Skip to content

fix(deps): update module helm.sh/helm/v3 to v4#281

Open
botty-mcbottington[bot] wants to merge 1 commit intomainfrom
renovate/helm.sh-helm-v3-4.x
Open

fix(deps): update module helm.sh/helm/v3 to v4#281
botty-mcbottington[bot] wants to merge 1 commit intomainfrom
renovate/helm.sh-helm-v3-4.x

Conversation

@botty-mcbottington
Copy link
Copy Markdown
Contributor

@botty-mcbottington botty-mcbottington bot commented Nov 25, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
helm.sh/helm/v3 v3.20.0 → v4.1.4 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

helm/helm (helm.sh/helm/v3)

v4.1.4: Helm v4.1.4

Compare Source

Helm v4.1.4 is a security fix patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Security fixes

  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment
  • GHSA-q5jf-9vfq-h4h7 Plugin verification fails open when .prov is missing, allowing unsigned plugin install
  • GHSA-vmx8-mqv2-9gmg Path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

A big thank you to the reporters of these issues (@​maru1009, @​1seal).

Installation and Upgrading

Download Helm v4.1.4. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026

Changelog

  • fix: Plugin missing provenance bypass 05fa379 (George Jenkins)
  • fix: Chart dot-name path bug 4e7994d (George Jenkins)
  • ignore error plugin loads (cli, getter) 2581943 (George Jenkins)
  • fix: Plugin version path traversal 36c8539 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow c61e086 (Terry Howe)

v4.1.3: Helm v4.1.3

Compare Source

Helm v4.1.3 is a patch release. Users are encouraged to upgrade for the best experience.

Note there was no 4.1.2 release due to a release automation issue.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed a bug where --dry-run=server was not respecting generateName #​31563
  • Fixed a bug where empty CRD resources caused a crash. Now it prints an error #​31578
  • Fixed a bug where OCI references with tag+digest failed with "invalid byte" error #​31601
  • Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key #​31644
  • Fixed a regression since Helm 3.18.0 where Pulling charts from OCI repositories that use an index to store both Container Images and Helm Charts under the same tag failed #​31776
  • Fixed a Helm 4 regression where gotemplate white space trimming directly after YAML doc separators, when present after postrendering, caused YAML file corruption #​31868
  • Fixed a bug where FailedStatus is treated as a terminal state, causing upgrades to fail prematurely when cluster autoscalers needed time to provision nodes, or when pods were being deleted during rolling updates #​31897
  • Fixed broken backwards compatibility for deprecated --atomic flag on install command #​31901
  • SDK: Fixed a Windows 'Access Deined' error if multiple processes try to download the same chart version concurrently #​31128
  • SDK: Fixed a bug where users did not receive any logs from the waiter, causing confusion as several minutes could pass with no user feedback #​31717
  • SDK: Fixed a bug where server-side apply defaults did not always match the CLI defaults #​31732
  • SDK: Fixed a Go import issue when downstream tooling attempted to vendor helm.sh/helm/v4/pkg/kube #​31852

