Helm 4.2.1 → 4.3.1
5 releases · 7 breaking changes · 0 security fixes · 0 advisories fixed
0security7breaking0deprecated20feature50fix
Breaking changes
- breaking fix (internal/plugin): remove zero-width spaces from plugin name comment in 4.3.0
- breaking Remove deprecated internal/chart/v3/ code (#32365) 4dfbaa40c6cd67e1df345889113a7879ec66136c (George Jenkins) in 4.3.0
- breaking Removed extra space in rollback-with-description.txt b177a8e9060720e91c402cdba2224c6d58789fa3 (MrJack) in 4.3.0
- breaking remove legacy import comments from remaining packages (#31933) 82be04d7f2881f59b3a85483eb248417e1d18fc3 (Abhay Chaurasiya) in 4.3.0
- breaking remove freeport dependency fc743b2a1be47c69cc3bf58e0fdc023f8844f866 (kimsungmin1) in 4.3.0
- breaking internal/plugin: remove zero-width spaces from plugin name comment 979e68fbbd5a932c67b756884880d7641f268632 (Aleksei Sviridkin) in 4.3.0
- breaking remove freeport dependency 9fbd190c30addb4786e4fe930a0fe98bf354116a (kimsungmin1) in 4.2.4
Security changes
None in the release notes.
Every release in between
otherJoin the discussion in Kubernetes Slack:
otherfor questions and just to hang out
fixfor discussing PRs, code, and bugs
otherHang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
otherTest, debug, and contribute charts: ArtifactHub/packages
fixfix(action): wait for CRD establishment under HookOnlyStrategy #32672 by @pujitha24
fixfix(linters): update golangci-lint to v2.14.0 #32744 by @ruslan-shaydullin
other4.3.2 and 3.22.2 are the next patch releases scheduled for November 11, 2026
other4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
otherchore(deps): bump otlploghttp and stdoutlog to v0.21.0 c0d08d0d6d9424d4a14febb5e8a3e51b0dd00dff (Terry Howe)
otherchore(deps): bump the k8s-io group across 1 directory with 7 updates 0c0146eb409bcbc1793d97d67500cdf55050a742 (dependabot[bot])
fixfix: bump golang.org/x/net to v0.61.0 (#32758) dd91731c138d76a26b3aa3ff69e6d40febe8e737 (Terry Howe)
fixfix(linters): update golangci-lint to v2.14.0 (#32744) 3a376b2917d335edcbc714c0b3770442255ec9af (Ruslan Shaydullin)
fixfix(action): wait for CRD establishment under HookOnlyStrategy (#32672) 5fed6a5e0de4669dc4436eb02db9036fe5941b46 (Pujitha Paladugu)
otherchore(deps): bump sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2 (#32726) b227bf4704ab6ce9aa2de78ba70d8d227564f0c8 (dependabot[bot])
otherchore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.1 to 0.21.2 (#32715) af79b8ebe296201b47e8f7dac9b6c8a8927086d7 (dependabot[bot])
otherchore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc ab6b245a2cdcadac70d5abbe25b0ae748df914e6 (dependabot[bot])
otherchore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (#32665) 0f206176faf573da63727dd7ddea5a11bfa98792 (dependabot[bot])
otherchore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#32664) e26e15829234121ee0c1bad535ad4ba70e8caa65 (dependabot[bot])
otherchore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace (#32663) 23ab1c558484f6e58b28029cdacce7a4938b59e3 (dependabot[bot])
otherchore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 (#32662) 8303180a5eec17dda46ac1995d65d7d40bf21b98 (dependabot[bot])
fixfor discussing PRs, code, and bugs
featurefeat: Add duration functions
featurefeat(engine): add debug logging when lookup returns empty
featurefeat: add ownership verification before deleting resources during uni…
featurefeat: honor SOURCE_DATE_EPOCH for chart archives
featurefeat(rollback): add --description flag to provide rollback reason
breakingfix (internal/plugin): remove zero-width spaces from plugin name comment
fixfix(loader): do not drop values files ending at a 4096-byte boundary
fixfix(chart): normalize StampModTimes timestamp to UTC/truncate + Chart.lock reproducibility test
fixfix(provenance): support GnuPG keybox (pubring.kbx) keyrings
fixfix(template): regression - route registry messages to stderr in template and show
featureperf: enable concurrent status computation to prevent multi-minute delays
