8000
Skip to content

Releases: helm/helm

Helm v4.1.4

09 Apr 06:01
@gjenkins8 gjenkins8
v4.1.4
This tag was signed with the committer’s verified signature.
gjenkins8 George Jenkins
GPG key ID: D79D67C9EC016739
Verified
Learn about vigilant mode.
05fa379
This commit was signed with the committer’s verified signature.
gjenkins8 George Jenkins
GPG key ID: D79D67C9EC016739
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v4.1.4 Latest
Latest

Helm v4.1.4 is a security fix patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Security fixes

  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
  • GHSA-q5jf-9vfq-h4h7 Plugin verification fails open when .prov is missing, allowing unsigned plugin install
  • GHSA-vmx8-mqv2-9gmg Path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

A big thank you to the reporters of these issues (@maru1009, @1seal).

Installation and Upgrading

Download Helm v4.1.4. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026

Changelog

  • fix: Plugin missing provenance bypass 05fa379 (George Jenkins)
  • fix: Chart dot-name path bug 4e7994d (George Jenkins)
  • ignore error plugin loads (cli, getter) 2581943 (George Jenkins)
  • fix: Plugin version path traversal 36c8539 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow c61e086 (Terry Howe)

Contributors

maru1009 and 1seal
Assets 35

Helm v3.20.2

09 Apr 21:17
@gjenkins8 gjenkins8
v3.20.2
This tag was signed with the committer’s verified signature.
gjenkins8 George Jenkins
GPG key ID: D79D67C9EC016739
Verified
Learn about vigilant mode.
8fb76d6
This commit was signed with the committer’s verified signature.
gjenkins8 George Jenkins
GPG key ID: D79D67C9EC016739
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v3.20.2

v3.20.2

Helm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Security fixes

  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment

Installation and Upgrading

Download Helm v3.20.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026

Changelog

  • fix: Chart dot-name path bug 8fb76d6 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e (Terry Howe)
Loading
10BC0

Helm v4.1.3

11 Mar 23:01
@scottrigby scottrigby
v4.1.3
This tag was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.
c94d381
This commit was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v4.1.3

Helm v4.1.3 is a patch release. Users are encouraged to upgrade for the best experience.

Note there was no 4.1.2 release due to a release automation issue.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed a bug where --dry-run=server was not respecting generateName #31563
  • Fixed a bug where empty CRD resources caused a crash. Now it prints an error #31578
  • Fixed a bug where OCI references with tag+digest failed with "invalid byte" error #31601
  • Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key #31644
  • Fixed a regression since Helm 3.18.0 where Pulling charts from OCI repositories that use an index to store both Container Images and Helm Charts under the same tag failed #31776
  • Fixed a Helm 4 regression where gotemplate white space trimming directly after YAML doc separators, when present after postrendering, caused YAML file corruption #31868
  • Fixed a bug where FailedStatus is treated as a terminal state, causing upgrades to fail prematurely when cluster autoscalers needed time to provision nodes, or when pods were being deleted during rolling updates #31897
  • Fixed broken backwards compatibility for deprecated --atomic flag on install command #31901
  • SDK: Fixed a Windows 'Access Deined' error if multiple processes try to download the same chart version concurrently #31128
  • SDK: Fixed a bug where users did not receive any logs from the waiter, causing confusion as several minutes could pass with no user feedback #31717
  • SDK: Fixed a bug where server-side apply defaults did not always match the CLI defaults #31732
  • SDK: Fixed a Go import issue when downstream tooling attempted to vendor helm.sh/helm/v4/pkg/kube #31852