Installation and Upgrading

Download Helm v4.1.3. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

Changelog

  • chore(defaults): server-side apply SDK defaults should always match the CLI defaults c94d381 (Matheus Pimenta)
  • whitespace b36d660 (Austin Abro)
  • use logger with waiter 04a91af (Austin Abro)
  • Remove refactorring changes from coalesce_test.go c3c57db (Evans Mungai)
  • Fix import d47cb2b (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go 790bf92 (Evans Mungai)
  • Fix lint warning f7cec12 (Evans Mungai)
  • Preserve nil values in chart already d94a5c9 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map 8c5fe4e (Evans Mungai)
  • chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 217db28 (dependabot[bot])
  • Restored --atomic flag on install command 7cb43e0 (Travis Leeden)
  • fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 5b26d4f (Terry Howe)
  • fix: bump fluxcd/cli-utils to v0.37.2-flux.1 360c131 (Terry Howe)
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 69a0a92 (dependabot[bot])
  • fix: insert newline after doc separators glued to content by template trimming b868e6a (Matheus Pimenta)
  • fix: correct import comment in statuswait.go from v3 to v4 dbfbea9 (rohansood10)
  • chore(deps): bump the k8s-io group with 7 updates 099192c (dependabot[bot])
  • add image index test 4967ead (Pedro Tôrres)
  • fix pulling charts from OCI indices 2fe6b10 (Pedro Tôrres)
  • fix: handle OCI digest algorithm prefix in chart downloader (#​31601) e3e2d01 (Evans Mungai)
  • fix(install): check nil for restClientGetter and fix tests c15e711 (Manuel Alonso)
  • chore(refactor): better testing and functionality for installing crd df82e68 (Manuel Alonso)
  • fix(test): fix tests and check nil for restclient 4b896ca (Manuel Alonso)
  • fix(test): merge fix correctly 3fc7939 (Manuel Alonso Gonzalez)
  • fix(install): add more tests and check nil file data 6017d2b (Manuel Alonso)
  • fix(test): no check empty resources f451967 (Manuel Alonso)
  • fix(install): check lenght and file nil, add tests fdadff5 (Manuel Alonso)
  • fix(action): crd resources can be empty 10d6067 (Manuel Alonso)
  • fix: casing issue fixed 0fec40f (Mujib Ahasan)
  • fix: error handled correctly 2637498 (Mujib Ahasan)
  • fix: doc string added 961d7d7 (Mujib Ahasan)
  • update: test coverage added for helper function validateNameAndGenerateName 29e4506 (Mujib Ahasan)
  • update: helper function added for the business logic d55b0b9 (Mujib Ahasan)
  • generateName is also considered in logic c1c090e (Mujib Ahasan)
  • update: business logic respected for skipping object missing name 5e09313 (Mujib Ahasan)
  • fixed: --dry-run=server now respect generateName f289d16 (Mujib Ahasan)
  • fix(downloader): safely handle concurrent file writes on Windows bfac739 (Orgad Shaneh)

v4.1.2

Compare Source

v4.1.1: Helm v4.1.1

Compare Source

Helm v4.1.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix: fine-grained context options for waiting #​31735
  • fix: kstatus do not wait forever on failed resources #​31730
  • fix: Revert "Consider GroupVersionKind when matching resources" #​31772
  • fix: handle nil elements in slice copying #​31751

Installation and Upgrading

Download Helm v4.1.1. The common platform binaries are here:

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.2 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • feat(kstatus): fine-grained context options for waiting 5caf004 (Matheus Pimenta)
  • bugfix(kstatus): do not wait forever on failed resources 2519a88 (Matheus Pimenta)
  • Revert "Consider GroupVersionKind when matching resources" b2c487c (Matheus Pimenta)
  • fix(copystructure): handle nil elements in slice copying 261387a (Philipp Born)

v4.1.0: Helm v4.1.0

Compare Source

Helm v4.1.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Feature: added chart name to dependency logs, namespace to resource waiting logs, and confirmation message when all resources are ready #​31530
  • Feature: improved plugin name validation error messages and field name detection #​31491
  • Feature: improved the --wait flag by allowing explicit strategy selection (including explicit --wait=hookOnly) and preventing SDK timeout errors when timeout is not specified #​31421
  • Feature: allow concurrent dependency build with atomic file write #​30984
  • Feature: added a --no-headers flag to the 'helm repo list' command, allowing users to suppress table headers in the output. Useful for scripting and automation #​31448
  • SDK feature: added a LoadArchive to common loader #​31462
  • SDK feature: introduced support for custom kstatus readers #​31706
  • Fixed bug where a plugin name could already be used by another command #​31427
  • Fixed bug where --server-side flag was not passed to install when using upgrade --install #​31635
  • Fixed bug where HELM_ environment variables were not passed to plugins. this fixes a regression which was blocking some getter plugins #​31613
  • Fixed bug where Helm test --logs failed with hook-delete-policy "hook-failed" or "hook-succeed" #​31579
  • Fixed kube client logging issue #​31560
  • Fixed regression where vendor-specific suffixes were stripped from .Capabilities.KubeVersion.GitVersion, breaking charts that detect managed Kubernetes platforms #​31528
  • Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #​12564
  • SDK: bump k8s API versions to v0.35.0
  • docs: updated helm template help text to document --api-versions #​31683
  • docs: fixed documentation about default wait strategy