breakingRemove deprecated internal/chart/v3/ code (#32365) 4dfbaa40c6cd67e1df345889113a7879ec66136c (George Jenkins)
fixfix(template): regression - route registry messages to stderr in template and show (#32217) 9a3c040369361678aef1ab251e83a38b455f5159 (Aaron Mark)
fixfix: correct 'doest not match' in readiness debug logs 6888b0a280bb6fbb847c85d2a473c425b6a0862d (MsfPablo)
fixfix(provenance): support GnuPG keybox (pubring.kbx) keyrings (#32281) 67d54fd8808ab47e93dad40f4238d5fe28d1efd0 (Ruslan Shaydullin)
fixfix(loader): do not drop values files ending at a 4096-byte boundary 601445e88cf1fe66b2885c793d564030aad1d707 (Dean Chen)
fixfix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#32521) a0c2f6dade5180fdb08bcc5debef56357cd586ab (Terry Howe)
fixfix(chart): normalize StampModTimes timestamp + Chart.lock test 3c3be926aaea573cf94931877e8072aefb231b60 (Ilya Kiselev)
fixfix(scripts): clarify cache-busting behavior bc0114c70841e2a05c95e53e20358fb761dbfb2e (Solomon Wakhungu)
fixfix(scripts): address cache-busting review feedback bbaf420a101379dad4f8452129cf26f2fff7e536 (Solomon Wakhungu)
featureAdded missing import 94a3315f4d699c6bb4140550d4c98b46bb4382d2 (MrJack)
fixPotential fix for pull request finding f1ede7c9c114c745da2f5c6cef8d27e1eb342498 (MrJack)
breakingRemoved extra space in rollback-with-description.txt b177a8e9060720e91c402cdba2224c6d58789fa3 (MrJack)
featurefeat(rollback): add --description flag to provide rollback reason f8180e6de473bb4b1008b76aa2ac63b8bcd104c0 (MrJack)
fixPotential fix for pull request finding a27f3a062027d8b459eed2186076fb9384b82f38 (Matthieu MOREL)
featureperf: enable concurrent status computation to prevent multi-minute delays (#32043) 3bcf965f997499c477436515e6ccf5d51ab82e5e (Zhaofeng Miao)
breakingremove legacy import comments from remaining packages (#31933) 82be04d7f2881f59b3a85483eb248417e1d18fc3 (Abhay Chaurasiya)
featurefeat: honor SOURCE_DATE_EPOCH for chart archives (#32162) ad93b7df635d032a71201206cc3490e76b83bef4 (Lohit Kolluri)
featurefeat(linters): add new revive rules for better code quality 16787d65f5091cf5c5e4f2884ef0027ada117465 (Matthieu MOREL)
breakingremove freeport dependency fc743b2a1be47c69cc3bf58e0fdc023f8844f866 (kimsungmin1)
featureadd newline in license header 319e06cda30e706db541066d5fe07249b0ed656c (kimsungmin1)
breakinginternal/plugin: remove zero-width spaces from plugin name comment 979e68fbbd5a932c67b756884880d7641f268632 (Aleksei Sviridkin)
featurefeat: report in debug the version we select with version range arg bf78b876c74ee4359a6cebb54e0b97183cdfe129 (Benoit Tigeot)
featureAdd duration functions 722dd3e3a82b06fbda60ebf24edc653e7b74e3f9 (Jorge Rocamora)
featurefeat(history): add --show-rollback flag for opt-in rollback column e889cff0896d842c7e1854729611ac520a925d0b (MrJack)
featureAdded missing pkg/cmd/testdata/output files d52b489459d51d67d9db877f169bd09273b6cd6c (MrJack)
featurefeat(history): add rollback revision column to helm history output 300f71b1ebb1b383241a1806a813c6f30a8ff382 (MrJack)
featureAdd ownership verification to uninstall action f552950b05066d4d6a9d6cf9a91c26656f4a90fc (Evans Mungai)
featurefeat: add ownership verification before deleting resources during uninstall 906f87ce1d6d7a46bc68601c1217623e40b78877 (Evans Mungai)
+237 more items in the release notesotherJoin the discussion in Kubernetes Slack:
otherfor questions and just to hang out
fixfor discussing PRs, code, and bugs
otherHang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
otherTest, debug, and contribute charts: ArtifactHub/packages
fixfix: Improve error reporting for helm template --debug with --show-only- #31185 by @kyokuping
fixfix: fetch logs from all containers in test pods- #32099 by @SebTardif
fixfix(provenance): check error return in Digest and encodeRelease- #32136 by @SebTardif
fixfix panic on repeated IsReachable calls- #32184 by @atkrad
fixfix: set [pull,push] scope when helm push to a registry(use token auth) - v4- #31211 by @kimsungmin1
fixFix missing conflict retry with server-side apply- #32088 by @Kajot-dev
