot)
  • fix(version): version range || can has no space e3fd51f331e14fb4056951540d2f2ffde81b405c (Benoit Tigeot)
  • feat: report in debug the version we select with version range arg 1e47395a9566bcaaaf7ed9e31a8367eb1f95e0a3 (Benoit Tigeot)
  • fix: prevent warning when using version range constraints a33e23939a85ac60eb9a6bee818f2c5459fda576 (Benoit Tigeot)
  • fix(kube): always propagate context.Canceled in WaitForDelete fa06d4455724afe22bbe00af7925549a82d95e6c (Terry Howe)
  • fix(kube): prevent spurious early exit in WaitForDelete during informer sync 360d4835df0fb8bd7cbde4cad0cbc79de01a6e93 (Terry Howe)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.11.0 to 1.12.0 7651edf21e31b5c33df82e67f23855d1358d021d (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 b132e7e43f3620eb60ef3524527c1b2fceed90e9 (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 eee491a7461a524b87e5bb73ea5a0c4f82c72469 (Terry Howe)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 3e3c5751b1723239cbce042533db0d84b65c6bc1 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 c4ce2bb364dbfb781059e628572d7177ba191cc4 (dependabot[bot])
  • chore(deps): bump actions/stale from 10.2.0 to 10.3.0 3892dc2a11b2e111acddcbc55d5a4733ba461f20 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 c4bbb6263f59fe541acd75ce0b508034c65899e1 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 a0d7f16b58aa4cb9dbaf8c37055faa28b1b350ae (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 8a3de054b5ab1b59f60c790fad39861e294671f1 (dependabot[bot])
  • fix(upstream): upgrade to cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 57a4803bd4953d8ef9d51d927f492ecaaf5df9db (Matheus Pimenta)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.0 to 1.2.1 b33ae02b9cd7fcba804391ab3d364739cb2a8780 (dependabot[bot])

Full Changelog: https://github.com/helm/helm/compare/v4.2.0...v4.2.1

View originalPermalink
How v4.2.1 went
v3.21.1

Helm v3.21.1

Changed 2
  • Bump golang.org/x/net to v0.55.0 to address GO-2026-5026
  • Bump Go from 1.25 to 1.26
Fixed 2
  • Avoid nil REST client getter panic when installing CRDs in ClientOnly flows
  • Keep credentials on plain-HTTP fallback with oras-go v2.6.1

From Helm

Helm v3.21.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Fixed nil pointer panic that could happen with helm template in ClientOnly flows. Now correctly returns a template error https://github.com/helm/helm/pull/31920
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #32152
  • Bumped Go from 1.25 to 1.26 #32168
  • Dependency version updates
Installation and Upgrading

Download Helm v3.21.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • fix(action): avoid nil REST client getter panic when installing CRDs c56dd0095fd76da5d7b30ecdf506103e7f26745e (sergiochan)
  • fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 702529f90a0021e4d9df4880d6589198ec0e05f7 (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 178e120e16f5d61f769ee2c56a0d2a45ab7303bd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dcf35f86551322d93c1cb695f08435b3287e5ad0 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 44aff8bf51809ec9f8a906d050818776cd47b264 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 ae2f31f5a7d0cd789ca9fd83a6a2fe5fc7c3a1a3 (dependabot[bot])
  • Update .github/env 402225fffdc82a28a213af94ea269c4300f12700 (Terry Howe)
  • ci: bump golangci-lint to v2.11.3 for go 1.26 00eac21a89cd977868c0304917acd90220e07895 (Terry Howe)
  • chore: bump go to 1.26 bec346ac983fd0b860a13ef7750616e088143f01 (Terry Howe)
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 58b6ccffd3e3ade58543c50e76e6fb6c39393be5 (dependabot[bot])
  • chore(deps): bump github.com/distribution/distribution/v3 30b9f51d80b5853ef4031af168dd02491bbef9ab (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 858aa47b455f08516a6d977f93d609c24f985853 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 1af25d46939584205f0e3810fc547fcda727b1ec (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 97e4bc30e57290d81b36972ce49f908d68fd9241 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 29bdd1bedd28bf816c7e26d356126489edf22945 (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 bad6cd478f5b3f3c96b795f4d6a010f04a89624f (Terry Howe)
  • chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 75c2e9bf370eabf35a00e60cfceaee2b969ebe00 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 cd4dac334caf38105aaae00ee8d4a9cb03de0b2c (dependabot[bot])

