This is a preview — how helm's changelog would look hosted on Wakelog (68 entries found, first 15 shown). Nothing was saved. To make it real: sign up (30 seconds, no email), create a project, and paste the same URL in the Import box — you'll also get RSS, an embeddable widget, a README badge, and an API. Try another.

helm

changelog preview · powered by Wakelog

Helm v4.3.0

Sep 9, 2026

Helm v4.3.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
Installation and Upgrading

Download Helm v4.3.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 bec5b06ed841fe5269972d864d5177944fd5970f (dependabot[bot])
  • chore(deps): bump the k8s-io group across 1 directory with 6 updates d0d42e7dd2b3948281300e5ac2d8d3a74c2a7c8f (dependabot[bot])
  • bump version to 4.3 (#32605) 7328f42a01d7fb96bd41b8fc70abc1fd7258cdb5 (Scott Rigby)
  • chore: Fix independent-merge lint issues ca6681ca55d39913b880871b6aa259efdf15e0b9 (George Jenkins)
  • refactor(repo): Use byte buffer to build index file (#32579) 37752b70b2f9c49dc6ac2f01e2a0aca1f32f0529 (Tom Wieczorek)
  • chore: fix gofumpt extra-rules (#32486) 28e64bd2ddb5412bff6d94d62b0114bb53f40931 (Matthieu MOREL)
  • Remove deprecated internal/chart/v3/ code (#32365) 4dfbaa40c6cd67e1df345889113a7879ec66136c (George Jenkins)
  • fix(template): regression - route registry messages to stderr in template and show (#32217) 9a3c040369361678aef1ab251e83a38b455f5159 (Aaron Mark)
  • refactor: remove per-file decompression size limit (#31748) 11e2010aebedf9f495a5c295635df096de7252f7 (Benoit Tigeot)
  • Updating the Go version b5b498b77403f93de037cba383f424953e87eaaa (Matt Farina)
  • Updating the Go version 6d1f67cf6a9918ebe6c41f05096b6fa3fdde1b5b (Matt Farina)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32574) 0f4decb96b1c4ac45981f495d45eef6cc82e3192 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#32572) fb1930096eacec13ac911b8499905fc94eb09a8f (dependabot[bot])
  • fix: correct 'doest not match' in readiness debug logs 6888b0a280bb6fbb847c85d2a473c425b6a0862d (MsfPablo)
  • fix(provenance): support GnuPG keybox (pubring.kbx) keyrings (#32281) 67d54fd8808ab47e93dad40f4238d5fe28d1efd0 (Ruslan Shaydullin)
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32562) e9b85e4de16ad45805843fb121748018cf89094b (dependabot[bot])
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32556) c000a408b81266d328db64aea2ff9e2e70844790 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32555) bafdcde8ecd83119afd7f98363b364138d3b35dc (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32545) 2a29f1770b62844b27197d2507377361d45ad7c0 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.40.0 to 0.41.0 (#32543) edb94f897d1e0ec3335fb7268f07e0fd2666fbb8 (dependabot[bot])
  • test(loader): cover 8192-byte EOF boundary for LoadValues fd4ed4952b5f9f54344a0c014f7acd7885bd60c6 (Dean Chen)
  • fix(loader): do not drop values files ending at a 4096-byte boundary 601445e88cf1fe66b2885c793d564030aad1d707 (Dean Chen)
  • chore(deps): bump the github-actions group with 4 updates (#32523) f3d68cdbea3076a0283cbd1e3ec44a409ad48a43 (dependabot[bot])
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#32521) a0c2f6dade5180fdb08bcc5debef56357cd586ab (Terry Howe)
  • chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 (#32514) f8a308cd470bc1f087b3f4915ba775af18c5ffab (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 47eb219a71bac4638a9b9db916a5d8c415c553bc (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates (#32508) ae877c8bfb943d2cc1aa10b34f0c4fada55e6f56 (dependabot[bot])
  • test(action): poll for the interrupted install goroutine instead of a zero-margin sleep (#32328) a8ab76e86f11e2ece5a3d0262313140e21db249b (Nikolaus Schuetz)
  • chore(deps): bump actions/stale in the github-actions group (#32487) ac1c68746f72e5bbbe5b7e5a052629aab7e5ab61 (dependabot[bot])
  • test(package): fix errorlint + exact path match in lock test e92316751375bafd4621232bb39a1238a22e91c4 (Ilya Kiselev)
  • fix(chart): normalize StampModTimes timestamp + Chart.lock test 3c3be926aaea573cf94931877e8072aefb231b60 (Ilya Kiselev)
  • chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 ce27485634fcbd54be8fc8d99a5e4799456420c9 (dependabot[bot])
  • fix(scripts): clarify cache-busting behavior bc0114c70841e2a05c95e53e20358fb761dbfb2e (Solomon Wakhungu)
  • chore: fix gofumpt issues 24bbb46c62a54000394ce77c4e3fda17d5566ffc (Matthieu MOREL)
  • fix(scripts): address cache-busting review feedback bbaf420a101379dad4f8452129cf26f2fff7e536 (Solomon Wakhungu)
  • Make golangci-lint happy f3edb83df48c505878ffd3ebb89ef6a809e14008 (MrJack)
  • Added missing import 94a3315f4d699c6bb4140550d4c98b46bb4382d2 (MrJack)
  • Readded "unicode/utf8" 500f02d597628d8ca7be8b530edcbedbf397b676 (MrJack)
  • Potential fix for pull request finding f1ede7c9c114c745da2f5c6cef8d27e1eb342498 (MrJack)
  • Apply suggestions from code review 4fcc4e4b3db363654f3dd5240211b195e309970e (MrJack)
  • refactor(rollback): validate description length before cluster reachability check 91520a78063582ab8265d9364815665f688deebc (MrJack)
  • refactor(test): reuse existing rollback.txt golden file e73dfab5fb47c9f3a0f24cb3f3a7a4aa8b65143e (MrJack)
  • Removed extra space in rollback-with-description.txt b177a8e9060720e91c402cdba2224c6d58789fa3 (MrJack)
  • Enhance rune count in pkg/cmd/rollback.go and pkg/action/rollback.go a92611c20241be8e7dc32f9b229afd2a722a06f8 (MrJack)
  • Use rune count to count properly multi-byte UTF-8 characters 8a34f3b7b4d9ffa4e82c7893eb3d8572fd464198 (MrJack)
  • Enhanced rollback description length cb91040c447723a7338a513a6d1604e5daaa1e0b (MrJack)
  • Changed if construction e69e424ab1917f0d53eafe63c408b5280b39624a (MrJack)
  • Set 256 as limit for maxDescriptionLength. 256 comes from MAX value for key and value b606955f095408270914c47eac8414b9061bfb49 (MrJack)
  • feat(rollback): add --description flag to provide rollback reason f8180e6de473bb4b1008b76aa2ac63b8bcd104c0 (MrJack)
  • Update resource_test.go 622f16b37fdb1f1915aece9436165dc53c26b3c5 (Matthieu MOREL)
  • Update labels_test.go 61d99a8bdbc90219c474c96e11790ab6a90cde61 (Matthieu MOREL)
  • Update chartrepo_test.go 532eabf88afa2b119f90ef82d1bf309923cbbb78 (Matthieu MOREL)
  • Update show_test.go bfca0688b1a44b1cf7ae37ac5f64792a8dffe7f1 (Matthieu MOREL)
  • Update rollback_test.go b59dfd39015311d94c04541ec5b91959c6b4b6d3 (Matthieu MOREL)
  • Potential fix for pull request finding a27f3a062027d8b459eed2186076fb9384b82f38 (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 1 828d01a8786162987482408b7803ceb3f3c176ac (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 3 9a2be11e6f1af0c89dc0988b88fd339751baa44c (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 2 4d9c03f51c30f851a03676a1315f492de10210e6 (Matthieu MOREL)