otherProperly format the extra field in gzipped packages- #31884 by @ouillie
fixFix vanishing empty lines- #32327 by @matheuscscp
fixfix: pass registry client to downloader.Manager in upgrade- #32400 by @SetagGnaw
otherchore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1- for GO-2026-6061 #32450
fixfix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158- #32521 by @TerryHowe
other4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
otherMinimal fix to build failure from #31211. 3900f434fd3ef2b84065dc04508df48f288dba00 (Scott Rigby)
fixfix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#32521) f7c6e8f0f1e0e649e8d03b1535db4f3b8d0c9af2 (Terry Howe)
otherchore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 035a2c38e9a75ca0988c8449c0b7257f30d04064 (dependabot[bot])
fixfix: pass registry client to downloader.Manager in upgrade f76a5f46a952f731cc1543f348121297c8b3f6cc (Gates Wang)
otherApply suggestions 5a7c6c7c732b04ad6517b452d538da9e18993d67 (Will Noble)
otherProperly format the extra field in gzipped packages 22818486ce0fc18d92e01ba39faf65f70ffa8865 (Will Noble)
fixFix missing conflict retry with server-side apply (#32088) 2c979a17ac6b6d7bfe2d6650b69fa9effe963d4d (Jakub Jaruszewski)
fixPotential fix for pull request finding 2bd2c66544634e419ede3cfa18952cce5a5acd08 (kimsungmin1)
fixfix(registry): resolve golangci-lint issues in token-auth tests 183a5402291c553898b9c404bc17c95c81ea1c6c (kimsm28)
fixfix(registry): use plain-http registry in token-auth scope test 9655b5aecc0d36142d0620ff5ed762065a997739 (kimsm28)
fixfix typos in withScopeHint function comment 63f2b6809919e5e8e3e04f52064a536a14f1ff9b (kimsm28)
fixfix registry test failures by adjusting DockerRegistryHost and auth server listener management f7488c0be8c65dd16386c215cac4332900667278 (kimsm28)
fixfix variable naming requestUrl -> requestURL 8fe78fbe46eb2db5c75ab1cc89699c750017dca6 (kimsm28)
fixfix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder d0670d2fb2c3426cde4b41927b5e9b8b4370df93 (kimsm28)
fixfix typo d34fcd9264225a1e6296c4b0ee124dc69f3b3ecc (kimsungmin1)
breakingremove freeport dependency 9fbd190c30addb4786e4fe930a0fe98bf354116a (kimsungmin1)
featureadd newline in license header 9275661357afdfe12b8ce561e8103673f16cca8d (kimsungmin1)
fixfix scope when helm push to a registry that use token auth fef91f3e6942a20148542461eaebfb24f2c09584 (kimsungmin1)
fixfix panic on repeated IsReachable calls e89ce68bc5fec430bc1e2f0aef1aca6a2e71f795 (Mohammad Abdolirad)
fixfix(provenance): check error return in Digest ff1ac83bfb1246cdf1b57a4db0042085cc8b265d (Sebastien Tardif)
fixfix: address review feedback 4b4dedb2bdcfac886c124a361a5126e3c5e3c5df (Sebastien Tardif)
fixfix: fetch logs from all containers in test pods 7c8010322b8639cdf7844ac1ae5f8d444db43935 (Sebastien Tardif)
fixFix vanishing empty lines 83a8b70ffc1bcf97bb293cf6b35bd3b5093e8c30 (Matheus Pimenta)
+10 more items in the release notesotherJoin the discussion in Kubernetes Slack:
otherfor questions and just to hang out
fixfor discussing PRs, code, and bugs
otherHang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
otherTest, debug, and contribute charts: ArtifactHub/packages
other4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
other4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
otherchore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7feece8beb0fcba47059ec9b522fd929a64 (Terry Howe)
otherJoin the discussion in Kubernetes Slack:
otherfor questions and just to hang out
fixfor discussing PRs, code, and bugs
otherHang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
otherTest, debug, and contribute charts: ArtifactHub/packages
otherRevert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #32214
other4.2.3 and 3.21.2 are the next patch releases scheduled for July 8, 2026
other4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026
otherRevert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" b05881cf967a5a09e19866799d0edfd40675803a (George Jenkins)