Full Changelog: https://github.com/helm/helm/compare/v3.21.0...v3.21.1

View originalPermalink
How v3.21.1 went
v3.21.0

Helm v3.21.0

Changed 1
  • Update Kubernetes client libraries to v1.36
Fixed 3
  • Fix chart dot-name path bug
  • Fix pulling charts from OCI indices
  • Preserve nil values when chart default is empty map
Security 1
  • Upgrade opentelemetry packages to patch CVEs

From Helm

Helm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.

[!WARNING] Helm v3 is approaching end-of-life. Please update to Helm v4.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Kubernetes client libraries to v1.36
  • notable changes here
Installation and Upgrading

Download Helm v3.21.0. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.21.1 will contain only bug fixes.
  • 3.22.0 is the next feature release for Kubernetes v1.37
Changelog
  • [v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)
  • fix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)
  • fix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)
  • add image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)
  • fix pulling charts from OCI indices e629995c5d65ec2d5095ecd6d094bf85d02b3266 (Pedro Tôrres)
  • chore(deps): bump the k8s-io group with 7 updates 9c854fbd937ae0efe0e0a5063e7449d8973a85fd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 a692247486fb6893f00af65fdfb05da538c7b1d5 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 9f2a7f696a3e0be43ff9f55ade1dc89c76c6e903 (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 79f039be716a0a48d354ffaaf97179bb4fae9d64 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 45210d597d7941ebe900bd8f317c0a62aa777395 (dependabot[bot])
  • Remove refactorring changes from coalesce_test.go e2df39fc0b3e713df923a7ae64412e327f6e1022 (Evans Mungai)
  • Fix import 97affe067aa1e39fe6552c0d46de749f02063183 (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go c264166ec6bbf61c400a3457fae87fa058487e76 (Evans Mungai)
  • Fix lint warning d409df87ff6c2cbe17cc465b93ce646003b71d28 (Evans Mungai)
  • Preserve nil values in chart already 6fdd1017cebc284f7d545c04dd2c8f2d350d69d2 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map b13743c8d4ef5488f40148af1d6ccd35ee9b97e3 (Evans Mungai)
  • chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 703999db8484985f4cafe000a610f10d688b2456 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 a04be9699efe5c26827397d7004b3490ad4ef029 (dependabot[bot])
New Contributors

Full Changelog: https://github.com/helm/helm/compare/v3.20.0...v3.21.0

View originalPermalink
How v3.21.0 went
v4.2.0

Helm v4.2.0

Added 1
  • Add mustToToml template function
Changed 2
  • Switch to goreleaser for release builds
  • Update Kubernetes client libraries to v1.36
Fixed 1
  • Make --dry-run=server respect generateName:
Deprecated 1
  • Deprecate unused --hide-notes and --render-subchart-notes flags

From Helm

Helm v4.2.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Switch to goreleaser for release builds
  • Kubernetes client libraries to v1.36
  • Add mustToToml template function
  • deprecate unused --hide-notes and --render-subchart-notes flags
  • --dry-run=server now respects generateName:
Installation and Upgrading