  • chore(internal): refactor: finer tests conversions to testify part 1 5142ca8ddca79a19c8529508c77ab4b27cb23a8f (Matthieu MOREL)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates (#32459) 8f74dce6ba8d7264ce75f52507616720865e712d (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action in the github-actions group (#32458) 050d3e99b9dc8796ced4b99cb272cba91c43055f (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates ea7c838e0875449a4b2fe141a961aa29f1435a5d (dependabot[bot])
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 fe3f98b5641fe3a0a9fa2575df8698136c2a0029 (dependabot[bot])
  • chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#32441) ed246e29f7940fffa4631aa67cfef66c5722d4a7 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32440) 5223ceacda672bdd72efe8995d4abd9327c6539c (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 a0f954e277702f87883d18760207b34ba3efbf80 (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 cdccef4818c06e4d1ee9521cfb9bcadc30c282e9 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 065d3a6a3dcda016a9de88a9b32f0e9eedcf0876 (dependabot[bot])
  • chore: group github-actions dependabot updates cd4c5d3bfd7d19be9a3a01ba63a650cf044e1409 (Terry Howe)
  • chore(pkg): refactor: convert tests to testify assert/require part 19 33c28395695c53b579c1f94d3dfcadbe2ff2b862 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 22 0b1aa55cbb14ce3b7c805a6262e2159c4a70bf73 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 21 a934b827fa9569c8769c981b1d4847f72a4c1f94 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 20 1d4665e54c28a41a5631c19f3bff14ef3d4e058f (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 18 fb8a62bf13cbc0ad78d0856678365b246b224997 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 16 0fa9f7d427b99437e51dbb8ada21d19f93898652 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 17 4073566e285d5bfaafaf0cec2b927fa037bfcb2a (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 15 71733656a5c64307f85290bc9fe6480ad637a117 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 14 dc66ee7be786b1ac146a21fb2114b9678aaf25a4 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 13 aae82bf97a4c02c70982c14118912c459db43ec9 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 12 a3fa28ae22934450389ab31343c0ca20321d302c (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 11 dc3e3a5e7efadff49fd26eac511cf18801af0ebc (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 10 2f5a33fb77daca9ade910ed7fe557e3e85fd77f6 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 9 13d1edc5f346e136b249d4c8232e83689f07c3b4 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 8 e5f0e07b96580305c3902eceb738cef230b44bec (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 7 ca1767b81397e5ee3b3a5f7926590ddf1134c9c5 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 2 0daa77fa9bffe2c8359bb079d3e978fe74a0b5a4 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 1 d4ec8e9b87a002d48c2d7a8f3c145c9a324bfaef (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 6 0844b3b8b513e1ae6787c44fc5cfd224bf86c573 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 5 3ff05c835ecb1bbf794089d309556dbc75778ef7 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 4 658a8fac156a92a7462cc9aab98da796da6dc116 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 3 df2d013517b0a237ea8858677558db3129a92911 (Matthieu MOREL)
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#32411) 8c7f3a14d2cbde663847641b1f4274d266e6f0f3 (dependabot[bot])
  • chore(internal): refactor: convert tests to testify assert/require part 4 (#32408) 6c45810119937e8fcbbc4f0b7f56c32a40c52d87 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 3 668e7e580a01dbf66da0f620da6b980ee0cb4d80 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 5 f1d5979e7d8b9d1e36b3cf703d150e8078c2e16e (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 6 f3402c1cd69b84d278af5a30551e376d727d27c1 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 ba31ca0c0b455541f05986e8dcb8a0554fa70dd2 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 615a29987660b11909f984887b47f7f608757d87 (Matthieu MOREL)
  • fix: pass registry client to downloader.Manager in upgrade 0604d8fb1ee8ea172604cb739c93ea8d5ad068c6 (Gates Wang)
  • perf: enable concurrent status computation to prevent multi-minute delays (#32043) 3bcf965f997499c477436515e6ccf5d51ab82e5e (Zhaofeng Miao)
  • remove legacy import comments from remaining packages (#31933) 82be04d7f2881f59b3a85483eb248417e1d18fc3 (Abhay Chaurasiya)
  • Potential fix for pull request finding c2fda5ac5835cd1eca44a29047c18edcde66e00f (Terry Howe)
  • fix: enhance error handling and improve test assertions (#32352) a2b1a60d51223254bd9c2f08cf3f411eb9d9fc58 (Matthieu MOREL)
  • fix(scripts): add cache-busting to get-helm-3 version check 5a30c7ae8504218fd68d87c5a7d929d0a3bb3891 (Solomon Wakhungu)
  • chore(deps): bump github/codeql-action init and analyze to 4.37.1 0563162dd95dcff0f7b1ac09e0c784ae21b72245 (Terry Howe)
  • chore(deps): bump github/codeql-action/upload-sarif (#32378) 06b95860dc2419062834a5e59921569676b45031 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#32376) a494169853d1e6f752eb838fedbb00d1a8593b66 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 eeb37edfeafffdb562b97774f85a394332cf58dd (dependabot[bot])
  • chore: Add AI Vendor specific paths to .gitignore 8cd3a48c34136f14fa6ba60554ef5ab0e12625be (George Jenkins)
  • ci: auto-label PRs targeting main with v4.x 9f3c89a4b50e99a46c23b6942b87b205bdd8c33f (Benoit Tigeot)
  • fix: 'gocritic: filepathJoin path seperator' lint error 96a25ab4f86c2c78de2acfe45a69c0a40055aa3c (George Jenkins)
  • chore(internal): refactor: convert tests to testify assert/require part 3 caac755f199adf5ac4fbbc8c46a741d004ed7276 (Matthieu MOREL)
  • feat: honor SOURCE_DATE_EPOCH for chart archives (#32162) ad93b7df635d032a71201206cc3490e76b83bef4 (Lohit Kolluri)
  • Fix missing conflict retry with server-side apply (#32088) aa1ae3a36017156817e89e59eee0e88af9fc6365 (Jakub Jaruszewski)
  • chore: fix elseif and ifElseChain issues from gocritic (#32289) a02a5713deef0c0c1bf4359dcb0218a9c640224d (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 f280d9c1b5da4e2f25cac76b2fcce58bad35aae9 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 d72b28ebcbecf1c582e57f17c1272536b90513d1 (Matthieu MOREL)
  • fix(ci): pin govulncheck-action to the v1.1.0 release (#32304) 68977ec0b5a446286668170dd72bdf59695f8cd5 (秀吉)
  • ci: track GitHub Actions updates o

