chore(deps): update github actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v3 -> v6
actions/setup-go	action	major	v3 -> v6
actions/stale	action	major	v7 -> v10
helm/helm		major	v3.11.0 -> v4.0.1
kubescape/kubescape		major	v2.0.183 -> v3.0.45

---

Release Notes

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

actions/setup-go (actions/setup-go)

v6

Compare Source

v5

Compare Source

v4

Compare Source

actions/stale (actions/stale)

v10

Compare Source

v9

Compare Source

v8

Compare Source

helm/helm (helm/helm)

v4.0.1

Compare Source

v4.0.0: Helm v4.0.0

Compare Source

The Helm Team is proud to announce the first stable release of Helm 4.

New Features

Helm 4 has numerous new features, but a few deserve highlighting here:

• Redesigned plugin system that supports Web Assembly based plugins
• Post-renderers are now plugins
• Server side apply is now supported
• Improved resource watching, to support waiting, based on kstatus
• Local Content-based caching (e.g. for charts)
• Logging via slog enabling SDK logging to integrate with modern loggers
• Reproducible builds of chart archives
• Updated SDK API including support for multiple chart API versions (new experimental v3 chart API version coming soon)

For full release notes, please see: https://helm.sh/docs/overview/

Compatibility with Helm v3

Helm v4 is a major version with backward incompatible changes including to the flags and output of the Helm CLI and to the SDK.

Please evaluate the changes to your workflows. The changes are not as extensive as those from Helm v2 to v3, with the goal that the majority of workflows remain compatible between Helm v3 and v4.

Helm charts apiVersion v2 (majority of today's charts) will continue to be supported in Helm v4. Existing charts should continue to install, upgrade, and otherwise work. Please test the installation and upgrade of charts to ensure it works as expected. Changes (e.g., server side apply) may impact the experience.

Community

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.0. The common platform binaries are here:

• MacOS amd64 (checksum / 125233cf943e6def2abc727560c5584e9083308d672d38094bae1cc3e0bfeaa2)
• MacOS arm64 (checksum / 4f5d367af9e2141b047710539d22b7e5872cdaef788333396077236feb422419)
• Linux amd64 (checksum / c77e9e7c1cc96e066bd240d190d1beed9a6b08060b2043ef0862c4f865eca08f)
• Linux arm (checksum / 23498ff8f5fb358ad2576269cd41fa9a54b9469332806dff0d689470323180be)
• Linux arm64 (checksum / 8c5c77e20cc29509d640e208a6a7d2b7e9f99bb04e5b5fbe22707b72a5235245)
• Linux i386 (checksum / eda0b6508def454ba07e2f938c55f73be795e7f99552078ccc8af2c2bbd58a45)
• Linux ppc64le (checksum / 73ae83e9888aafa0e9c57a1d4d77dcb6c97c253ef175a4983a8bb4bcc771d2eb)
• Linux s390x (checksum / 9c7368b18c76fcae9e0281e1ee875ea0d9b5970ac3a00c4eb963205948594bad)
• Linux riscv64 (checksum / a688c2559c57d6a858c49b9237b7d6bbce5c634aa5204c4342bdc8a06818b9f1)
• Windows amd64 (checksum / 0f9a8c891b8d908a37fbb68f12dea92b633eb29e49070bd650f5760a1a99aa8d)
• Windows arm64 (checksum / f3ff262427547cc1b1dc3356d587ed8ffaa23f2abf24bc06660a350b9b7925f9)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Thank You!

The Helm project has enjoyed code contributions from many community members. Many more community members have assisted by filing issues and working with us to identify and eliminate bugs while adding new features. The #helm-users slack channel has long been a friendly and open forum for getting help and learning more about Helm. We cannot thank you enough for making this a helpful, friendly, and welcoming community for all.