Download Helm v4.2.0. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.1 will contain only bug fixes
  • 4.3.0 is the next feature release
Changelog
  • Bump to version v4.2 06468084e85c244c712834933d25ea232a4c2093 (George Jenkins)
  • build: Clean up Goreleaser change (#32098) e23bf3af53c52185123278e83b7023c102707778 (Scott Rigby)
  • fix: add -extldflags -static to dist target to match build-cross f60ab7c31c81a73b8e0aade5aff41bfc01c08820 (Terry Howe)
  • build: use goreleaser build with manual archive creation 64aa46f2f1cf239cf6535c5e847e14dcb933a847 (Terry Howe)
  • chore: remove build-cross dependency from test-acceptance d199a1a42c04bccb287f2c7d9c3f73b669412e5a (Terry Howe)
  • ci: add fetch-depth 0 to canary checkout for goreleaser 82899404a68f3826389bb38cf67bf75085db6b2c (Terry Howe)
  • fix: address goreleaser build issues flagged in review c075022ce16489f5f7afd45a37b679cf58fa36ea (Terry Howe)
  • fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive names 04885dd905b6f8a823733dbc9b9f5cb2843a975f (Terry Howe)
  • fix: disable goreleaser checksums.txt and restrict zip to windows only 93103ce66cb6374d9d7b552802f53b21ea2c2dd1 (Terry Howe)
  • fix: use index for optional env var in version_template e49a1dc16eee526928d8928b8d96c01ee513ebd9 (Terry Howe)
  • fix: canary build file names eaa09100b9b18175d878b1e114cbe9df2a3f70c2 (Terry Howe)
  • Fix archive name 5a75279c1a017a60b97bd44986288af7399c6ff8 (Terry Howe)
  • fix goreleaser archive 37284a9211972f7f41a2acc3c3313517596dd4b0 (Terry Howe)
  • add support for loong64 45336ccd5b2621357e3f785c1fe93627c5990a6e (Terry Howe)
  • fix artifact directory a9659b07e3eec20ab5b964fddae05f51f478f704 (Terry Howe)
  • update configuration to v2 e368f170af8a200e672adac5f765b8101db0c8fa (Terry Howe)
  • remove GOTOOLCHAIN e7bea8513c30475664919f031774e18fecdf1f66 (Terry Howe)
  • chore: replace mitchellh/gox with goreleaser 075c096afec70155bc43ac3587a119df1ae5fcc6 (Terry Howe)
  • chore(deps): bump github.com/distribution/distribution/v3 12f2c41c0d7a74739c58a5995cbbb3125d9247e5 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 58e8ffdc3302260b1b55718c9b72c6f169a76ee0 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 e61bbfbfff41958b0ba1984e4d6799fe131f325e (dependabot[bot])
  • Upgrade kstatus to 1.2 and controller-runtime to 0.24 081c6dff537087f52ec6e470d8986439e24e8e33 (Matheus Pimenta)
  • fix: adds topLevel permissions to improve openSSF scores 277d9702555532d13426119d31c70fffb389d589 (Gagan H R)
  • Upgrade Go to 1.26, Kubernetes to 1.36, kstatus to 1.1 a4a9cc7a314d98456a2f23798a78e9ad05d96d0c (Matheus Pimenta)
  • fix(templating): hooks conflicting with templates in post-renderers (#32049) 8f56f24d638612a46f3e23265d06338c1f93bccb (Matheus Pimenta)
  • docs: fix grammar and spacing in CONTRIBUTING.md db40adb1d13573280b65bc2002df7d75c009235a (Mohit)
  • chore(deps): bump the k8s-io group with 7 updates 775e794319639f5c1e6b40448ce15ad3cc10d4e1 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 934ace35dfaef9eeb9997bf1ee385db0986daecc (dependabot[bot])
  • fix(templating): SplitManifests must preserve line endings for downstream YAML parsers (#31952) 265c5eb530a36ec651e79ecf4d37ba2f098b7e59 (Matheus Pimenta)
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 48e2b7ddd4e960b768fe5daee34a33cb89852a6e (dependabot[bot])
  • Update pkg/chart/common/util/coalesce.go a8e249714f5311b9aff44c4bd2bfc433ab1ab952 (Evans Mungai)
  • test(values): Add test for nil cleanup in partially overridden subchart maps 52fc971da37cf34aa26e7d7c460f2430dfb01b26 (Johannes Lohmer)
  • fix(values): do not copy chart-default nils into coalesced values 00638773d1366dc962c785de3d297cf0279b9a0d (Johannes Lohmer)
  • test(values): add test for subchart nil producing %!s() 6eb4ebf0e1afb0c63d748bf116145a5b9e0842b7 (Johannes Lohmer)
  • test(values): add tests for subchart nil value regressions 5cb4e7d992d85d372f5d86c238330102d936bfe5 (Johannes Lohmer)
  • chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 b5c7c80de317643e383ca2926ebc0ad884021bba (dependabot[bot])
  • fix(templating): fix wrong YAML separator parsing for post-renderers (#31941) a27f1add79c6c02459413dbb60f8438d8051cf06 (Matheus Pimenta)
  • fix: add debug logging to HTTP getter for helm pull c26be60d81e5cb6a147d6088477cf86fd5aaf1f0 (Cairon)
  • chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 953f5f031bb7fa8f3eccdea6520e09fd44fe3923 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 10fc5f335b5fbb09f5d04cb0450839790ae15634 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 d89e7c60762910204044c4215c7bb2f43ac3ef8f (dependabot[bot])
  • chore: Update release notes script for Helm v4 8a954619255a82890a08b7d1fa9e86a437c4cebb (George Jenkins)
  • refactor(cli): share RetryingRoundTripper via pkg/kubeenv 213c869a988f2c7390c65673e3d677970d6220fd (Sumit Solanki)
  • chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 bd5027a9cf07993d7bfe4b60702b1a489fe8783e (dependabot[bot])
  • fix: unnecessary-format lint issues from merge 087736b66e97393ccaa0bdf1e5df13dcc9d88340 (George Jenkins)
  • fix: Plugin missing provenance bypass 586eb57338d848e65686a3a9616e2776e87cfd1e (George Jenkins)
  • chore(deps): bump github.com/fluxcd/cli-utils c8c5dfad630cd7b238236c619c466488a547725c (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 998466cfcfee189ce7e3df5be8ffe79ed5f1f097 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp b0cec589f50a7e16d942ad3385598a6dda2b0a20 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp 6ebfb29dbf006ce78e9af8878008bda3578dcd3e (dependabot[bot])
  • test(kube): fix flaky WaitForDelete test by avoiding informer sync race a7f84439aacd3864b40055b60a3c3e54292d1646 (Terry Howe)
  • test(kube): fix flaky WaitForDelete timing in status wait tests 4c0d21f53f2ca78b525e31dbbf9cc9cfb818a2e3 (Terry Howe)
  • chore(deps): bump github.com/distribution/distribution/v3 08dea9c140084b5d9fecb59a45a05f417415b591 (dependabot[bot])
  • Minor nit: fix import instructions to comply with canonical import paths de58531ca7ff557342acaa2c906082e58521ef47 (Anmol Virdi)
  • chore(deps): bump github.com/distribution/distribution/v3 9b1ad4cf027452b828affb07318db2e931e734a5 (dependabot[bot])
  • fix(action): return correct error variable in prepareUpgrade 8ef2d45934ba1b9ca341818f1157112fcf7cdf1d (Rhys McNeill)
  • chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2 cd7cf76a174e856fd171b391995d9a65f97a79d3 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1 45ee55b83f8ad23798c84560ff65686e2ab298af (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 9a0674188412d1dcb2e7f018730aaa71781bd03b (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0 d1e31ca507412d770a602e722060e6d7379f4f1a (dependabot[bot])
  • fix(kube): clarify server-side apply patch errors f257c95c783f5595e36cb5a7dcc862cc1f6266b5 (abhay1999)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 7025480397d8b6b7fd8cdb5e083dc37b62dbd3d8 (Terry Howe)
  • refactor(cli): decouple EnvSettings from pkg/kube 64f1d0af5b53f0a9292af2ba1efc42a46a57ed00 (Sumit Solanki)
  • docs(registry): fix incorrect and improve clarity of comments in client.go 85bf56ea82fd21452e53cae91b380b0afb3e8b83 (Debasish Mohanty)
  • refactor(cli): decouple EnvSettings from pkg/kube to avoid import cycles 154993723aadf45601d124c6750e8f4ae3b9f2fd (Sumit Solanki)
  • chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 c7a75b16cb8b0859bf32bf74ae98300e5b55361b (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 3a7573a81ed5be2e00dfb74fa8d95c0cbe1c4f0d (dependabot[bot])
  • chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0 0229da1803a29671b1becc4561c77f85db609aac (dependabot[bot])
  • docs(engine): fix misleading toTOML doc comment c1a5a6e260bd070bce9a8299795400340e10c468 (Ilya Kiselev)