Helm v3.22.0

Sep 10, 2026

Helm v3.22.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • primarily dependency updates and k8s-io group to 0.37.0
Installation and Upgrading

Download Helm v3.22.0. The common platform binaries are here:

  • MacOS amd64 (checksum / bd1d09f316558dda23698527859600936fed1371021ce0f2272d66b2fdcfa69c)
  • MacOS arm64 (checksum / 4c9982a6cdeb458b60258df66b55398ca5b19293f6877faffe2909ad6f23dfe0)
  • Linux amd64 (checksum / 1e4ab49e429626cf6c6958d914248b78c9730803c2751b87627e171dc800e7bb)
  • Linux arm (checksum / 695793765e2246824a7c859562886f79b1cc89d99420c89f940590440f7129ee)
  • Linux arm64 (checksum / f14e804dfee240f55525b667488fe9adca349e63e00c9af634c0beb1421ac310)
  • Linux i386 (checksum / b96b7a125cc7d38aa952a78b16e96d05426cd9791dd013be51ebab1c203d6729)
  • Linux loong64 (checksum / <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist. RequestId:8c31497a-101e-0042-27b6-404cb4000000 Time:2026-09-09T23:55:30.1192401Z</Message></Error>)
  • Linux ppc64le (checksum / fa304f47163a19f4e275fe4e890465a8a80a6f26ce4772c6b1649355c995def1)
  • Linux s390x (checksum / 3f2cfd73018dcb9c25814e89c5946a362a8b951d8cce03152138d8cb28abcbff)
  • Linux riscv64 (checksum / 50f84d698daac65bded677c61db7138e082b23e667a3cabeff4fd2521614e498)
  • Windows amd64 (checksum / 899615865726d39f9b245e71e848c5bf4adc7ed33a8c43ede660facb48151b43)
  • Windows arm64 (checksum / 75a331a3b03d11aed6369bdf6a1f8f9d33635bc820de5cd6025a581292046805)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump the k8s-io group across 1 directory with 6 updates 144ca65f8501953fa8b41cd1d37c7223051c85b7 (dependabot[bot])
  • bump version to 3.22 (#32606) b5de8bbe62975c8f9d4801fd7dfafacff462209f (Scott Rigby)
  • fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362) 9dbcb9f1edb4cdf2b055870dc9a07e0c0f4b05d1 (kimsungmin1)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32575) 665ab55b05ce3d8c5a9d40e22b14f920d84fa68a (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#32573) 0841093658d96f4787cc9599cd2a891a3c590971 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563) d0569c7d625151ee8c7b858d87218dd06087d613 (dependabot[bot])
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#32557) bcbdb1e8ae5f1b1dd26a41652bc2f3e1e8f0f920 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554) 6cdcc8f91de2dbe181b19be8f5de0701b9c30acd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542) 158719fb4346eb65ee789abc09a922a84bf6ec3b (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 (#32536) a442b8cf64f5942ca9e920b46fceb15e0878ca80 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 (#32535) adab0ef15d40085b4ddad4334418dc1bf41c85c7 (Scott Rigby)
  • chore(deps): bump the github-actions group with 4 updates (#32524) c068b543256b64515c019644381cf57276a6fec6 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 74271c4258a35186cb621330f5026461d01e9032 (dependabot[bot])
  • chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 1c50d2f8bde0738c7f6df584d77fb469ec52848d (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates (#32509) 88215407a8901557b2318842d56e8e25aba9d84b (dependabot[bot])
  • chore(deps): bump actions/stale in the github-actions group (#32488) 05a27980df8f4b22454334dbb124494510de4af6 (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action in the github-actions group (#32461) c27e7577e3e2793b80550315dace983ec22a0664 (dependabot[bot])
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 bd392c6a60d09a6c9f467dc52dbfd249a641f80d (Karan V)
  • chore(deps): bump the k8s-io group with 7 updates 66a6f5601d26bb640e0de5f877268a48de2148dd (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 7cd01254d33ba41ec5020fd1af780cd26a6ca02a (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32449) 79330fceb94f73508d136f389802b41face2dc41 (dependabot[bot])
  • chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#32446) b29c7309f12ff72d631425b9398aceba979a81f0 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 973bb346b83480f4daff9eb5e8f9e0180fc48b5d (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 e25efcf2837674c3b6ab1449c8b69f3fb6ee4bc4 (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 98e547f8ed82720aca8b6287e1e76aad1ba55f9b (dependabot[bot])
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#32412) 7f4b72a711e1d6d3c40f904affd99991e84456c3 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#32381) 2cf1437c200dcd8586788d637340e7af3ffcc9d0 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#32383) 270f73b2df1887425cbe5eccceb7cafcfda81a89 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32382) 9e3a0100a994e4cf08372398f31cecab92ec3b2e (dependabot[bot])
  • ci: auto-label PRs targeting dev-v3 (#32340) c9ed0caebae6b24b8aa64c5f587d6c11297c7dd9 (Benoit Tigeot)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32331) b842ddfccba6a388df1dd2f959d16db3ce105e16 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32332) f6047c96c7a83f8004752f0be201e03181d3ef59 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#32357) f2f6bf6e99c8d1331c7894304eb9bacc8fb7a401 (dependabot[bot])
  • chore(deps): bump actions/checkout from 4.2.2 to 7.0.0 (#32368) 69f70a86748edae2d32b6106bddacba9a1c6e359 (dependabot[bot])
  • chore(deps): bump actions/stale from 9.0.0 to 10.4.0 (#32369) c95222ab5af136ce9e5f3624212b31f5a496c0ec (dependabot[bot])
  • chore(deps): bump actions/setup-go from 5.1.0 to 6.5.0 (#32358) fc71f51069104729717d718c324c07420059b89c (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#32360) 6596318b34e93427ebdde2cfce83b94e81c229c6 (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#32359) 5d9943ca09fce64c9e98c68aedbc5ddb43eae793 (dependabot[bot])
  • chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#32356) a3d7a6c50a69008c97f42c456df1318135786c10 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#32354) 8e199708cc2a3323f31274026a16839a78984a3e (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#32353) 24ef09ac19305a8c225287d983ebd26dbcb4b260 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#32310) 8082dd4a0d9f1ca3dbd2052a8b0e1bba843a85c7 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 2c24490679681b0825c258576e9f7699f8dc8e54 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#32306) 953d280f928c4bc76912236bc2a8a0d11a39c016 (dependabot[bot])
  • fix(engine): prevent Files.Lines panic on empty file c02a9aed3452c0c7ee9d79ded44dd170ce5001ca (Mahesh Sadupalli)
  • Apply suggestions from code review 093015b3b7c466828d01697d4d3d8f4811c59942 (Benoit Tigeot)
  • fix: drop containerd v1 dep to resolve govulncheck CVEs a061886b724181526f5283789e78ec4369e25ff3 (Benoit Tigeot)
  • chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 f9798360983d9d964e2088427c693317a69f326e (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin c4446659f68e94db06f0e142376f8cf1b970a878 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 2 updates 1bf9b5fbba4df88a562a35eef40e6c60f12b5a90 (dependabot[bot])
  • fixes b7a0fd0ddc84fdfbf571486e5dac829bfb2bd78a (Matheus Pimenta)
  • chore(deps): bump the k8s-io group across 1 directory with 2 updates 119a7d9babffcec9e51d285153e09d8c4f54a69d (dependabot[bot])
  • fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 2fb05f8a35f6c0d5760c03c12d60c46adf2b3d12 (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 acc867b88e68e5f9c074c1c8c584a57b3ae6c127 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 b920935feb6b6c8729cdf6b98f4c8efc824779c5 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 5b5ef192c773f6448e4dcd845e643c573aff906b (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 af67af8951d5f9a7631efc3a97b6dc6b58247148 (dependabot[bot])
  • Update .github/env ceb9a62ec03c8d5aea94dee9c9456a7dfd89ba71 (Terry Howe)
  • ci: bump golangci-lint to v2.11.3 for go 1.26 0ed92f0696329495d87f8acdc42687c30b31d431 (Terry Howe)
  • chore: bump go to 1.26 c678c0c9c088fc2f9ddbad8c88416c77f4e048cc (Terry Howe)
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 12c4d45b146a8be1ca70bd15e3cad00e7d12733a (dependabot[bot])
  • chore(deps): bump github.com/distribution/distribution/v3 a0f97111f5607a5724a8af110480384827a81b41 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 995c31e20bf3ab9a4feb85cd4a54951d9418ea51 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 8c171688281d3c1f14d908cf682c742585848db0 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 fe141bd537ea42e64bec3b3b181dcf955260e939 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 980836f726fdfbd6a2f0662a0aa48fe35da3fd64 (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 1dde6c7551746a74a6f69db06eaf4fc58a90042b (Terry Howe)
  • chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 0162feda1d4d6dd0bd1f227ecdfe9f489e6d7284 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 a664a58f43c742987376bca589891fda3bf55668 (dependabot[bot])
  • [v3] Bump to version v3.21 (#32103) 3033a778b611b7501dffae7bd57c071dde318b6c (George Jenkins)
  • [v3 backport] Fix rollback for missing resources 0a4757359edcdfaad2e19e8ee3518188bd3cfa1b (Feruzjon Muyassarov)
  • fix(action): avoid nil REST client getter panic when installing CRDs 711a4eaf40a911b0864a01b99f59f62817443003 (sergiochan)