Installation and Upgrading

Download Helm v4.1.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.1 and 3.20.1 are the next patch releases, scheduled for March 11, 2026
  • 4.2.0 and 3.21.0 are the next minor releases, scheduled for May 13, 2026

Changelog

  • Update pkg/kube/statuswait.go f46f1ce (Evans Mungai)
  • pkg/kube: introduce support for custom kstatus readers 59ece92 (Matheus Pimenta)
  • chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 de0becd (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 46e5264 (dependabot[bot])
  • fix(release): fix test compilation error e751a70 (Evans Mungai)
  • Suppress SC2154 without changing behavior 9125b84 (Sarfraj Khan)
  • chore(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 0e0c02e (dependabot[bot])
  • Lint sync-repo.sh with ShellCheck d4a2787 (sarfraj89)
  • chore: move Evans Mungai from triage to maintainers fd090cc (Evans Mungai)
  • Replace reflect.Ptr with reflect.Pointer 2d6d9c0 (Mads Jensen)
  • fix: typo in the function names 138f730 (Gergely Brautigam)
  • Add documentation for --api-versions flag in template command c7cc77b (majiayu000)
  • Fixing failing tests for cli-tools update fe1c749 (Matt Farina)
  • chore(deps): bump github.com/fluxcd/cli-utils 5e82698 (dependabot[bot])
  • Replace deprecated NewSimpleClientset a15db7f (George Jenkins)
  • docs(README): add mise alternate installation documentation 04198dc (jylenhof)
  • enable exhaustive linter 9a898af (Brenden Ehlers)
  • fix: add default casess to switch statements 1c119bc (Brenden Ehlers)
  • build: set kube version via debug.BuildInfo c6d9a5b (Branch Vincent)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.10.1 to 1.11.0 97cde79 (dependabot[bot])
  • chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 9123143 (dependabot[bot])
  • doc: update based on review suggestion 55a4aed (Deepak Chethan)
  • test(statuswait): fix Copilot code review suggestion for goroutine in tests d6b35ce (Mohsen Mottaghi)
  • test(statuswait): add more tests suggested by Copilot code review a1543d5 (Mohsen Mottaghi)
  • test(statuswait): add some tests for statuswait dd44f4e (Mohsen Mottaghi)
  • fix: use namespace-scoped watching to avoid cluster-wide LIST permissions 3dd54ed (Mohsen Mottaghi)
  • fix(doc): Update default wait strategy f92ae18 (Deepak)
  • Update to use slog 9772037 (tison)
  • Fix TestCliPluginExitCode 3c6557d (tison)
  • Check plugin name is not used 5196b84 (tison)
  • chore(deps): bump github.com/fluxcd/cli-utils 364a7aa (dependabot[bot])
  • Fix TestConcurrencyDownloadIndex typo 592815e (George Jenkins)
  • Use errors.Is to check for io.EOF and gzip.ErrHeader a490bb3 (Mads Jensen)
  • chore(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 09ae0d4 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 1f8e84d (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 e9a0510 (dependabot[bot])
  • chore: fix some comments to improve readability 858cf31 (wangjingcun)
  • chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 7fb1728 (dependabot[bot])
  • feat: move TerryHowe triage to maintainers e900a25 (Terry Howe)
  • Use latest patch release of Go in releases 8f636b5 (Matt Farina)
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.8.0 to 1.8.1 ea52f87 (dependabot[bot])
  • fix(upgrade): pass --server-side flag to install when using upgrade --install 2dc581d (Evans Mungai)
  • chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 a9bbffb (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 d195cfa (dependabot[bot])
  • Run the vulnerability check on PR that change the file 24a8258 (Matt Farina)
  • Fix govulncheck in CI bc9462f (Matt Farina)
  • Update the govulncheck.yml to run on change b825a18 (Matt Farina)
  • Enable the sloglint linter a18e59e (Mads Jensen)