  • feat(engine): add mustToToml template function b075f7a35d25ec0a4414b011142744f8f1821b47 (Ilya Kiselev)
  • chore: fix unnecessary-format issues from revive 7edfff33ebcb0f5d961afec34393c222de92de12 (Matthieu MOREL)
  • chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 37185d2ea6a091b93d2e71cc55ab16b2c0f3f9e9 (dependabot[bot])
  • chore: fix bool-compare issues from testifylint 071558d69ffbb408dcb56403d387a1aa90a7d3a8 (Matthieu MOREL)
  • chore: enable perfsprint linter 62494896e9a105b63df2c76c638c53304a37121e (Matthieu MOREL)
  • ignore error plugin loads (cli, getter) 47a084091eeb1c5de221e061866b319f5b5f99f5 (George Jenkins)
  • chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 3d06fd1feb37f11d050e78f7c17df3c713fcd344 (dependabot[bot])
  • fix(kube): remove legacy import comments from test files e64d628a139fab8c876a1d2f4c2928096b286bed (Terry Howe)
  • pkg/kube: remove legacy import comments d7cdc9e8fb20c42d19a2371f37ee719be6be6b94 (abhay1999)
  • fix: Plugin version path traversal 36dcc27ca3c0cd6d0d08713b03dca82f43d7c5f9 (George Jenkins)
  • chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0 c4be7af2a14c1a01f21231ebb5dd41806fcb0797 (dependabot[bot])
  • chore: fix some minor issues in the comments 259f181808f267493d56eccd7f6191f78225a6fa (tsinglua)
  • fix: Chart dot-name path bug 60184996e5332d26e0b6390cefbf86776829dc46 (George Jenkins)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 74e7cf877a4a674b65f7b7894d2dfde2832e39b1 (dependabot[bot])
  • fix: insert newline after doc separators glued to content by template trimming af94abf976ce69dd635aaf086a0bb4b17bd95bc1 (Matheus Pimenta)
  • chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 16073b1e3c7b90cda41ed70c8192eb6d16816723 (dependabot[bot])
  • chore: enable modernize linter (#31860) e31a078e6e0667dde72ff3bf4b5dfb625127076f (Matthieu MOREL)
  • Restored --atomic flag on install command 16573f87f5aebf8c2f9c40e67cc3cbe5eb93e733 (Travis Leeden)
  • fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 b550ce90946b3b47cecd290fc5d0eee637ddb531 (Terry Howe)
  • fix: bump fluxcd/cli-utils to v0.37.2-flux.1 1dfa77ed8ba6f9e26542064248bc9eab40c1a662 (Terry Howe)
  • Update pkg/cmd/status.go 5d40f17011a477620841edb740d381a012716ae8 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter (#31871) d4f6193a7ec7ae9ea479da3372eeaf22b445ebcc (Matthieu MOREL)
  • chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 82d9bedea7d3e342011d82e2e11ff83b396dffbe (dependabot[bot])
  • chore(pkg): fix perfsprint linter issues part 6 dc0e3f10c3ba8f25aa71c523d2e273690d338a17 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter e3c74fd9fae52c85899ee0ca9a0c1422d59e2bc2 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 1d2d63cc4330fcac786e70926f805b69c0b49ca2 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 63f03c0f5c41b53de3d432b446da9430da99f5bd (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter c25c988cfb7bbe3b139dec39cad1db4be33b13c6 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 0fecfd04c2f9a748046a8421595f3b9da6c895c7 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter 6524162a0e39bed187a16b692243703d78735471 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 6c2cb2f54784b5ef6158dca0660f428a3baf75f5 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter 9409226e15b26d05621f0b263f4ad6f597dfb7aa (Matthieu MOREL)
  • Replace unneeded use of t.Fatalf with t.Fatal 36cb3a2fe92a4564d2d7d79141f209af19b45d40 (Mads Jensen)
  • fix: enable nolinlint linter 5b6c6bbfc7ca9850c69d3823ca1e21b445e75c0d (Matthieu MOREL)
  • fixup strings.Cut variables b6673174220a2633fe97b5cd70a8386b79103464 (George Jenkins)
  • chore: Improve AGENTS.md 956c7245c346fc304c24ace930dada5f2c99f2b1 (George Jenkins)
  • chore: fixes 92b64e87ad6245d64d5b49bbbbf8dead83faac22 (George Jenkins)
  • fix: correct import comment in statuswait.go from v3 to v4 c59c140ce07ce973f16fe50c0c5e991e1d6308a6 (rohansood10)