Helm v4.3.0-rc.1 (pre-release)

Aug 31, 2026

Helm v4.3.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v4.3.0 is officially released.

The official changelog will come out with the v4.3.0 release. For now, you can see the commit changes from v4.2.4 here.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v4.3.0-rc.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

Helm v3.22.0-rc.1 (pre-release)

Aug 31, 2026

Helm v3.22.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v3.22.0 is officially released.

The official changelog will come out with the v3.22.0 release. For now, you can see the commit changes from v3.21.4 here.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.22.0-rc.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

Helm v4.2.4

Aug 13, 2026

Helm v4.2.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • fix: Improve error reporting for helm template --debug with --show-only- #31185 by @kyokuping
  • fix: fetch logs from all containers in test pods- #32099 by @SebTardif
  • fix(provenance): check error return in Digest and encodeRelease- #32136 by @SebTardif
  • fix panic on repeated IsReachable calls- #32184 by @atkrad
  • fix: set [pull,push] scope when helm push to a registry(use token auth) - v4- #31211 by @kimsungmin1
  • Fix missing conflict retry with server-side apply- #32088 by @Kajot-dev
  • Properly format the extra field in gzipped packages- #31884 by @ouillie
  • Fix vanishing empty lines- #32327 by @matheuscscp
  • fix: pass registry client to downloader.Manager in upgrade- #32400 by @SetagGnaw
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1- for GO-2026-6061 #32450
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158- #32521 by @TerryHowe
Installation and Upgrading

Download Helm v4.2.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Minimal fix to build failure from #31211. 3900f434fd3ef2b84065dc04508df48f288dba00 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#32521) f7c6e8f0f1e0e649e8d03b1535db4f3b8d0c9af2 (Terry Howe)
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 035a2c38e9a75ca0988c8449c0b7257f30d04064 (dependabot[bot])
  • fix: pass registry client to downloader.Manager in upgrade f76a5f46a952f731cc1543f348121297c8b3f6cc (Gates Wang)
  • Apply suggestions 5a7c6c7c732b04ad6517b452d538da9e18993d67 (Will Noble)
  • Properly format the extra field in gzipped packages 22818486ce0fc18d92e01ba39faf65f70ffa8865 (Will Noble)
  • Fix missing conflict retry with server-side apply (#32088) 2c979a17ac6b6d7bfe2d6650b69fa9effe963d4d (Jakub Jaruszewski)
  • Potential fix for pull request finding 2bd2c66544634e419ede3cfa18952cce5a5acd08 (kimsungmin1)
  • fix(registry): resolve golangci-lint issues in token-auth tests 183a5402291c553898b9c404bc17c95c81ea1c6c (kimsm28)
  • chore: go mod tidy after rebase on main 08d8da1aa9080772e57ab5bf5b00b3c13364af00 (kimsm28)
  • fix(registry): use plain-http registry in token-auth scope test 9655b5aecc0d36142d0620ff5ed762065a997739 (kimsm28)
  • Update pkg/registry/client.go 430dfac3eeab03886f511761e3969f738f760364 (Terry Howe)
  • test: improve client_scope_test.go to avoid data races and brittle assertions 9569605eccf8318fe25bf78c46c4eb462ce8fc3f (kimsm28)
  • fix typos in withScopeHint function comment 63f2b6809919e5e8e3e04f52064a536a14f1ff9b (kimsm28)
  • fix registry test failures by adjusting DockerRegistryHost and auth server listener management f7488c0be8c65dd16386c215cac4332900667278 (kimsm28)
  • fix variable naming requestUrl -> requestURL 8fe78fbe46eb2db5c75ab1cc89699c750017dca6 (kimsm28)
  • fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder d0670d2fb2c3426cde4b41927b5e9b8b4370df93 (kimsm28)
  • change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) 804256ef659226f26b2222ccb8f9cf18ef1b1946 (kimsungmin1)
  • change client_scope_test.go to use httptest d79bceb807692512461d8007040c41bcd1547041 (kimsungmin1)
  • fix typo d34fcd9264225a1e6296c4b0ee124dc69f3b3ecc (kimsungmin1)
  • remove freeport dependency 9fbd190c30addb4786e4fe930a0fe98bf354116a (kimsungmin1)
  • add newline in license header 9275661357afdfe12b8ce561e8103673f16cca8d (kimsungmin1)
  • fix scope when helm push to a registry that use token auth fef91f3e6942a20148542461eaebfb24f2c09584 (kimsungmin1)
  • fix panic on repeated IsReachable calls e89ce68bc5fec430bc1e2f0aef1aca6a2e71f795 (Mohammad Abdolirad)
  • fix(provenance): check error return in Digest ff1ac83bfb1246cdf1b57a4db0042085cc8b265d (Sebastien Tardif)
  • fix: address review feedback 4b4dedb2bdcfac886c124a361a5126e3c5e3c5df (Sebastien Tardif)
  • fix: fetch logs from all containers in test pods 7c8010322b8639cdf7844ac1ae5f8d444db43935 (Sebastien Tardif)
  • chore: rename savedErr to clear its specific purpose ecc9cd2f1b5b53dadcd12395c032bc5b3ca02937 (Jeaeun Kim)
  • chore: fix lint f6211ba49bfbf5768ea44be3a1402869a4709b37 (Jeaeun Kim)
  • chore: store err separately for clarity 3507ea5bfdbad921684ac131896b6968c76e9ca6 (Jeaeun Kim)
  • chore: Improve error reporting for helm template --debug with --show-only 211ffae93d2d741a2dbcd74b4aa2a1bc2fc27d5f (Jeaeun Kim)
  • Address review comments 51a9837ba177812c381515886c4f0cd0b7a633e6 (Matheus Pimenta)
  • Fix vanishing empty lines 83a8b70ffc1bcf97bb293cf6b35bd3b5093e8c30 (Matheus Pimenta)