  • fix(cli): handle nil config in EnvSettings.Namespace() 8534663 (Zadkiel AHARONIAN)
  • fix(getter): pass settings environment variables 119341d (Zadkiel AHARONIAN)
  • fixes comment in install.go a109ac2 (Stephanie Hohenberg)
  • chore(deps): bump actions/stale from 10.1.0 to 10.1.1 581ab1a (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 e62bf7f (dependabot[bot])
  • fixes tests after merge 2f598ff (Stephanie Hohenberg)
  • fixes lint issue bb9356e (Stephanie Hohenberg)
  • updates tests after rebase from master 8cf4ad7 (Stephanie Hohenberg)
  • Add tests to action package to improve coverage 31131cf (Stephanie Hohenberg)
  • chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 e6b2068 (dependabot[bot])
  • Inform we use a different golangci-lint version than the CI faa8912 (Benoit Tigeot)
  • Deal with golint warning with private executeShutdownFunc 45c5f3a (Benoit Tigeot)
  • Use length check for MetaDependencies instead of nil comparison b33d4ae (Calvin Bui)
  • Code review 70fc5f9 (Benoit Tigeot)
  • Fix linting issue 9f1c8a2 (Benoit Tigeot)
  • Update pkg/action/hooks.go 6bb5bcc (Michelle Fernandez Bieber)
  • added check for nil shutdown d930144 (Michelle Fernandez Bieber)
  • cleaned up empty line 7a61ebf (Michelle Fernandez Bieber)
  • updated comment and made defer of shutdown function return errors as before and not the possible shutdown error 1071477 (Michelle Fernandez Bieber)
  • added shutdown hook that is executed after the logs have been retrieved 7a55758 (Michelle Fernandez Bieber)
  • chore: fix typo in pkg/downloader/chart_downloader.go e71a29c (megha1906)
  • Bump required go version (go.mod version) b859163 (George Jenkins)
  • Use modernize to use newer Golang features. 6cceead (Mads Jensen)
  • Remove two redundant if-checks. 380abe2 (Mads Jensen)
  • Fix kube client logging 936cd32 (Matt Farina)
  • chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 cb35947 (dependabot[bot])
  • chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 4fddc64 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0 b87f2da (dependabot[bot])
  • fix: prevent segmentation violation on empty yaml in multidoc 81d244c (Benoit Tigeot)
  • fix: prevent reporting fallback on version when none specified 40e22de (Benoit Tigeot)
  • chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 c2405ce (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin 28baa97 (dependabot[bot])
  • bump version to 4.1 63e060f (Matt Farina)
  • fix: add missing context to debug logs 2dc5864 (shuv0id)
  • fix: preserve vendor suffixes in KubeVersion.GitVersion ce273ee (Benoit Tigeot)
  • chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 f6ceae9 (dependabot[bot])
  • fixup test f8a49f1 (George Jenkins)
  • logs a9cdc78 (George Jenkins)
  • fix b1a9760 (George Jenkins)
  • chore: add warning for registry login with namespace 5f3c617 (Terry Howe)
  • style: linting 71591ee (Benoit Tigeot)
  • test: split tests between valid and invalid b296cbe (Benoit Tigeot)
  • test: convert tests to table drive tests 9b242dd (Benoit Tigeot)
  • test: refactor TestMetadataLegacyValidate to be more generic c81a09b (Benoit Tigeot)
  • update tests 8c87024 (yxxhero)
  • fix: Use server-side apply for object create during update 18616e6 (George Jenkins)
  • Copy adopted resource info 855ebb6 (George Jenkins)
  • Refactor environment variable expansion in PrepareCommands and update tests 2d49f0c (yxxhero)
  • fix: correct LDFLAGS path for default Kubernetes version b6a8c65 (Benoit Tigeot)
  • fix: improve plugin name validation err messages early via unmarshalling acf331a (Benoit Tigeot)
  • fix: Make invalid name error message more similar and move tests 9e1e3d2 (Benoit Tigeot)