  • fix: handle OCI digest algorithm prefix in chart downloader (#31601) ee018608f6fbf381fac1bae9759164a65c6a0b1f (Evans Mungai)
  • chore(deps): bump actions/stale from 10.1.1 to 10.2.0 304d25ffd34fafccbcb81713cb3cfff1be595ae5 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 0b134362f442fec44ace35e9cfae6760a6b4e005 (dependabot[bot])
  • feat(release): add internal/release/v2 package for chart v3 support (#31709) 4a91f3ad5cc0c1521f6d4dcb5681e2da4baaa157 (Evans Mungai)
  • chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 782385397ce1871f4c8a4d2e3c857937bd8988c9 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 aec7aced38d053a2df5d0973abdf21848778a722 (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 a23b6388ac74984460fd4055de5120d2fc03d841 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 5cddc95bed0572b8d63a910843f0a70477a4ce33 (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 2e266c3ec9d70a6e656f8041bb31475e25e9eb22 (dependabot[bot])
  • fix(pkg): errorlint linter 259f76a849391e6ff60a9a2e95ce7310d958c602 (Matthieu MOREL)
  • fix(internal): errorlint linter 025418291a7911441e7962895ba4bc24b72b55b3 (Matthieu MOREL)
  • fix(pkg): errorlint linter 6d1490ed1ea5968235087658d03bb440e4014a36 (Matthieu MOREL)
  • fix(pkg): errorlint linter 4d0ae7f33a09093f8f52d02b952e3822c87b8c5f (Matthieu MOREL)
  • fix(internal): errorlint linter abecafa0f507a69888877b9ddb714095714b64c8 (Matthieu MOREL)
  • fix(pkg): errorlint linter 4330bdea0409f428e75145f15532bfa0e2bc945c (Matthieu MOREL)
  • fix(pkg): errorlint linter c8989d984ff69e8ad21b27d6ac6193dd3150b1a7 (Matthieu MOREL)
  • fix(cmd): errorlint linter edbd705bd034246700cc0998016caa303cff42dc (Matthieu MOREL)
  • chore: new KEYS entry for George Jenkins 5638c35399464b6432ba81b92a341218991efa5c (George Jenkins)
  • fix(downloader): safely handle concurrent file writes on Windows 76eb37c01aaece271343039f44d7803017dd5c81 (Orgad Shaneh)
  • fix(install): check nil for restClientGetter and fix tests 9817a68618245370e98e09d7f06c7cc1cefe8a62 (Manuel Alonso)
  • feat(create): add --chart-api-version flag (when HELM_EXPERIMENTAL_CHART_V3 env var is set) (#31592) 5aac32077f87ed8cd80da1648abbd323320d4a0b (Evans Mungai)
  • chore(pkg): fix modernize linter 0d75d8611d3daa6b820d94fc95347a069b062f72 (Matthieu MOREL)
  • chore(internal): fix modernize linter 859292e31bd4ceb170050eaa49e727bcd69572e2 (Matthieu MOREL)
  • chore(pkg): fix modernize linter 5cc2e55714d20e6d1bd2663878a00571c084d6c2 (Matthieu MOREL)
  • chore(pkg): fix modernize linter ba38159313d4f09280591ba7f860ef0523716220 (Matthieu MOREL)
  • chore(internal): fix modernize linter e2d184c79e9049c19bcc466bfe1289ccc6b73717 (Matthieu MOREL)
  • chore(pkg): fix modernize linter 111d4e6e0e86af6ba25a355be1a7599f5258ee58 (Matthieu MOREL)
  • add image index test e8f386b5aac232c114a036598c2e3015fe296edc (Pedro Tôrres)
  • fix pulling charts from OCI indices d983696e354a9e0605cbb3034937dc84af42995c (Pedro Tôrres)
  • chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 9c9c3a6b5c0f1cd1e4c4e9f002aa411c58dd656a (dependabot[bot])
  • Revert "Consider GroupVersionKind when matching resources" 787b61cedb933d22011e1da1368d0e615ea60ffe (Matheus Pimenta)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 becf9bf7e33867a3f26affac34e9d51e277767bf (dependabot[bot])
  • fix(template): deprecate unused --hide-notes and --render-subchart-notes flags 6d5f56fa6e7c8e4462d80895fcce87b926e4b8ce (Scott Rigby)
  • chore(deps): bump github.com/fluxcd/cli-utils b53198e7eee04dab651c15cb7b3b6b77dd92553c (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 b59e533b7675122631e0733adbfd6b35dd3515a6 (dependabot[bot])
  • whitespace ec0726523e52448eb05c8b5b3faae969e3a79266 (Austin Abro)
  • fix(copystructure): handle nil elements in slice copying e3829ebbbb833e159926c6193e474eb9d067ef75 (Philipp Born)
  • use logger with waiter 63b40a7a5e0d3f00ef2b4c1de9f50fb7d6df4ead (Austin Abro)