❤️ The Helm Team

v3.19.2: Helm v3.19.2

Compare Source

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

• MacOS amd64 (checksum / 7ef4416cdef4c2d78a09e1c8f07a51e945dc0343c883a46b1f628deab52690b7)
• MacOS arm64 (checksum / f0847f899479b66a6dd8d9fcd452e8db2562e4cf3f7de28103f9fcf2b824f1d5)
• Linux amd64 (checksum / 2114c9dea2844dce6d0ee2d792a9aae846be8cf53d5b19dc2988b5a0e8fec26e)
• Linux arm (checksum / 20bcb0aad82172335914e30ae3efd020d28abc1b470b4b565e67aff152c0e4ee)
• Linux arm64 (checksum / 566e9f3a5a83a81e4b03503ae37e368edd52d699619e8a9bb1fdf21561ae0e88)
• Linux i386 (checksum / 54932ecf2c46c6d3cd9926d28d56e18e70b42467d8ad682844c64cbe8f3dfc11)
• Linux ppc64le (checksum / 70d782fb208ebe67b5c508f6e5910a0b75f9b2c99ee3c569a9265aba147d6a37)
• Linux s390x (checksum / 69d2a38afba43c9cd49b0bc6031d77230208506ad2b3c2772b3ad13436639e93)
• Linux riscv64 (checksum / b60da5690e66acf89df796d11be91cc2052d6194a655b4d6ea5ee5c01112192b)
• Windows amd64 (checksum / 8b3ea37bcd7c5eda68eadd278690498fb886a17ec541b449216ab3b45748600e)
• Windows arm64 (checksum / ed37c24ac0f18721fe61182d24f55d8fd0d072052d3e7393338abaf10452b523)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

• [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins)

v3.19.1: Helm v3.19.1

Compare Source

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

• MacOS amd64 (checksum / 567f50c5855c45e85ecfa50846bf30adad5d68e1d35ff216866b4897e91bcb80)
• MacOS arm64 (checksum / 080f320cfc4ee3816fd6c8f73820f4b3d941b10f709e69bf9afd78f8f8e7c92a)
• Linux amd64 (checksum / 966bed9b1e0dda11268f59bd7268c3cd3e308b37b070546e1d78a02526ff63f2)
• Linux arm (checksum / cd21c7ee767b4138e13ca856f102732cae7270c1bbe6d080a3d98153953550ac)
• Linux arm64 (checksum / ceed150305a1d1ef4a37923a7f66931a6807c34a38ea487fa8340e102dd2c7f7)
• Linux i386 (checksum / be3b70efa7b0ddaddd60d94ef0a37b69e22a5ee05efbec579729cdaacc2e7c5e)
• Linux ppc64le (checksum / acb8a92d873cc2ae2dd44593d88a0bc3a78eb7abd6b3784c3fced9e005401018)
• Linux s390x (checksum / 279dcdeaa9f3b42c8558e6e1815466852a80bd373f9a9e83ae7f724ff2cda17f)
• Linux riscv64 (checksum / ed0a8b03c2163157a948a67702d1884f4936575f9be953c673748b41bd2a9881)
• Windows amd64 (checksum / 3fd3ab4a47364c04c51e0e7387e0598aa2c8c43dd535128665aa43e695cec11e)
• Windows arm64 (checksum / 361b04b599ada09be194461cd0347db20276849c22f57adc697963d57a515c6a)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.0.0 is the next major release and will be on November 12, 2025
• 3.19.2 and 4.0.01 are the next patch releases and will be on December 10, 2025
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

• chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 4f953c2 (dependabot[bot])
• jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 6801f4d (Benoit Tigeot)
• Avoid "panic: interface conversion: interface {} is nil" 2f619be (Benoit Tigeot)
• Fix helm pull untar dir check with repo urls 8112d47 (Luna Stadler)
• Fix deprecation warning 5dff7ce (Benoit Tigeot)
• chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 2dad4d2 (dependabot[bot])
• Add timeout flag to repo add and update flags a833710 (Reinhard Nägele)
• chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 2e12c81 (Dirk Müller)

v3.19.0: Helm v3.19.0

Compare Source

Helm v3.19.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• Fixed a helm pull regression from 3.18 - error pulling OCI charts with --password #​31230
• Fixed a helm lint regression from Helm 3.18 - rejected JSON Schema $ref URLs that worked in 3.17.x #​31166
• Fixed go mod tidy #​31154
• Fixed k8s version parsing not matching original #​31091
• Fixed charts failing when using a redirect registry #​31087
• Fixed missing debug logging for OCI transport
• Fixed broken legacy docker support for login #​30941
• Fixed bugs from the move to ORAS v2
• Fixed processing all hook deletions on failure #​30673
• Feature for helm create added httproute from gateway-api to create chart template #​30658

Installation and Upgrading

Download Helm v3.19.0. The common platform binaries are here:

• MacOS amd64 (checksum / 09a108c0abda42e45af172be65c49125354bf7cd178dbe10435e94540e49c7b9)
• MacOS arm64 (checksum / 31513e1193da4eb4ae042eb5f98ef9aca7890cfa136f4707c8d4f70e2115bef6)
• Linux amd64 (checksum / a7f81ce08007091b86d8bd696eb4d86b8d0f2e1b9f6c714be62f82f96a594496)
• Linux arm (checksum / 8708367b8e8bed9bdf8429bb57536e4223cdca96245dffc205cb0cb670b151f4)
• Linux arm64 (checksum / 440cf7add0aee27ebc93fada965523c1dc2e0ab340d4348da2215737fc0d76ad)
• Linux i386 (checksum / ca0329cd1b09267e7c63c563e32462265949c31512b537dd6615d0b5190040fc)
• Linux ppc64le (checksum / f57ea04d7fa62cc3e90a831eb67edb1400c810df6083875bee3a7c195a795ce4)
• Linux s390x (checksum / 0dff2f249f71690e3b420ebb5efc573eb26a51b4a614c4391c8c7fa3e47863f2)
• Linux riscv64 (checksum / 978af545a3d72a253ce1d4c03c9febb509a239a48b2581107e548883ab61a227)
• Windows amd64 (checksum / 6488630c2e5d5945ed990fa02fd9e99f9c6792cdbcd79eb264b6cfb90179d2d1)
• Windows arm64 (checksum / 488f7530a1776da1b46b14e988bf305c9d7419c78e7e73aeb92f198a41c9ef6b)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.1 will contain only bug fixes.
• 3.20.0 is the next feature release.

Changelog

• bump version to v3.19.0 3d8990f (Scott Rigby)
• fix: use username and password if provided 9a54bf1 (Evans Mungai)
• chore(deps): bump the k8s-io group with 7 updates 5af0f68 (dependabot[bot])
• chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 e485606 (dependabot[bot])
• chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 6355c3d (dependabot[bot])
• chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 ec61f66 (dependabot[bot])
• fix(helm-lint): fmt b278020 (Isaiah Lewis)
• fix(helm-lint): Add TLSClientConfig d33ac5e (Isaiah Lewis)
• fix(helm-lint): Add HTTP/HTTPS URL support for json schema references 8543709 (Isaiah Lewis)
• chore(deps): bump the k8s-io group with 7 updates 89a3f90 (dependabot[bot])
• fix: go mod tidy for v3 da4c583 (Terry Howe)
• chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 e40b1b3 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 a27e9db (dependabot[bot])
• fix Chart.yaml handling f13afaa (Matt Farina)
• Handle messy index files 039b0b1 (Matt Farina)
• chore(deps): bump github.com/containerd/containerd from 1.7.27 to 1.7.28 bec98a9 (dependabot[bot])
• json schema fix 6d9509a (Robert Sirchia)
• fix: k8s version parsing to match original 807225e (Borys Hulii)
• chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 cbbd569 (dependabot[bot])
• Do not explicitly set SNI in HTTPGetter 5e8ff72 (Terry Howe)
• chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 5b5fb5b (dependabot[bot])
• chore(deps): bump the k8s-io group with 7 updates d12538a (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 303f803 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 abcc2ed (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 521c67b (dependabot[bot])
• Disabling linter due to unknown issue 227c9cb (Matt Farina)
• Updating link handling 4389fa6 (Matt Farina)
• Bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 372e403 (dependabot[bot])
• build(deps): bump the k8s-io group with 7 updates 4fa5a64 (dependabot[bot])
• build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 6284ed8 (dependabot[bot])
• fix: user username password for login 2c55a4e (Terry Howe)
• Update pkg/registry/transport.go a16e986 (Terry Howe)
• Update pkg/registry/transport.go cea26d8 (Terry Howe)
• fix: add debug logging to oci transport b52bb41 (Terry Howe)
• build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 45075cf (dependabot[bot])
• build(deps): bump golang.org/x/text from 0.25.0 to 0.26.0 73a7826 (dependabot[bot])
• fix: legacy docker support broken for login 733f94c (Terry Howe)
• fix: plugin installer test with no Internet fc36041 (Terry Howe)
• Handle an empty registry config file. cfe8cef (Matt Farina)
• Prevent fetching newReference again as we have in calling method c33215d (Benoit Tigeot)
• Prevent failure when resolving version tags in oras memory store f552b67 (Benoit Tigeot)
• fix(client): skipnode utilization for PreCopy a18a52e (Brandt Keller)
• test: Skip instead of returning early. looks more intentional fedf502 (Jesse Simpson)
• test: tests repo stripping functionality fe512ba (Jesse Simpson)
• test: include tests for Login based on different protocol prefixes 099a9e1 (Jesse Simpson)
• fix(client): layers now returns manifest - remove duplicate from descriptors b07ab77 (Brandt Keller)
• fix(client): return nil on non-allowed media types c225c12 (Brandt Keller)
• Fix 3.18.0 regression: registry login with scheme c0f3ace (Scott Rigby)
• Update pkg/plugin/plugin.go dce60ad (Benoit Tigeot)
• Update pkg/plugin/plugin.go cda0865 (Benoit Tigeot)
• Wait for Helm v4 before raising when platformCommand and Command are set 5d9d9a0 (Benoit Tigeot)
• Revert "fix (helm) : toToml` renders int as float [ backport to v3 ]" c5249c1 (Matt Farina)
• build(deps): bump the k8s-io group with 7 updates 5b0520d (dependabot[bot])
• chore: update generalization warning message afefca8 (Feng Cao)
• build(deps): bump oras.land/oras-go/v2 from 2.5.0 to 2.6.0 8d6d27c (dependabot[bot])
• build(deps): bump the k8s-io group with 7 updates 502c0d5 (dependabot[bot])
• build(deps): bump golang.org/x/crypto from 0.37.0 to 0.38.0 92be9ac (dependabot[bot])
• fix: move warning to top of block eb5b6d5 (Feng Cao)
• fix: govulncheck workflow 6b15f26 (Matthieu MOREL)
• fix: replace fmt warning with slog 6b5c944 (Feng Cao)
• fix: add warning when ignore repo flag 247bf7c (Feng Cao)
• bump version to v3.18.0 9404459 (Robert Sirchia)
• backport #​30673 to dev-v3 0a800e8 (Gerard Nguyen)
• feat: add httproute from gateway-api to create chart template bd1b67b (Henrik Gerdes)