Full Changelog: https://github.com/helm/helm/compare/v4.2.3...v4.2.4

Helm v3.21.4

Aug 14, 2026

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308
Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

Full Changelog: https://github.com/helm/helm/compare/v3.21.3...v3.21.4

Helm v4.2.3

Jul 9, 2026

Helm v4.2.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v4.2.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7feece8beb0fcba47059ec9b522fd929a64 (Terry Howe)

Helm v3.21.3

Jul 9, 2026

Helm v3.21.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.21.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Apply suggestions from code review 1ad6e68924fdf6fb0c7dcef8e9e1dfc0f36eaed6 (Benoit Tigeot)
  • fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e7d51b08e30a0233bd546c345ab3ea3bba (Benoit Tigeot)
  • chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178ba06a8a1eeacaab1df9162b658b1e07fe9 (dependabot[bot])

Helm v3.21.2

Jun 20, 2026

Helm v3.21.2 is a patch release to correct bump the Kubernetes client libraries (client-go, etc) to match the expected Kubernetes v1.36 release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Update Kubernetes client libraries to v1.36
Installation and Upgrading

Download Helm v3.21.2. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.21.3 will contain only bug fixes.
  • 3.22.0 is the next (and final) Helm 3 feature release
Changelog
  • chore(deps): bump the k8s-io group with 2 updates 125963406833fe0525be91f46c8b5b0f22fb9e32 (dependabot[bot])
  • fixes b52e27609b4420d206c1874ce9b0c75e271665e7 (Matheus Pimenta)
  • chore(deps): bump the k8s-io group across 1 directory with 2 updates 3342dbfec8f39776a9accd50fa91a52d68673af1 (dependabot[bot])

Full Changelog: https://github.com/helm/helm/compare/v3.21.1...v3.21.2

Helm v4.2.2

Jun 17, 2026

Helm v4.2.2 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #32214
Installation and Upgrading

Download Helm v4.2.2. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.3 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" b05881cf967a5a09e19866799d0edfd40675803a (George Jenkins)

Full Changelog: https://github.com/helm/helm/compare/v4.2.1...v4.2.2

Helm v4.2.1

Jun 12, 2026

Helm v4.2.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Fixed data race detected by -race flag when concurrent goroutines (upgrade + rollback, install + uninstall) both call GetWaiterWithOptions on the same FailingKubeClient instance #31925
  • Fixed helm command success messages writing to stderr instead of stdout. Now correctly outputing to stdout #32056
  • Fixed Helm 4 emitting "unable to find exact version" when using version range constraints #31757
  • Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #32081
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #32153
  • Fixed SDK errors by upgrading dependencies: cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 #32128
  • Dependency updates
Installation and Upgrading

Download Helm v4.2.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • fix: protect FailingKubeClient.RecordedWaitOptions from data race (#31925) d591a19b953bd9cfdf7d9ddd83c2f4ffdaeafb29 (Terry Howe)
  • fix: route registry client output to stdout instead of stderr (#32056) 2a9fcae29280472edec988c6bf0528e4ae79b33a (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 ffa5bd693eee68ba9c1ba42d160c69114eda962c (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 9f9dbaf94008044a516cda4837565237306578a7 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 64a2891699ae9c8f2d0e06d5db3dd117649886a2 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 e54a4a2b7d4ed9ca3bb4be7562f76dd5f2fd8f71 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 acb762b0ef8882b062ba8f6b87261411309875b8 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 768586df3f2a79fca5202b6713f8675bb097a904 (dependabot[bot])
  • fix(version): avoid false range detection on prerelease x/X eabfae560459d1ffe1f7a3268d5441238e9f84b2 (Benoit Tigeot)
  • fix(version): version range || can has no space e3fd51f331e14fb4056951540d2f2ffde81b405c (Benoit Tigeot)
  • feat: report in debug the version we select with version range arg 1e47395a9566bcaaaf7ed9e31a8367eb1f95e0a3 (Benoit Tigeot)
  • fix: prevent warning when using version range constraints a33e23939a85ac60eb9a6bee818f2c5459fda576 (Benoit Tigeot)
  • fix(kube): always propagate context.Canceled in WaitForDelete fa06d4455724afe22bbe00af7925549a82d95e6c (Terry Howe)
  • fix(kube): prevent spurious early exit in WaitForDelete during informer sync 360d4835df0fb8bd7cbde4cad0cbc79de01a6e93 (Terry Howe)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.11.0 to 1.12.0 7651edf21e31b5c33df82e67f23855d1358d021d (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 b132e7e43f3620eb60ef3524527c1b2fceed90e9 (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 eee491a7461a524b87e5bb73ea5a0c4f82c72469 (Terry Howe)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 3e3c5751b1723239cbce042533db0d84b65c6bc1 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 c4ce2bb364dbfb781059e628572d7177ba191cc4 (dependabot[bot])
  • chore(deps): bump actions/stale from 10.2.0 to 10.3.0 3892dc2a11b2e111acddcbc55d5a4733ba461f20 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 c4bbb6263f59fe541acd75ce0b508034c65899e1 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 a0d7f16b58aa4cb9dbaf8c37055faa28b1b350ae (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.3 to 4.35.4 8a3de054b5ab1b59f60c790fad39861e294671f1 (dependabot[bot])
  • fix(upstream): upgrade to cli-utils 1.2.1, controller-runtime 0.24.1 and k8s 1.36.1 57a4803bd4953d8ef9d51d927f492ecaaf5df9db (Matheus Pimenta)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.0 to 1.2.1 b33ae02b9cd7fcba804391ab3d364739cb2a8780 (dependabot[bot])

Full Changelog: https://github.com/helm/helm/compare/v4.2.0...v4.2.1

Helm v3.21.1

Jun 12, 2026

Helm v3.21.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Fixed nil pointer panic that could happen with helm template in ClientOnly flows. Now correctly returns a template error https://github.com/helm/helm/pull/31920
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #32152
  • Bumped Go from 1.25 to 1.26 #32168
  • Dependency version updates
Installation and Upgrading

Download Helm v3.21.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
Changelog
  • fix(action): avoid nil REST client getter panic when installing CRDs c56dd0095fd76da5d7b30ecdf506103e7f26745e (sergiochan)
  • fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 702529f90a0021e4d9df4880d6589198ec0e05f7 (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 178e120e16f5d61f769ee2c56a0d2a45ab7303bd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dcf35f86551322d93c1cb695f08435b3287e5ad0 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 44aff8bf51809ec9f8a906d050818776cd47b264 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 ae2f31f5a7d0cd789ca9fd83a6a2fe5fc7c3a1a3 (dependabot[bot])
  • Update .github/env 402225fffdc82a28a213af94ea269c4300f12700 (Terry Howe)
  • ci: bump golangci-lint to v2.11.3 for go 1.26 00eac21a89cd977868c0304917acd90220e07895 (Terry Howe)
  • chore: bump go to 1.26 bec346ac983fd0b860a13ef7750616e088143f01 (Terry Howe)
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 58b6ccffd3e3ade58543c50e76e6fb6c39393be5 (dependabot[bot])
  • chore(deps): bump github.com/distribution/distribution/v3 30b9f51d80b5853ef4031af168dd02491bbef9ab (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 858aa47b455f08516a6d977f93d609c24f985853 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 1af25d46939584205f0e3810fc547fcda727b1ec (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 97e4bc30e57290d81b36972ce49f908d68fd9241 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 29bdd1bedd28bf816c7e26d356126489edf22945 (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 bad6cd478f5b3f3c96b795f4d6a010f04a89624f (Terry Howe)
  • chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 75c2e9bf370eabf35a00e60cfceaee2b969ebe00 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 cd4dac334caf38105aaae00ee8d4a9cb03de0b2c (dependabot[bot])