  • fix: focus only on plugin name but give more info about what we get cf077ce (Benoit Tigeot)
  • Make validation error similar and explicit for both metadatas f4b139a (Benoit Tigeot)
  • fix: improve plugin name validation error messages c04e18e (Benoit Tigeot)
  • Fix syntax errors in the document faa0adc (Fish-pro)
  • chore(deps): bump the k8s-io group with 7 updates c81e267 (dependabot[bot])
  • docs: Fix LFX Health Score badge URL in README.md 40856bf (Michael Crenshaw)
  • chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 fb82e0e (dependabot[bot])
  • chore(deps): bump github.com/tetratelabs/wazero from 1.9.0 to 1.10.1 72a84fb (dependabot[bot])
  • Publish Helm v4 -> helm-latest-version e4353dc (George Jenkins)
  • Adding script to download Helm v4 5ae8586 (Matt Farina)
  • chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 6cd0bf8 (dependabot[bot])
  • refactor: use strings.Builder to improve performance d8c4040 (promalert)
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.20.1 to 0.21.0 0089a07 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 7a85358 (dependabot[bot])
  • Update pkg/cmd/flags.go 02312a1 (Benoit Tigeot)
  • Error strategy list match help 277c140 (Benoit Tigeot)
  • Prevent surprising failure with SDK when timeout is not set 5f6fa43 (Benoit Tigeot)
  • Do not change the default waiting strategy when --wait is not set 52a2828 (Benoit Tigeot)
  • Provide more help for SDK user when setting up WaitStrategy 1112865 (Benoit Tigeot)
  • Avoid confusion between --wait (watcher) and no --wait (hookOnly) 8535e9f (Benoit Tigeot)
  • The default is not HookOnlyStrategy but WaitStrategy 1836f37 (Benoit Tigeot)
  • Make wait strategy selection more obvious a5e110f (Benoit Tigeot)
  • Update pkg/cmd/flags.go e8b0cff (Benoit Tigeot)
  • Increase documentation of --wait flag 95e1ee1 (Benoit Tigeot)
  • While testing SDK features for v4. I was surprised with the error: 5cbd9b3 (Benoit Tigeot)
  • fix: do not run release workflow on forks d93ef03 (Terry Howe)
  • Convert pkg/cmd/load_plugins.go to slog 6de83c5 (saimanojk1)
  • Rename copilot-instructions.md to AGENTS.md caff03f (Yarden Shoham)
  • fix(rollback): errors.Is instead of string comp d158708 (Hidde Beydals)
  • fix(uninstall): supersede deployed releases 2f1ecc7 (Hidde Beydals)
  • for remaining local variable case inconsistency 4576a81 (tison)
  • Properly test error messages on pull command's test ed6cf0e (Benoit Tigeot)
  • Adding a LoadArchive to common loader 0f5eda7 (Matt Farina)
  • for all other similar cases 90d0191 (tison)
  • chore(deps): bump github.com/cyphar/filepath-securejoin 21af58b (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 60aaa8a (dependabot[bot])
  • chore: increase logging package test coverage 558cea7 (Evans Mungai)
  • feat(repo): add --no-headers option to 'helm repo list' 6ef79bb (Paul Van Laer)
  • chore: fix typo of public field 0d6de28 (tison)
  • rename interface{} to any ffb3940 (Terry Howe)
  • test: protect unknown hook delete policies 269a32a (Marcin Owsiany)
  • chore: replace github.com/mitchellh/copystructure bee9c1a (Terry Howe)
  • fix: Fix Helm v4 release distribtion/get-helm-3 script d5d1ea3 (George Jenkins)
  • fix test ae4af69 (Artem Vdovin)
  • Make test scripts run without /bin/bash 6181e0a (Tom Wieczorek)
  • Ignore duplicated URN in logs 8025a39 (Benoit Tigeot)
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 03bb62f (Benoit Tigeot)
  • chore: delete unused var in installer.go 8068578 (zyfy29)
  • fix: assign KUBECONFIG environment variable value to env.Kubeconfig b25fa86 (LinPr)
  • add concurrency test on write & load index file 118d0eb (Artem Vdovin)
  • update writing index files to writeAtomicFile 314bd19 (Artem Vdovin)
  • fix index concurrency 351bb78 (Artem Vdovin)