Full Changelog: helm/helm@v3.18.6...v3.19.0

v3.18.6: Helm v3.18.6

Compare Source

Helm v3.18.6 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.6. The common platform binaries are here:

• MacOS amd64 (checksum / 80cad0470e38cf25731cdead7c32dfbeb887bc177bd6fa01e31b065722f8f06b)
• MacOS arm64 (checksum / 48e30d236a1f334c6acb78501be5a851eaa2a267fefeb1131b6484eb2f9f30d7)
• Linux amd64 (checksum / 3f43c0aa57243852dd542493a0f54f1396c0bc8ec7296bbb2c01e802010819ce)
• Linux arm (checksum / 13156fbe87a9db201b7d8fd0b42dee2a2e76a77388ea3bd59e3074cfa49d3619)
• Linux arm64 (checksum / 5b8e00b6709caab466cbbb0bc29ee09059b8dc9417991dd04b497530e49b1737)
• Linux i386 (checksum / d245db7c80edaf47bc42d3fab0b79d2e75d63fa49d06bc0ca599686ebdbd1422)
• Linux ppc64le (checksum / 61eac730dac2029d7acf1c53bd0b1056f78ca2c3f915da7fa3995e74c021eae8)
• Linux s390x (checksum / c6435c220b2577abea11ee9281fda8a5164583fb1f502702f6ef5c2b4347e38f)
• Linux riscv64 (checksum / cea696b01b66fad76b24d9ef28a86802b0931cbc25cec687e8469589438995eb)
• Windows amd64 (checksum / 4263320a8d70df0bb1e245534fba1b541f9889005cdb68dec9798b197c3f66b0)
• Windows arm64 (checksum / fdff469f270d8a155d9289843b92f7b00b2ca353b8ec61532e920eeb3fc2b480)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

• fix(helm-lint): fmt b76a950 (Isaiah Lewis)
• fix(helm-lint): Add TLSClientConfig b79a421 (Isaiah Lewis)
• fix(helm-lint): Add HTTP/HTTPS URL support for json schema references b9180e6 (Isaiah Lewis)

v3.18.5: Helm v3.18.5

Compare Source

Helm v3.18.5 is a security release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Security Advisories

• Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
• Incorrect YAML Content Leads To Panic

Installation and Upgrading

Download Helm v3.18.5. The common platform binaries are here:

• MacOS amd64 (checksum / 3200c32cf19bf69b446e97c0060af39f018d2e441e418ad174ba39052f63fb15)
• MacOS arm64 (checksum / 32ce3f4910d5a96c1170f3f8f230d4c8b8bc007e5d47b085b8416cfe559d7925)
• Linux amd64 (checksum / 9879bf9c471cdecbbee5ee17cf1de1849b0ffd12871ea01f17ede6861d7134f5)
• Linux arm (checksum / 4be47fa77476bfd6416a44853e28983e7c8594156259813ecf35d004044fb17d)
• Linux arm64 (checksum / d25d2c1b1c5a9844755ab5c66e6df4d6b31c25e6d92dd2ce66c137a63ddf9f2c)
• Linux i386 (checksum / 1ee980e47bb37f388abdce3a7e8da64a9b372352c4cb645bda5ddd401973bee3)
• Linux ppc64le (checksum / 9d300e0efced9b244aedcc9d11c49647deb4c5afc8d2298c988498dc530bc932)
• Linux s390x (checksum / c779bb4dea8026294378a9ad6447095fb8f56671a8c49437344dd342de2a3156)
• Linux riscv64 (checksum / f79d06dc5e966c341fc8ad1a0d5e032f7d681e62c4a51a4d22badec4b9857144)
• Windows amd64 (checksum / 464bfd7792d6c682778fc1d5e5bcc9ac5ce83457fe3c4b7a3d0af4dc3ef03eb1)
• Windows arm64 (checksum / 82411e3ee4e349d30221ddf6c26397bb0a41666939b338ccf39f4cd2ec4e4410)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

• fix Chart.yaml handling 7799b48 (Matt Farina)
• Handle messy index files dd8502f (Matt Farina)
• json schema fix cb8595b (Robert Sirchia)

v3.18.4: Helm v3.18.4

Compare Source

Helm v3.18.4 is a security release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Security Advisories

• GHSA-557j-xg8c-q2mm: Chart Dependency Updating With Malicious Chart.yaml Content And Symlink

Installation and Upgrading

Download Helm v3.18.4. The common platform binaries are here:

• MacOS amd64 (checksum / 860a7238285b44b5dc7b3c4dad6194316885d7015d77c34e23177e0e9554af8f)
• MacOS arm64 (checksum / 041849741550b20710d7ad0956e805ebd960b483fe978864f8e7fdd03ca84ec8)
• Linux amd64 (checksum / f8180838c23d7c7d797b208861fecb591d9ce1690d8704ed1e4cb8e2add966c1)
• Linux arm (checksum / 34ea88aef15fd822e839da262176a36e865bb9cfdb89b1f723811c0cc527f981)
• Linux arm64 (checksum / c0a45e67eef0c7416a8a8c9e9d5d2d30d70e4f4d3f7bea5de28241fffa8f3b89)
• Linux i386 (checksum / 75c2d9858725a5907faf8f19d9fb21c0263e4cb864d27d6df8809f96f147d3c0)
• Linux ppc64le (checksum / dbd74c59e7710f26e058596723abbf73662b553e01f40dfb08508ffffaeb7b81)
• Linux s390x (checksum / c8bafb34bcebd53494f0223239977e1ff7b487e714598a5843a0cb1788e20075)
• Linux riscv64 (checksum / f67f39104c7e695cbba04dc3b4507a80a034ce9e5ccbe55c84e91b1553b787bd)
• Windows amd64 (checksum / 0af12a2233d71ef4207db1eabbf103b554631206ed5b2b34fc56b73a52596888)
• Windows arm64 (checksum / de6bc8fcffeb041f524a92c6026ea22ef6f939118a30e6bb8b996b77a38486b1)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.18.5 is the next patch release and will be on August 13, 2025
• 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

• Disabling linter due to unknown issue f20a4ad (Matt Farina)
• build(deps): bump the k8s-io group with 7 updates 563b094 (dependabot[bot])
• Updating link handling 00de613 (Matt Farina)

v3.18.3: Helm 3.18.3

Compare Source

Helm v3.18.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.3. The common platform binaries are here:

• MacOS amd64 (checksum / d186851d40b1999c5d75696bc0b754e4d29e860c8d0cf4c132ac1b1940c5cffc)
• MacOS arm64 (checksum / 3fe3e9739ab3c75d88bfe13e464a79a2a7a804fc692c3258fa6a9d185d53e377)
• Linux amd64 (checksum / 6ec85f306dd8fe9eb05c61ba4593182b2afcfefb52f21add3fe043ebbdc48e39)
• Linux arm (checksum / 5ec62879f57d6acc0436440c88459d2a5c8de233273e73ff6498d79fd2d92653)
• Linux arm64 (checksum / 3382ebdc6d6e027371551a63fc6e0a3073a1aec1061e346692932da61cfd8d24)
• Linux i386 (checksum / 22d7bad5c6012729e550e09d0b719336ea98c9c7207730456d152f32124609af)
• Linux ppc64le (checksum / ca5ab0bb205488276095881f04b72bfed5c0ddb92f715940dde6a7ccae72818c)
• Linux s390x (checksum / be261f040b59c04ad4f1ce6fc2f976e500167475cadb468bf78cb9772300fb5d)
• Linux riscv64 (checksum / 1f87dab39ed599af463abba2c8b2d4c625cfcbc2f2010da2c9c47db017b1c2ca)
• Windows amd64 (checksum / 4cb9185cd7b84395853c04c84c4524a6b794cab07211cedc2e36839f53d8e26d)
• Windows arm64 (checksum / 7e83d901af47ca804d99d2eb679b4622fdfe1b5b06b15550f5a432a0e4591bb8)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.18.4 is the next patch release and will be on July 09, 2025
• 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

• build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 6838ebc (dependabot[bot])
• fix: user username password for login 5b9e2f6 (Terry Howe)
• Update pkg/registry/transport.go 2782412 (Terry Howe)
• Update pkg/registry/transport.go e66cf6a (Terry Howe)
• fix: add debug logging to oci transport 191f05c (Terry Howe)

v3.18.2: Helm 3.18.2

Compare Source

Helm v3.18.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.2. The common platform binaries are here:

• MacOS amd64 (checksum / 8bfc850d4451dccecb01c73bdc844cb1b3ed2f1b90a89fc47e7b1670e1f369ec)
• MacOS arm64 (checksum / d82a30d654862668ae1e58dbbba5ea6ed5f84312da59666ef628bf73b2188d39)
• Linux amd64 (checksum / c5deada86fe609deefdf40e9cbbe3da2f8cf3f6a4551a0ebe7886dc8fcf98bce)
• Linux arm (checksum / a848c9db5e51f7cc4975bcfbba415c30cdfb67e141b6efc0e8b3a66cd89e8607)
• Linux arm64 (checksum / 03181a494a0916b370a100a5b2536104963b095be53fb23d1e29b2afb1c7de8d)
• Linux i386 (checksum / dae13caca7a24d0adff3f59183a269275522964d75c1e4cbdb0ffaddc659e7bc)
• Linux ppc64le (checksum / 1d21b2acdd79a13d20585b61fe90bababdd3f7047530d66aad650869c772b5c3)
• Linux s390x (checksum / 382920a48a0800cf2bb67bf6ab403aab15f7631b369bed9df9bdcfdd5ebd5ae9)
• Linux riscv64 (checksum / d702db0191e6a4091d631760aded83f809d8d7edf962d5252f1ea46804183ebf)
• Windows amd64 (checksum / 49fc2d74a351974ebf544f8252a4e43d7e5f9e0137472415393178c2d3996e9f)
• Windows arm64 (checksum / 6ecdf10aa6f356ebb841d1732225437100e65fdb90f99170e1b2e5726e4fd10d)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.18.3 is the next patch release and will be on July 09, 2025
• 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

• fix: legacy docker support broken for login 04cad46 (Terry Howe)
• Handle an empty registry config file. bc9f8a2 (Matt Farina)

v3.18.1: Helm v3.18.1

Compare Source

Helm v3.18.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

Notes:

• This release fixes regressions around template generation and OCI registry interaction in 3.18.0
• There are at least 2 known regressions unaddressed in this release. They are being worked on.
  • Empty registry configuration files. When the file exists but it is empty.
  • Login to Docker Hub on some domains fails.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.1. The common platform binaries are here:

• MacOS amd64 (checksum / 3973bda1863d74614e1dca69ee65050928a80b88f6d10ec514fa7886a02de309)
• MacOS arm64 (checksum / 93562d2a0e34a505954e5b9556e319f390bc5bd07bed754ddc038b09cfe6fbd9)
• Linux amd64 (checksum / b1c7e8e261fd30f34c617282813ecafc63628fcd59a255a9fc51b1fe43394c05)
• Linux arm (checksum / 6a58bf4091f798ac1a6fa7e21ea142fe138f5b688f2e3af0c49147f99210ff

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.