Full Changelog: https://github.com/helm/helm/compare/v3.21.0...v3.21.1

Helm v4.2.0

May 14, 2026

Helm v4.2.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Switch to goreleaser for release builds
  • Kubernetes client libraries to v1.36
  • Add mustToToml template function
  • deprecate unused --hide-notes and --render-subchart-notes flags
  • --dry-run=server now respects generateName:
Installation and Upgrading

Download Helm v4.2.0. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.2.1 will contain only bug fixes
  • 4.3.0 is the next feature release
Changelog
  • Bump to version v4.2 06468084e85c244c712834933d25ea232a4c2093 (George Jenkins)
  • build: Clean up Goreleaser change (#32098) e23bf3af53c52185123278e83b7023c102707778 (Scott Rigby)
  • fix: add -extldflags -static to dist target to match build-cross f60ab7c31c81a73b8e0aade5aff41bfc01c08820 (Terry Howe)
  • build: use goreleaser build with manual archive creation 64aa46f2f1cf239cf6535c5e847e14dcb933a847 (Terry Howe)
  • chore: remove build-cross dependency from test-acceptance d199a1a42c04bccb287f2c7d9c3f73b669412e5a (Terry Howe)
  • ci: add fetch-depth 0 to canary checkout for goreleaser 82899404a68f3826389bb38cf67bf75085db6b2c (Terry Howe)
  • fix: address goreleaser build issues flagged in review c075022ce16489f5f7afd45a37b679cf58fa36ea (Terry Howe)
  • fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive names 04885dd905b6f8a823733dbc9b9f5cb2843a975f (Terry Howe)
  • fix: disable goreleaser checksums.txt and restrict zip to windows only 93103ce66cb6374d9d7b552802f53b21ea2c2dd1 (Terry Howe)
  • fix: use index for optional env var in version_template e49a1dc16eee526928d8928b8d96c01ee513ebd9 (Terry Howe)
  • fix: canary build file names eaa09100b9b18175d878b1e114cbe9df2a3f70c2 (Terry Howe)
  • Fix archive name 5a75279c1a017a60b97bd44986288af7399c6ff8 (Terry Howe)
  • fix goreleaser archive 37284a9211972f7f41a2acc3c3313517596dd4b0 (Terry Howe)
  • add support for loong64 45336ccd5b2621357e3f785c1fe93627c5990a6e (Terry Howe)
  • fix artifact directory a9659b07e3eec20ab5b964fddae05f51f478f704 (Terry Howe)
  • update configuration to v2 e368f170af8a200e672adac5f765b8101db0c8fa (Terry Howe)
  • remove GOTOOLCHAIN e7bea8513c30475664919f031774e18fecdf1f66 (Terry Howe)
  • chore: replace mitchellh/gox with goreleaser 075c096afec70155bc43ac3587a119df1ae5fcc6 (Terry Howe)
  • chore(deps): bump github.com/distribution/distribution/v3 12f2c41c0d7a74739c58a5995cbbb3125d9247e5 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 58e8ffdc3302260b1b55718c9b72c6f169a76ee0 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 e61bbfbfff41958b0ba1984e4d6799fe131f325e (dependabot[bot])
  • Upgrade kstatus to 1.2 and controller-runtime to 0.24 081c6dff537087f52ec6e470d8986439e24e8e33 (Matheus Pimenta)
  • fix: adds topLevel permissions to improve openSSF scores 277d9702555532d13426119d31c70fffb389d589 (Gagan H R)
  • Upgrade Go to 1.26, Kubernetes to 1.36, kstatus to 1.1 a4a9cc7a314d98456a2f23798a78e9ad05d96d0c (Matheus Pimenta)
  • fix(templating): hooks conflicting with templates in post-renderers (#32049) 8f56f24d638612a46f3e23265d06338c1f93bccb (Matheus Pimenta)
  • docs: fix grammar and spacing in CONTRIBUTING.md db40adb1d13573280b65bc2002df7d75c009235a (Mohit)
  • chore(deps): bump the k8s-io group with 7 updates 775e794319639f5c1e6b40448ce15ad3cc10d4e1 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 934ace35dfaef9eeb9997bf1ee385db0986daecc (dependabot[bot])
  • fix(templating): SplitManifests must preserve line endings for downstream YAML parsers (#31952) 265c5eb530a36ec651e79ecf4d37ba2f098b7e59 (Matheus Pimenta)
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 48e2b7ddd4e960b768fe5daee34a33cb89852a6e (dependabot[bot])
  • Update pkg/chart/common/util/coalesce.go a8e249714f5311b9aff44c4bd2bfc433ab1ab952 (Evans Mungai)
  • test(values): Add test for nil cleanup in partially overridden subchart maps 52fc971da37cf34aa26e7d7c460f2430dfb01b26 (Johannes Lohmer)
  • fix(values): do not copy chart-default nils into coalesced values 00638773d1366dc962c785de3d297cf0279b9a0d (Johannes Lohmer)
  • test(values): add test for subchart nil producing %!s(<nil>) 6eb4ebf0e1afb0c63d748bf116145a5b9e0842b7 (Johannes Lohmer)
  • test(values): add tests for subchart nil value regressions 5cb4e7d992d85d372f5d86c238330102d936bfe5 (Johannes Lohmer)
  • chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 b5c7c80de317643e383ca2926ebc0ad884021bba (dependabot[bot])
  • fix(templating): fix wrong YAML separator parsing for post-renderers (#31941) a27f1add79c6c02459413dbb60f8438d8051cf06 (Matheus Pimenta)
  • fix: add debug logging to HTTP getter for helm pull c26be60d81e5cb6a147d6088477cf86fd5aaf1f0 (Cairon)
  • chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 953f5f031bb7fa8f3eccdea6520e09fd44fe3923 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 10fc5f335b5fbb09f5d04cb0450839790ae15634 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 d89e7c60762910204044c4215c7bb2f43ac3ef8f (dependabot[bot])
  • chore: Update release notes script for Helm v4 8a954619255a82890a08b7d1fa9e86a437c4cebb (George Jenkins)
  • refactor(cli): share RetryingRoundTripper via pkg/kubeenv 213c869a988f2c7390c65673e3d677970d6220fd (Sumit Solanki)
  • chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 bd5027a9cf07993d7bfe4b60702b1a489fe8783e (dependabot[bot])
  • fix: unnecessary-format lint issues from merge 087736b66e97393ccaa0bdf1e5df13dcc9d88340 (George Jenkins)
  • fix: Plugin missing provenance bypass 586eb57338d848e65686a3a9616e2776e87cfd1e (George Jenkins)
  • chore(deps): bump github.com/fluxcd/cli-utils c8c5dfad630cd7b238236c619c466488a547725c (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 998466cfcfee189ce7e3df5be8ffe79ed5f1f097 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp b0cec589f50a7e16d942ad3385598a6dda2b0a20 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp 6ebfb29dbf006ce78e9af8878008bda3578dcd3e (dependabot[bot])
  • test(kube): fix flaky WaitForDelete test by avoiding informer sync race a7f84439aacd3864b40055b60a3c3e54292d1646 (Terry Howe)
  • test(kube): fix flaky WaitForDelete timing in status wait tests 4c0d21f53f2ca78b525e31dbbf9cc9cfb818a2e3 (Terry Howe)
  • chore(deps): bump github.com/distribution/distribution/v3 08dea9c140084b5d9fecb59a45a05f417415b591 (dependabot[bot])
  • Minor nit: fix import instructions to comply with canonical import paths de58531ca7ff557342acaa2c906082e58521ef47 (Anmol Virdi)
  • chore(deps): bump github.com/distribution/distribution/v3 9b1ad4cf027452b828affb07318db2e931e734a5 (dependabot[bot])
  • fix(action): return correct error variable in prepareUpgrade 8ef2d45934ba1b9ca341818f1157112fcf7cdf1d (Rhys McNeill)
  • chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2 cd7cf76a174e856fd171b391995d9a65f97a79d3 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1 45ee55b83f8ad23798c84560ff65686e2ab298af (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 9a0674188412d1dcb2e7f018730aaa71781bd03b (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0 d1e31ca507412d770a602e722060e6d7379f4f1a (dependabot[bot])
  • fix(kube): clarify server-side apply patch errors f257c95c783f5595e36cb5a7dcc862cc1f6266b5 (abhay1999)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 7025480397d8b6b7fd8cdb5e083dc37b62dbd3d8 (Terry Howe)
  • refactor(cli): decouple EnvSettings from pkg/kube 64f1d0af5b53f0a9292af2ba1efc42a46a57ed00 (Sumit Solanki)
  • docs(registry): fix incorrect and improve clarity of comments in client.go 85bf56ea82fd21452e53cae91b380b0afb3e8b83 (Debasish Mohanty)
  • refactor(cli): decouple EnvSettings from pkg/kube to avoid import cycles 154993723aadf45601d124c6750e8f4ae3b9f2fd (Sumit Solanki)
  • chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 c7a75b16cb8b0859bf32bf74ae98300e5b55361b (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 3a7573a81ed5be2e00dfb74fa8d95c0cbe1c4f0d (dependabot[bot])
  • chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0 0229da1803a29671b1becc4561c77f85db609aac (dependabot[bot])
  • docs(engine): fix misleading toTOML doc comment c1a5a6e260bd070bce9a8299795400340e10c468 (Ilya Kiselev)
  • feat(engine): add mustToToml template function b075f7a35d25ec0a4414b011142744f8f1821b47 (Ilya Kiselev)
  • chore: fix unnecessary-format issues from revive 7edfff33ebcb0f5d961afec34393c222de92de12 (Matthieu MOREL)
  • chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 37185d2ea6a091b93d2e71cc55ab16b2c0f3f9e9 (dependabot[bot])
  • chore: fix bool-compare issues from testifylint 071558d69ffbb408dcb56403d387a1aa90a7d3a8 (Matthieu MOREL)
  • chore: enable perfsprint linter 62494896e9a105b63df2c76c638c53304a37121e (Matthieu MOREL)
  • ignore error plugin loads (cli, getter) 47a084091eeb1c5de221e061866b319f5b5f99f5 (George Jenkins)
  • chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 3d06fd1feb37f11d050e78f7c17df3c713fcd344 (dependabot[bot])
  • fix(kube): remove legacy import comments from test files e64d628a139fab8c876a1d2f4c2928096b286bed (Terry Howe)
  • pkg/kube: remove legacy import comments d7cdc9e8fb20c42d19a2371f37ee719be6be6b94 (abhay1999)
  • fix: Plugin version path traversal 36dcc27ca3c0cd6d0d08713b03dca82f43d7c5f9 (George Jenkins)
  • chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0 c4be7af2a14c1a01f21231ebb5dd41806fcb0797 (dependabot[bot])
  • chore: fix some minor issues in the comments 259f181808f267493d56eccd7f6191f78225a6fa (tsinglua)
  • fix: Chart dot-name path bug 60184996e5332d26e0b6390cefbf86776829dc46 (George Jenkins)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 74e7cf877a4a674b65f7b7894d2dfde2832e39b1 (dependabot[bot])
  • fix: insert newline after doc separators glued to content by template trimming af94abf976ce69dd635aaf086a0bb4b17bd95bc1 (Matheus Pimenta)
  • chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 16073b1e3c7b90cda41ed70c8192eb6d16816723 (dependabot[bot])
  • chore: enable modernize linter (#31860) e31a078e6e0667dde72ff3bf4b5dfb625127076f (Matthieu MOREL)
  • Restored --atomic flag on install command 16573f87f5aebf8c2f9c40e67cc3cbe5eb93e733 (Travis Leeden)
  • fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 b550ce90946b3b47cecd290fc5d0eee637ddb531 (Terry Howe)
  • fix: bump fluxcd/cli-utils to v0.37.2-flux.1 1dfa77ed8ba6f9e26542064248bc9eab40c1a662 (Terry Howe)
  • Update pkg/cmd/status.go 5d40f17011a477620841edb740d381a012716ae8 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter (#31871) d4f6193a7ec7ae9ea479da3372eeaf22b445ebcc (Matthieu MOREL)
  • chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 82d9bedea7d3e342011d82e2e11ff83b396dffbe (dependabot[bot])
  • chore(pkg): fix perfsprint linter issues part 6 dc0e3f10c3ba8f25aa71c523d2e273690d338a17 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter e3c74fd9fae52c85899ee0ca9a0c1422d59e2bc2 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 1d2d63cc4330fcac786e70926f805b69c0b49ca2 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 63f03c0f5c41b53de3d432b446da9430da99f5bd (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter c25c988cfb7bbe3b139dec39cad1db4be33b13c6 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 0fecfd04c2f9a748046a8421595f3b9da6c895c7 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter 6524162a0e39bed187a16b692243703d78735471 (Matthieu MOREL)
  • chore(pkg): enable perfsprint linter 6c2cb2f54784b5ef6158dca0660f428a3baf75f5 (Matthieu MOREL)
  • chore(internal): enable perfsprint linter 9409226e15b26d05621f0b263f4ad6f597dfb7aa (Matthieu MOREL)
  • Replace unneeded use of t.Fatalf with t.Fatal 36cb3a2fe92a4564d2d7d79141f209af19b45d40 (Mads Jensen)
  • fix: enable nolinlint linter 5b6c6bbfc7ca9850c69d3823ca1e21b445e75c0d (Matthieu MOREL)
  • fixup strings.Cut variables b6673174220a2633fe97b5cd70a8386b79103464 (George Jenkins)
  • chore: Improve AGENTS.md 956c7245c346fc304c24ace930dada5f2c99f2b1 (George Jenkins)
  • chore: fixes 92b64e87ad6245d64d5b49bbbbf8dead83faac22 (George Jenkins)
  • fix: correct import comment in statuswait.go from v3 to v4 c59c140ce07ce973f16fe50c0c5e991e1d6308a6 (rohansood10)
  • fix: handle OCI digest algorithm prefix in chart downloader (#31601) ee018608f6fbf381fac1bae9759164a65c6a0b1f (Evans Mungai)
  • chore(deps): bump actions/stale from 10.1.1 to 10.2.0 304d25ffd34fafccbcb81713cb3cfff1be595ae5 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 0b134362f442fec44ace35e9cfae6760a6b4e005 (dependabot[bot])
  • feat(release): add internal/release/v2 package for chart v3 support (#31709) 4a91f3ad5cc0c1521f6d4dcb5681e2da4baaa157 (Evans Mungai)
  • chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 782385397ce1871f4c8a4d2e3c857937bd8988c9 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 aec7aced38d053a2df5d0973abdf21848778a722 (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 a23b6388ac74984460fd4055de5120d2fc03d841 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 5cddc95bed0572b8d63a910843f0a70477a4ce33 (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 2e266c3ec9d70a6e656f8041bb31475e25e9eb22 (dependabot[bot])
  • fix(pkg): errorlint linter 259f76a849391e6ff60a9a2e95ce7310d958c602 (Matthieu MOREL)
  • fix(internal): errorlint linter 025418291a7911441e7962895ba4bc24b72b55b3 (Matthieu MOREL)
  • fix(pkg): errorlint linter 6d1490ed1ea5968235087658d03bb440e4014a36 (Matthieu MOREL)
  • fix(pkg): errorlint linter 4d0ae7f33a09093f8f52d02b952e3822c87b8c5f (Matthieu MOREL)
  • fix(internal): errorlint linter abecafa0f507a69888877b9ddb714095714b64c8 (Matthieu MOREL)
  • fix(pkg): errorlint linter 4330bdea0409f428e75145f15532bfa0e2bc945c (Matthieu MOREL)
  • fix(pkg): errorlint linter c8989d984ff69e8ad21b27d6ac6193dd3150b1a7 (Matthieu MOREL)
  • fix(cmd): errorlint linter edbd705bd034246700cc0998016caa303cff42dc (Matthieu MOREL)
  • chore: new KEYS entry for George Jenkins 5638c35399464b6432ba81b92a341218991efa5c (George Jenkins)
  • fix(downloader): safely handle concurrent file writes on Windows 76eb37c01aaece271343039f44d7803017dd5c81 (Orgad Shaneh)
  • fix(install): check nil for restClientGetter and fix tests 9817a68618245370e98e09d7f06c7cc1cefe8a62 (Manuel Alonso)
  • feat(create): add --chart-api-version flag (when HELM_EXPERIMENTAL_CHART_V3 env var is set) (#31592) 5aac32077f87ed8cd80da1648abbd323320d4a0b (Evans Mungai)
  • chore(pkg): fix modernize linter 0d75d8611d3daa6b820d94fc95347a069b062f72 (Matthieu MOREL)
  • chore(internal): fix modernize linter 859292e31bd4ceb170050eaa49e727bcd69572e2 (Matthieu MOREL)
  • chore(pkg): fix modernize linter 5cc2e55714d20e6d1bd2663878a00571c084d6c2 (Matthieu MOREL)
  • chore(pkg): fix modernize linter ba38159313d4f09280591ba7f860ef0523716220 (Matthieu MOREL)
  • chore(internal): fix modernize linter e2d184c79e9049c19bcc466bfe1289ccc6b73717 (Matthieu MOREL)
  • chore(pkg): fix modernize linter 111d4e6e0e86af6ba25a355be1a7599f5258ee58 (Matthieu MOREL)
  • add image index test e8f386b5aac232c114a036598c2e3015fe296edc (Pedro Tôrres)
  • fix pulling charts from OCI indices d983696e354a9e0605cbb3034937dc84af42995c (Pedro Tôrres)
  • chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 9c9c3a6b5c0f1cd1e4c4e9f002aa411c58dd656a (dependabot[bot])
  • Revert "Consider GroupVersionKind when matching resources" 787b61cedb933d22011e1da1368d0e615ea60ffe (Matheus Pimenta)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 becf9bf7e33867a3f26affac34e9d51e277767bf (dependabot[bot])
  • fix(template): deprecate unused --hide-notes and --render-subchart-notes flags 6d5f56fa6e7c8e4462d80895fcce87b926e4b8ce (Scott Rigby)
  • chore(deps): bump github.com/fluxcd/cli-utils b53198e7eee04dab651c15cb7b3b6b77dd92553c (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 b59e533b

Helm v3.21.0

May 14, 2026

Helm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.

> [!WARNING] > Helm v3 is approaching end-of-life. Please update to Helm v4.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
  • Kubernetes client libraries to v1.36
  • notable changes here
Installation and Upgrading

Download Helm v3.21.0. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.21.1 will contain only bug fixes.
  • 3.22.0 is the next feature release for Kubernetes v1.37
Changelog
  • [v3] Bump to version v3.21 e0878d41b711792be60777fd65ad23a101e6b85f (George Jenkins)
  • fix: upgrade opentelemetry packages to patch CVEs 13d5fc4ae0e7222e1af8796ff4fa467b52208471 (Terry Howe)
  • fix: Chart dot-name path bug 2552884e3bc1b763c3901c5ea7240b59ef6791f1 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5f0481c2de3a41a554adf3c52a6a2a9bb6 (Terry Howe)
  • add image index test b0dfec5af4d7f642d8dea3b9058856541fe5017c (Pedro Tôrres)
  • fix pulling charts from OCI indices e629995c5d65ec2d5095ecd6d094bf85d02b3266 (Pedro Tôrres)
  • chore(deps): bump the k8s-io group with 7 updates 9c854fbd937ae0efe0e0a5063e7449d8973a85fd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 a692247486fb6893f00af65fdfb05da538c7b1d5 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 9f2a7f696a3e0be43ff9f55ade1dc89c76c6e903 (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 79f039be716a0a48d354ffaaf97179bb4fae9d64 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 45210d597d7941ebe900bd8f317c0a62aa777395 (dependabot[bot])
  • Remove refactorring changes from coalesce_test.go e2df39fc0b3e713df923a7ae64412e327f6e1022 (Evans Mungai)
  • Fix import 97affe067aa1e39fe6552c0d46de749f02063183 (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go c264166ec6bbf61c400a3457fae87fa058487e76 (Evans Mungai)
  • Fix lint warning d409df87ff6c2cbe17cc465b93ce646003b71d28 (Evans Mungai)
  • Preserve nil values in chart already 6fdd1017cebc284f7d545c04dd2c8f2d350d69d2 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map b13743c8d4ef5488f40148af1d6ccd35ee9b97e3 (Evans Mungai)
  • chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 703999db8484985f4cafe000a610f10d688b2456 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 a04be9699efe5c26827397d7004b3490ad4ef029 (dependabot[bot])
New Contributors

Full Changelog: https://github.com/helm/helm/compare/v3.20.0...v3.21.0

Helm v4.1.4

Apr 9, 2026

Helm v4.1.4 is a security fix patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Security fixes
  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
  • GHSA-q5jf-9vfq-h4h7 Plugin verification fails open when .prov is missing, allowing unsigned plugin install
  • GHSA-vmx8-mqv2-9gmg Path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

A big thank you to the reporters of these issues (@maru1009, @1seal).

Installation and Upgrading

Download Helm v4.1.4. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026
Changelog
  • fix: Plugin missing provenance bypass 05fa37973dc9e42b76e1d2883494c87174b6074f (George Jenkins)
  • fix: Chart dot-name path bug 4e7994d4467182f535b6797c94b5b0e994a91436 (George Jenkins)
  • ignore error plugin loads (cli, getter) 25819432bf87ac0b54f0d3fa54982add2cac609e (George Jenkins)
  • fix: Plugin version path traversal 36c8539e99bc42d7aef9b87d136254662d04f027 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow c61e0860ec797330a4c26a78dde7020cdc6743b1 (Terry Howe)

Claim your changelog — free