Installation and Upgrading

Download Helm v4.1.3. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

Changelog

  • chore(defaults): server-side apply SDK defaults should always match the CLI defaults c94d381 (Matheus Pimenta)
  • whitespace b36d660 (Austin Abro)
  • use logger with waiter 04a91af (Austin Abro)
  • Remove refactorring changes from coalesce_test.go c3c57db (Evans Mungai)
  • Fix import d47cb2b (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go 790bf92 (Evans Mungai)
  • Fix lint warning f7cec12 (Evans Mungai)
  • Preserve nil values in chart already d94a5c9 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map 8c5fe4e (Evans Mungai)
  • chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 217db28 (dependabot[bot])
  • Restored --atomic flag on install command 7cb43e0 (Travis Leeden)
  • fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 5b26d4f (Terry Howe)
  • fix: bump fluxcd/cli-utils to v0.37.2-flux.1 360c131 (Terry Howe)
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 69a0a92 (dependabot[bot])
  • fix: insert newline after doc separators glued to content by template trimming b868e6a (Matheus Pimenta)
  • fix: correct import comment in statuswait.go from v3 to v4 dbfbea9 (rohansood10)
  • chore(deps): bump the k8s-io group with 7 updates 099192c (dependabot[bot])
  • add image index test 4967ead (Pedro Tôrres)
  • fix pulling charts from OCI indices 2fe6b10 (Pedro Tôrres)
  • fix: handle OCI digest algorithm prefix in chart downloader (#31601) e3e2d01 (Evans Mungai)
  • fix(install): check nil for restClientGetter and fix tests c15e711 (Manuel Alonso)
  • chore(refactor): better testing and functionality for installing crd df82e68 (Manuel Alonso)
  • fix(test): fix tests and check nil for restclient 4b896ca (Manuel Alonso)
  • fix(test): merge fix correctly 3fc7939 (Manuel Alonso Gonzalez)
  • fix(install): add more tests and check nil file data 6017d2b (Manuel Alonso)
  • fix(test): no check empty resources f451967 (Manuel Alonso)
  • fix(install): check lenght and file nil, add tests fdadff5 (Manuel Alonso)
  • fix(action): crd resources can be empty 10d6067 (Manuel Alonso)
  • fix: casing issue fixed 0fec40f (Mujib Ahasan)
  • fix: error handled correctly 2637498 (Mujib Ahasan)
  • fix: doc string added 961d7d7 (Mujib Ahasan)
  • update: test coverage added for helper function validateNameAndGenerateName 29e4506 (Mujib Ahasan)
  • update: helper function added for the business logic d55b0b9 (Mujib Ahasan)
  • generateName is also considered in logic c1c090e (Mujib Ahasan)
  • update: business logic respected for skipping object missing name 5e09313 (Mujib Ahasan)
  • fixed: --dry-run=server now respect generateName f289d16 (Mujib Ahasan)
  • fix(downloader): safely handle concurrent file writes on Windows bfac739 (Orgad Shaneh)

Contributors

scottrigby
Loading

Helm v3.20.1

12 Mar 00:26
@scottrigby scottrigby
v3.20.1
This tag was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.
a2369ca
This commit was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v3.20.1

Helm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Backport of #31644: Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key
  • Backport of #31601: Fixed a bug where OCI references with tag+digest failed with "invalid byte" error

Installation and Upgrading

Download Helm v3.20.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

Changelog

  • chore(deps): bump the k8s-io group with 7 updates a2369ca (dependabot[bot])
  • add image index test 90e1056 (Pedro Tôrres)
  • fix pulling charts from OCI indices 911f2e9 (Pedro Tôrres)
  • Remove refactorring changes from coalesce_test.go 76dad33 (Evans Mungai)
  • Fix import 45c12f7 (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go 26c6f19 (Evans Mungai)
  • Fix lint warning 09f5129 (Evans Mungai)
  • Preserve nil values in chart already 417deb2 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map 5417bfa (Evans Mungai)

Contributors

scottrigby
Loading

Helm v4.1.1

09 Feb 18:33
@gjenkins8 gjenkins8
v4.1.1
This tag was signed with the committer’s verified signature.
gjenkins8 George Jenkins
GPG key ID: D79D67C9EC016739
Verified
Learn about vigilant mode.
5caf004

Choose a tag to compare

View all tags
Helm v4.1.1

Helm v4.1.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix: fine-grained context options for waiting #31735
  • fix: kstatus do not wait forever on failed resources #31730
  • fix: Revert "Consider GroupVersionKind when matching resources" #31772
  • fix: handle nil elements in slice copying #31751

Installation and Upgrading

Download Helm v4.1.1. The common platform binaries are here:

This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.2 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • feat(kstatus): fine-grained context options for waiting 5caf004 (Matheus Pimenta)
  • bugfix(kstatus): do not wait forever on failed resources 2519a88 (Matheus Pimenta)
  • Revert "Consider GroupVersionKind when matching resources" b2c487c (Matheus Pimenta)
  • fix(copystructure): handle nil elements in slice copying 261387a (Philipp Born)

Contributors

gjenkins8
Loading

Helm v4.1.0

21 Jan 22:31
@scottrigby scottrigby
v4.1.0
This tag was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.
4553a0a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v4.1.0

Helm v4.1.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Feature: added chart name to dependency logs, namespace to resource waiting logs, and confirmation message when all resources are ready #31530
  • Feature: improved plugin name validation error messages and field name detection #31491
  • Feature: improved the --wait flag by allowing explicit strategy selection (including explicit --wait=hookOnly) and preventing SDK timeout errors when timeout is not specified #31421
  • Feature: allow concurrent dependency build with atomic file write #30984
  • Feature: added a --no-headers flag to the 'helm repo list' command, allowing users to suppress table headers in the output. Useful for scripting and automation #31448
  • SDK feature: added a LoadArchive to common loader #31462
  • SDK feature: introduced support for custom kstatus readers #31706
  • Fixed bug where a plugin name could already be used by another command #31427
  • Fixed bug where --server-side flag was not passed to install when using upgrade --install #31635
  • Fixed bug where HELM_ environment variables were not passed to plugins. this fixes a regression which was blocking some getter plugins #31613
  • Fixed bug where Helm test --logs failed with hook-delete-policy "hook-failed" or "hook-succeed" #31579
  • Fixed kube client logging issue #31560
  • Fixed regression where vendor-specific suffixes were stripped from .Capabilities.KubeVersion.GitVersion, breaking charts that detect managed Kubernetes platforms #31528
  • Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #12564
  • SDK: bump k8s API versions to v0.35.0
  • docs: updated helm template help text to document --api-versions #31683
  • docs: fixed documentation about default wait strategy

Installation and Upgrading

Download Helm v4.1.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.1 and 3.20.1 are the next patch releases, scheduled for March 11, 2026
  • 4.2.0 and 3.21.0 are the next minor releases, scheduled for May 13, 2026

Changelog

  • Update pkg/kube/statuswait.go f46f1ce (Evans Mungai)
  • pkg/kube: introduce support for custom kstatus readers 59ece92 (Matheus Pimenta)
  • chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 de0becd (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 46e5264 (dependabot[bot])
  • fix(release): fix test compilation error e751a70 (Evans Mungai)
  • Suppress SC2154 without changing behavior 9125b84 (Sarfraj Khan)
  • chore(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 0e0c02e (dependabot[bot])
  • Lint sync-repo.sh with ShellCheck d4a2787 (sarfraj89)
  • chore: move Evans Mungai from triage to maintainers fd090cc (Evans Mungai)
  • Replace reflect.Ptr with reflect.Pointer 2d6d9c0 (Mads Jensen)
  • fix: typo in the function names 138f730 (Gergely Brautigam)
  • Add documentation for --api-versions flag in template command c7cc77b (majiayu000)
  • Fixing failing tests for cli-tools update fe1c749 (Matt Farina)
  • chore(deps): bump github.com/fluxcd/cli-utils 5e82698 (dependabot[bot])
  • Replace deprecated NewSimpleClientset a15db7f (George Jenkins)
  • docs(README): add mise alternate installation documentation 04198dc (jylenhof)
  • enable exhaustive linter 9a898af (Brenden Ehlers)
  • fix: add default casess to switch statements 1c119bc (Brenden Ehlers)
  • build: set kube version via debug.BuildInfo c6d9a5b (Branch Vincent)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.10.1 to 1.11.0 97cde79 (dependabot[bot])
  • chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 9123143 (dependabot[bot])
  • doc: update based on review suggestion 55a4aed (Deepak Chethan)
  • test(statuswait): fix Copilot code review suggestion for goroutine in tests d6b35ce (Mohsen Mottaghi)
  • test(statuswait): add more tests suggested by Copilot code review a1543d5 (Mohsen Mottaghi)
  • test(statuswait): add some tests for statuswait dd44f4e (Mohsen Mottaghi)
  • fix: use namespace-scoped watching to avoid cluster-wide LIST permissions 3dd54ed (Mohsen Mottaghi)
  • fix(doc): Update default wait strategy f92ae18 (Deepak)
  • Update to use slog 9772037 (tison)
  • Fix TestCliPluginExitCode 3c6557d (tison)
  • Check plugin name is not used 5196b84 (tison)
  • chore(deps): bump github.com/fluxcd/cli-utils 364a7aa (dependabot[bot])
  • Fix TestConcurrencyDownloadIndex typo 592815e (George Jenkins)
  • Use errors.Is to check for io.EOF and gzip.ErrHeader a490bb3 (Mads Jensen)
  • chore(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 09ae0d4 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 1f8e84d (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 e9a0510 (dependabot[bot])
  • chore: fix some comments to improve readability 858cf31 (wangjingcun)
  • chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 7fb1728 (dependabot[bot])
  • feat: move TerryHowe triage ...
Read more

Contributors

scottrigby
Loading

Helm v3.20.0

21 Jan 23:27
@scottrigby scottrigby
v3.20.0
This tag was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.
b2e4314
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v3.20.0

Helm v3.20.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • SDK: bump k8s API versions to v0.35.0
  • v3 backport: Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #12564
  • v3 backport: Bump Go version to v1.25

Installation and Upgrading

Download Helm v3.20.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.1 and 3.20.1 are the next patch releases, scheduled for March 11, 2026
  • 4.2.0 and 3.21.0 are the next minor releases, scheduled for May 13, 2026

Changelog

  • bump version to v3.20 f6e17f6 (Scott Rigby)
  • chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 4f5a655 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 65c504a (dependabot[bot])
  • chore(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 f3b8af4 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 89c2c61 (dependabot[bot])
  • [dev-v3] Replace deprecated NewSimpleClientset 526076e (George Jenkins)
  • [dev-v3] Bump Go v1.25, golangci-lint v2 0ae8e4f (George Jenkins)
  • chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 e0d2595 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.29 to 1.7.30 858acb1 (dependabot[bot])
  • fix(rollback): errors.Is instead of string comp 0cd9a60 (Hidde Beydals)
  • fix(uninstall): supersede deployed releases 8bb0b37 (Hidde Beydals)
  • Use latest patch release of Go in releases 930ba6f (Matt Farina)
  • chore(deps): bump the k8s-io group with 7 updates 582211c (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 585c25c (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 6f17d46 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 46ff427 (dependabot[bot])
  • chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 28b813a (dependabot[bot])
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.8.0 to 1.8.1 5dde5d6 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 362900b (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin ec61de5 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates a490607 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.30.0 to 0.31.0 8509bcc (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 d495a94 (dependabot[bot])
  • Remove dev-v3 helm-latest-version publish 01dc6cc (George Jenkins)
  • chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 6647f84 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 b548118 (dependabot[bot])
  • Revert "pkg/registry: Login option for passing TLS config in memory" 6a67b55 (Scott Rigby)
  • chore(deps): bump github.com/cyphar/filepath-securejoin 6d4f8c0 (dependabot[bot])
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 3f0da15 (Benoit Tigeot)
  • Fix helm pull untar dir check with repo urls e5e101c (Luna Stadler)
  • chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 6aae923 (dependabot[bot])
  • chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 1900c6a (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.29.0 to 0.30.0 43e9297 (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin d347e2b (dependabot[bot])
  • [backport] fix: get-helm-3 script use helm3-latest-version bd337b4 (George Jenkins)
  • pkg/registry: Login option for passing TLS config in memory b80959f (Matheus Pimenta)
  • chore(deps): bump the k8s-io group with 7 updates 1ac9d34 (dependabot[bot])
  • Fix deprecation warning 9a366b4 (Benoit Tigeot)
  • chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 0c5a17e (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.34.0 to 0.35.0 b999021 (dependabot[bot])
  • Avoid "panic: interface conversion: interface {} is nil" 2fe49f9 (Benoit Tigeot)
  • bump version to v3.19.0 c3610ab (Scott Rigby)
  • chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 73b449f (dependabot[bot])
  • fix: set repo authorizer in registry.Client.Resolve() ffbc537 (Eric Stroczynski)
  • fix null merge f0b699e (Ben Foster)
  • Add timeout flag to repo add and update flags 79a9cc5 (Reinhard Nägele)

Contributors

scottrigby
Loading

Helm v4.0.5

14 Jan 23:46
@scottrigby scottrigby
v4.0.5
This tag was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.
1b6053d
This commit was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v4.0.5