v4.0.5: Helm v4.0.5

Compare Source

Helm v4.0.5 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed bug where helm uninstall with --keep-history did not suspend previous deployed releases #​12556
  • Fixed rollback error when a manifest is removed in a failed upgrade #​13437
  • Fixed check to ensure CLI plugin does not load with the same name as an existing Helm command
  • Fixed helm test --logs failure with hook-delete-policy "hook-failed" or "hook-succeed" #​9098
  • Fixed a bug where empty dependency li

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@botty-mcbottington
Copy link
Copy Markdown
Contributor Author

botty-mcbottington bot commented Nov 25, 2025 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go mod tidy
go: downloading helm.sh/helm/v4 v4.1.4
go: downloading gotest.tools/v3 v3.5.2
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/fluxcd/cli-utils v0.37.2-flux.1
go: downloading github.com/evanphx/json-patch/v5 v5.9.11
go: downloading sigs.k8s.io/controller-runtime v0.23.1
go: downloading github.com/distribution/distribution/v3 v3.0.0
go: downloading github.com/foxcpp/go-mockdns v1.2.0
go: downloading github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399
go: downloading github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5
go: downloading github.com/dlclark/regexp2 v1.11.5
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/go-test/deep v1.0.8
go: downloading github.com/ugorji/go/codec v1.2.11
go: downloading github.com/DATA-DOG/go-sqlmock v1.5.2
go: downloading github.com/onsi/gomega v1.39.0
go: downloading go.uber.org/goleak v1.3.0
go: downloading github.com/onsi/ginkgo/v2 v2.27.2
go: downloading github.com/redis/go-redis/v9 v9.7.3
go: downloading github.com/bshuster-repo/logrus-logstash-hook v1.0.0
go: downloading github.com/gorilla/handlers v1.5.2
go: downloading github.com/creack/pty v1.1.18
go: downloading go.opentelemetry.io/otel/sdk/metric v1.40.0
go: downloading go.opentelemetry.io/otel/sdk v1.40.0
go: downloading github.com/elazarl/goproxy v1.7.2
go: downloading github.com/miekg/dns v1.1.57
go: downloading github.com/frankban/quicktest v1.14.6
go: downloading github.com/extism/go-sdk v1.7.1
go: downloading github.com/tetratelabs/wazero v1.11.0
go: downloading github.com/go-sql-driver/mysql v1.8.1
go: downloading github.com/mattn/go-sqlite3 v1.14.28
go: downloading github.com/stretchr/objx v0.5.2
go: downloading github.com/go-logr/zapr v1.3.0
go: downloading go.uber.org/zap v1.27.0
go: downloading github.com/redis/go-redis/extra/redisotel/v9 v9.0.5
go: downloading github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c
go: downloading github.com/coreos/go-systemd/v22 v22.5.0
go: downloading go.opentelemetry.io/contrib/exporters/autoexport v0.65.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.40.0
go: downloading github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f
go: downloading github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5
go: downloading github.com/gliderlabs/ssh v0.3.8
go: downloading golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028
go: downloading github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7
go: downloading filippo.io/edwards25519 v1.1.0
go: downloading github.com/poy/onpar v1.1.2
go: downloading github.com/dylibso/observe-sdk/go v0.0.0-20240819160327-2d926c5d788a
go: downloading github.com/hashicorp/golang-lru/arc/v2 v2.0.5
go: downloading github.com/redis/go-redis/extra/rediscmd/v9 v9.0.5
go: downloading go.opentelemetry.io/contrib/bridges/prometheus v0.65.0
go: downloading github.com/hashicorp/golang-lru v0.5.4
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.16.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.16.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.40.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.40.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0
go: downloading go.opentelemetry.io/otel/exporters/prometheus v0.62.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.16.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.40.0
go: downloading go.opentelemetry.io/otel/sdk/log v0.16.0
go: downloading github.com/klauspost/pgzip v1.2.6
go: downloading gonum.org/v1/gonum v0.16.0
go: downloading github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be
go: downloading github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
go: downloading go.etcd.io/etcd/client/pkg/v3 v3.6.5
go: downloading go.etcd.io/etcd/client/v3 v3.6.5
go: downloading github.com/tetratelabs/wabin v0.0.0-20230304001439-f6f874872834
go: downloading github.com/ianlancetaylor/demangle v0.0.0-20240805132620-81f5be970eca
go: downloading go.opentelemetry.io/proto/otlp v1.9.0
go: downloading github.com/go-task/slim-sprig/v3 v3.0.0
go: downloading github.com/hashicorp/golang-lru/v2 v2.0.5
go: downloading github.com/prometheus/otlptranslator v1.0.0
go: downloading github.com/vbatts/tar-split v0.12.1
go: downloading go.opentelemetry.io/otel/log v0.16.0
go: downloading github.com/google/martian/v3 v3.3.2
go: downloading github.com/containerd/continuity v0.4.4
go: downloading github.com/Microsoft/hcsshim v0.13.0
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2
go: downloading go.etcd.io/etcd/api/v3 v3.6.5
go: downloading github.com/coreos/go-semver v0.3.1
go: downloading github.com/google/pprof v0.0.0-20250820193118-f64d9cf942d6
go: downloading github.com/cenkalti/backoff/v5 v5.0.3
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/envoyproxy/go-control-plane/envoy v1.35.0
go: downloading github.com/containerd/cgroups/v3 v3.0.5
go: downloading github.com/containerd/cgroups v1.1.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/containerd/typeurl/v2 v2.2.3
go: downloading github.com/containerd/typeurl v1.0.2
go: downloading github.com/envoyproxy/go-control-plane v0.13.5-0.20251024222203-75eaa193e329
go: downloading github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f
go: downloading github.com/envoyproxy/protoc-gen-validate v1.2.1
go: downloading github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10
go: downloading github.com/onsi/ginkgo/v2 v2.28.1
go: downloading github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
go: finding module for package helm.sh/helm/v4/pkg/chartutil
go: downloading helm.sh/helm v2.17.0+incompatible
go: github.com/macropower/kclipper/pkg/helm imports
	helm.sh/helm/v4/pkg/chartutil: module helm.sh/helm/v4@latest found (v4.1.4), but does not contain package helm.sh/helm/v4/pkg/chartutil