  • feat(kstatus): fine-grained context options for waiting b0b35f1231b0b885b1624c5586938cfa69d30995 (Matheus Pimenta)
  • Apply suggestions from code review 26e28e846af1ceaf63e16c4f2e52bbfbab411ba1 (George Jenkins)
  • Remove legacy sync-repo.sh script 97fd00786f16ebc3b68164bff7133592f19f70b6 (Jeevan Yewale)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 52620076e21ad6afd0f48df6772001b1466c966b (dependabot[bot])
  • docs: document uninstall using cascade foreground flag e70d59de7cd7ea2a501d809b3245ebfa0412e0ec (Evans Mungai)
  • bugfix(kstatus): do not wait forever on failed resources bbec77c1f762c4d92678e7f455951757a2e036a3 (Matheus Pimenta)
  • Modernize Helm v3 CONTRIBUTING.md 443a2a6924fc384e87ff4251e5ac9c077d607f0f (George Jenkins)
  • chore(defaults): server-side apply SDK defaults should always match the CLI defaults c1cc6253232d697ad2ae29957cc49de223306b62 (Matheus Pimenta)
  • chore: clarify --wait flag help text 828038a8fe2142599ec557da2d12bb88b76fa0dd (Evans Mungai)
  • chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 e22377124dbca4b032c55f522358def0415a0e8a (dependabot[bot])
  • chore(refactor): better testing and functionality for installing crd 6501ef490a45e9b7edfed1432702532c5b11c6d2 (Manuel Alonso)
  • bugfix(storage): fix storage not getting logger from driver a8eb5278478c940c615741312ca9f4fec0d84c1a (Matheus Pimenta)
  • chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 da1d68adea91ab13b308c059c39381d48045a73a (dependabot[bot])
  • fix(test): fix tests and check nil for restclient 0f949a92c149cf11e5bb19caf4d19d05567be6eb (Manuel Alonso)
  • fix(test): merge fix correctly 561410ae1d09c2aa289ff8d8cad5b7fa979cd135 (Manuel Alonso Gonzalez)
  • Remove refactorring changes from coalesce_test.go 0298b2ffd0823eead74c75e1b890b0bf47d0db62 (Evans Mungai)
  • Fix import b8937ad1922bca47be8bbf8e6274608ebc34a778 (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go a333bbaf273645bf53fb873228040ca8edde849a (Evans Mungai)
  • Fix rollback for missing resources 374aeb4b4e0463f72e3a0175138ed4bf7e87a156 (Feruzjon Muyassarov)
  • fix(install): add more tests and check nil file data 00f0a48a7dae379c2b6bd0dea43984d42b27a494 (Manuel Alonso)
  • fix(test): no check empty resources 0357e8d0f7eab074252ca49e1ca3aded834a001d (Manuel Alonso)
  • fix(install): check lenght and file nil, add tests 52235cc0bf7d0c8faf17c7dc8cddd77f93434aea (Manuel Alonso)
  • fix(action): crd resources can be empty 268593bf2e9769ef4b75328b33dfb4195e6e9e5a (Manuel Alonso)
  • fix: casing issue fixed 170911459bc4f2b5efea7e549e09bd45c7578cc4 (Mujib Ahasan)
  • fix: error handled correctly 94860626ce9c83a9227b5bce02a5c03a050816ac (Mujib Ahasan)
  • fix: doc string added 12e8b715aa0732b613c3a9896fa6af29b3201536 (Mujib Ahasan)
  • Fix lint warning 3416dd5f215a6421a70c6ab22340a96312ce8c0b (Evans Mungai)
  • Preserve nil values in chart already 679f0519804afeaa5ce8b930a30976ade2860fe0 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map 292fe702193e8ba9ce4c8ffffdd90cdfa761501c (Evans Mungai)
  • update: test coverage added for helper function validateNameAndGenerateName 115409976b5c3fd94c893eabde114e655c01c573 (Mujib Ahasan)
  • update: helper function added for the business logic 522d2fe61508639cfe8f06a43235e7c3eaea3b9a (Mujib Ahasan)
  • generateName is also considered in logic 6769fb6fb6704e29fe1215c802ecf0ea62b39715 (Mujib Ahasan)
  • fxi: test concurrency download index 64bae717c58e80f05a60b84ddcd1f78387b4caee (Terry Howe)
  • update: business logic respected for skipping object missing name b357bcae8640508f110b7e63a8dfacd865c27b6e (Mujib Ahasan)
  • fixed: --dry-run=server now respect generateName 2820ebe8c97b7d7b8a447375b74c9cb3741a4ffa (Mujib Ahasan)
  • Make error message instructional for the case of lock file being out of date 1836c598f06377fd1571702fb2e0642f004cedef (Andreas Sommer)
New Contributors

Full Changelog: https://github.com/helm/helm/compare/v4.1.0...v4.2.0

View originalPermalink
How v4.2.0 went
v3.20.2

Helm v3.20.2

Security 1
  • Fix Helm Chart extraction output directory collapse via Chart.yaml name dot-segment

From Helm

v3.20.2

Helm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Security fixes
  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
Installation and Upgrading

Download Helm v3.20.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026
Changelog
  • fix: Chart dot-name path bug 8fb76d6ab555577e98e23b7500009537a471feee (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e275c50cecde273872dad2a5576bd46375 (Terry Howe)
View originalPermalink
How v3.20.2 went
v4.1.4

Helm v4.1.4

Security 3
  • Fix Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
  • Fix plugin verification fails open when .prov is missing, allowing unsigned plugin install
  • Fix path traversal in plugin metadata version that enables arbitrary file write outside Helm plugin directory

From Helm

Helm v4.1.4 is a security fix patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Security fixes
  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
  • GHSA-q5jf-9vfq-h4h7 Plugin verification fails open when .prov is missing, allowing unsigned plugin install
  • GHSA-vmx8-mqv2-9gmg Path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

A big thank you to the reporters of these issues (@maru1009, @1seal).

Installation and Upgrading

Download Helm v4.1.4. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026
Changelog
  • fix: Plugin missing provenance bypass 05fa37973dc9e42b76e1d2883494c87174b6074f (George Jenkins)
  • fix: Chart dot-name path bug 4e7994d4467182f535b6797c94b5b0e994a91436 (George Jenkins)
  • ignore error plugin loads (cli, getter) 25819432bf87ac0b54f0d3fa54982add2cac609e (George Jenkins)
  • fix: Plugin version path traversal 36c8539e99bc42d7aef9b87d136254662d04f027 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow c61e0860ec797330a4c26a78dde7020cdc6743b1 (Terry Howe)
View originalPermalink
How v4.1.4 went

More in Infrastructure & DevOps

View all
n8n

Fair-code workflow automation, self-hosted or cloud.

n8n-io
Kubernetes

Production-grade container orchestration for automated deployment and scaling.

CNCF
frp

A fast reverse proxy that exposes a local server behind NAT or a firewall to the internet.

fatedier
Docker Engine

The container runtime that packages software into portable images.

Docker
Home Assistant

Open-source home automation that puts local control first.

Open Home Foundation
AWS CLI

One tool to manage every AWS service from the command line, and script them.

Amazon Web Services

Discussion

If you publish Helm, you can claim this product by proving you administer its repository.