Helm v4.0.5 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed bug where helm uninstall with --keep-history did not suspend previous deployed releases #12556
  • Fixed rollback error when a manifest is removed in a failed upgrade #13437
  • Fixed check to ensure CLI plugin does not load with the same name as an existing Helm command
  • Fixed helm test --logs failure with hook-delete-policy "hook-failed" or "hook-succeed" #9098
  • Fixed a bug where empty dependency lists were incorrectly treated as present
  • Fixed a bug where the watch library did not only watch namespaces associated with the objects
  • Fixed regression in downloader plugins environment variables #31612
  • Fixed bug where --server-side flag is not respected with helm upgrade --install #31627
  • For SDK users: exposed KUBECONFIG to env

Installation and Upgrading

Download Helm v4.0.5. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.0 and 3.20.0 is the next minor releases and will be on January 21, 2026
  • 4.1.1 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • fix(upgrade): pass --server-side flag to install when using upgrade --install 1b6053d (Evans Mungai)
  • fix(cli): handle nil config in EnvSettings.Namespace() 1e3ee1d (Zadkiel AHARONIAN)
  • fix(getter): pass settings environment variables 31bd995 (Zadkiel AHARONIAN)
  • test(statuswait): fix Copilot code review suggestion for goroutine in tests 41a6b36 (Mohsen Mottaghi)
  • test(statuswait): add more tests suggested by Copilot code review 2a2e6f7 (Mohsen Mottaghi)
  • test(statuswait): add some tests for statuswait 3818c02 (Mohsen Mottaghi)
  • fix: use namespace-scoped watching to avoid cluster-wide LIST permissions 66cab24 (Mohsen Mottaghi)
  • Use length check for MetaDependencies instead of nil comparison abf2007 (Calvin Bui)
  • Deal with golint warning with private executeShutdownFunc 4b3de18 (Benoit Tigeot)
  • Code review 3212770 (Benoit Tigeot)
  • Fix linting issue 417aae9 (Benoit Tigeot)
  • Update pkg/action/hooks.go 6c838b4 (Michelle Fernandez Bieber)
  • added check for nil shutdown c5d87f2 (Michelle Fernandez Bieber)
  • cleaned up empty line 53175b7 (Michelle Fernandez Bieber)
  • updated comment and made defer of shutdown function return errors as before and not the possible shutdown error d2df1ab (Michelle Fernandez Bieber)
  • added shutdown hook that is executed after the logs have been retrieved 5b223de (Michelle Fernandez Bieber)
  • Fix TestCliPluginExitCode e845b68 (tison)
  • Check plugin name is not used 30bfd57 (tison)
  • Fix rollback for missing resources 0fd2c41 (Feruzjon Muyassarov)
  • fix: assign KUBECONFIG environment variable value to env.Kubeconfig b456e27 (LinPr)
  • fix(rollback): errors.Is instead of string comp e2021f8 (Hidde Beydals)
  • fix(uninstall): supersede deployed releases af7c153 (Hidde Beydals)

Contributors

scottrigby
Loading

Helm v3.19.5

15 Jan 00:30
@scottrigby scottrigby
v3.19.5
This tag was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.
4a19a5b
This commit was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v3.19.5

Helm v3.19.5 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed bug where removing subchart value via override resulted in warning #31118
  • Fixed bug where helm uninstall with --keep-history did not suspend previous deployed releases #12556

Installation and Upgrading

Download Helm v3.19.5. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.0 and 3.20.0 is the next minor releases and will be on January 21, 2026
  • 4.1.1 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • fix(rollback): errors.Is instead of string comp 4a19a5b (Hidde Beydals)
  • fix(uninstall): supersede deployed releases 7a00235 (Hidde Beydals)
  • fix null merge 578564e (Ben Foster)

Contributors

scottrigby
Loading

Helm v4.1.0-rc.1

12 Jan 19:54
@scottrigby scottrigby
v4.1.0-rc.1
This tag was signed with the committer’s verified signature.
scottrigby Scott Rigby
GPG key ID: C7C6FBB5B91C1155
Verified
Learn about vigilant mode.
4553a0a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
Helm v4.1.0-rc.1 Pre-release
Pre-release

Helm v4.1.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v4.1.0 is officially released.

The official changelog will come out with the v4.1.0 release. For now, you can see the commit changes from v4.0.4 here.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.1.0-rc.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

Contributors

scottrigby
Loading
0