@codecov
Copy link
Copy Markdown

codecov bot commented Nov 25, 2025 •
edited
Loading

❌ 11 Tests Failed:

Tests completed Failed Passed Skipped
219 11 208 0
View the top 3 failed test(s) by shortest run time 
::TestMain
Stack Traces | 0s run time 
FAIL	github..../kclipper/pkg/helmtest [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../cmd/kclipper/commands [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../pkg/kclplugin/helm [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../kclipper/cmd/gen [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../kclipper/pkg/helm [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../kclipper/pkg/chartcmd [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../pkg/kclmodule/kclhelm [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../kclipper/pkg/jsonschema [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../pkg/kclmodule/kclchart [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../kclipper/cmd/kclipper [setup failed]

::TestMain
Stack Traces | 0s run time 
FAIL	github..../kclipper/pkg/charttui [setup failed]

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch 3 times, most recently from 5f385f6 to 3f2b3b1 Compare December 13, 2025 06:13
@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch 4 times, most recently from c88b4dd to 4ea8769 Compare December 24, 2025 00:36
@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch 2 times, most recently from 014d230 to 240fa91 Compare January 15, 2026 06:19
@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch 2 times, most recently from 4725b58 to 23b2a63 Compare January 22, 2026 18:14
@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch from 23b2a63 to dc1a62b Compare February 9, 2026 18:29
@MacroPower MacroPower force-pushed the main branch 6 times, most recently from fe4d7a6 to 5292197 Compare February 14, 2026 04:41
@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch 2 times, most recently from e194e5f to 706b5c9 Compare February 14, 2026 06:22
@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch from 706b5c9 to 82e43fa Compare March 12, 2026 00:40
@botty-mcbottington botty-mcbottington bot force-pushed the renovate/helm.sh-helm-v3-4.x branch from 82e43fa to 97e46f9 Compare April 9, 2026 06:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants