Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 9, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
helm.sh/helm/v3 v3.19.4v4.0.4 age adoption passing confidence

Release Notes

helm/helm (helm.sh/helm/v3)

v4.0.4: Helm v4.0.4

Helm v4.0.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm v4.0.2 release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade. Note that tag v4.0.3 was skipped due to a build failure.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.5 and 4.0.5 are the next patch releases and will be on January 14, 2026
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • Bump v4.0.2 CVE deps cd700e0 (George Jenkins)
  • Use latest patch release of Go in releases 9db13ee (Matt Farina)

v4.0.2: Helm v4.0.2

Compare Source

Helm v4.0.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • fix: prevent reporting fallback on version when none specified 94659f2 (Benoit Tigeot)
  • fix: prevent segmentation violation on empty yaml in multidoc 2dd1f66 (Benoit Tigeot)
  • Ignore duplicated URN in logs bbad438 (Benoit Tigeot)
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 bdcf920 (Benoit Tigeot)
  • Publish Helm v4 -> helm-latest-version 9ac7c2b (George Jenkins)
  • fix: Fix Helm v4 release distribtion/get-helm-3 script 0bef6bd (George Jenkins)

v4.0.1: Helm v4.0.1

Compare Source

Helm v4.0.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.1. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.3 and 4.0.2 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • Copy adopted resource info 12500dd (George Jenkins)
  • fixup test 1cf3841 (George Jenkins)
  • logs 32e2d08 (George Jenkins)
  • fix 4b6472f (George Jenkins)
  • fix: Use server-side apply for object create during update 9dfe3b3 (George Jenkins)
  • Fix kube client logging 861adc2 (Matt Farina)
  • update tests b2f7872 (yxxhero)
  • Refactor environment variable expansion in PrepareCommands and update tests 77f97a1 (yxxhero)
  • Fix syntax errors in the document a156195 (Fish-pro)
  • fix: correct LDFLAGS path for default Kubernetes version 2c0dcda (Benoit Tigeot)

v4.0.0: Helm v4.0.0

Compare Source

The Helm Team is proud to announce the first stable release of Helm 4.

New Features

Helm 4 has numerous new features, but a few deserve highlighting here:

  • Redesigned plugin system that supports Web Assembly based plugins
  • Post-renderers are now plugins
  • Server side apply is now supported
  • Improved resource watching, to support waiting, based on kstatus
  • Local Content-based caching (e.g. for charts)
  • Logging via slog enabling SDK logging to integrate with modern loggers
  • Reproducible builds of chart archives
  • Updated SDK API including support for multiple chart API versions (new experimental v3 chart API version coming soon)

For full release notes, please see: https://helm.sh/docs/overview/

Compatibility with Helm v3

Helm v4 is a major version with backward incompatible changes including to the flags and output of the Helm CLI and to the SDK.

Please evaluate the changes to your workflows. The changes are not as extensive as those from Helm v2 to v3, with the goal that the majority of workflows remain compatible between Helm v3 and v4.

Helm charts apiVersion v2 (majority of today's charts) will continue to be supported in Helm v4. Existing charts should continue to install, upgrade, and otherwise work. Please test the installation and upgrade of charts to ensure it works as expected. Changes (e.g., server side apply) may impact the experience.

Community

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.0. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Thank You!

The Helm project has enjoyed code contributions from many community members. Many more community members have assisted by filing issues and working with us to identify and eliminate bugs while adding new features. The #helm-users slack channel has long been a friendly and open forum for getting help and learning more about Helm. We cannot thank you enough for making this a helpful, friendly, and welcoming community for all.

❤️ The Helm Team


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file ok-to-test labels Dec 9, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Dec 9, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go mod tidy
go: downloading helm.sh/helm/v4 v4.0.4
go: downloading github.com/onsi/ginkgo/v2 v2.27.2
go: downloading github.com/onsi/gomega v1.38.2
go: downloading github.com/fluxcd/cli-utils v0.36.0-flux.14
go: downloading github.com/lithammer/dedent v1.1.0
go: downloading github.com/DATA-DOG/go-sqlmock v1.5.2
go: downloading go.uber.org/goleak v1.3.0
go: downloading github.com/stretchr/objx v0.5.2
go: downloading github.com/google/gofuzz v1.2.0
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/creack/pty v1.1.18
go: downloading github.com/AdaLogics/go-fuzz-headers v0.0.0-20240806141605-e8a1dd7889d6
go: downloading github.com/ProtonMail/go-crypto v1.3.0
go: downloading github.com/distribution/distribution/v3 v3.0.0
go: downloading github.com/foxcpp/go-mockdns v1.1.0
go: downloading github.com/extism/go-sdk v1.7.1
go: downloading github.com/tetratelabs/wazero v1.9.0
go: downloading github.com/go-sql-driver/mysql v1.8.1
go: downloading github.com/mattn/go-sqlite3 v1.14.22
go: downloading github.com/kr/pretty v0.3.1
go: downloading github.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e
go: downloading github.com/jcmturner/gokrb5/v8 v8.4.4
go: downloading github.com/frankban/quicktest v1.14.6
go: downloading github.com/dlclark/regexp2 v1.11.0
go: downloading github.com/redis/go-redis/v9 v9.7.3
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading github.com/bshuster-repo/logrus-logstash-hook v1.0.0
go: downloading github.com/docker/go-metrics v0.0.1
go: downloading github.com/gorilla/handlers v1.5.2
go: downloading github.com/miekg/dns v1.1.68
go: downloading github.com/dylibso/observe-sdk/go v0.0.0-20240819160327-2d926c5d788a
go: downloading filippo.io/edwards25519 v1.1.0
go: downloading github.com/poy/onpar v1.1.2
go: downloading github.com/go-task/slim-sprig/v3 v3.0.0
go: downloading golang.org/x/tools v0.39.0
go: downloading github.com/kr/text v0.2.0
go: downloading github.com/rogpeppe/go-internal v1.14.1
go: downloading github.com/jcmturner/dnsutils/v2 v2.0.0
go: downloading github.com/jcmturner/gofork v1.7.6
go: downloading github.com/hashicorp/go-uuid v1.0.3
go: downloading github.com/jcmturner/goidentity/v6 v6.0.1
go: downloading github.com/cloudflare/circl v1.6.1
go: downloading github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f
go: downloading github.com/gorilla/mux v1.8.1
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c
go: downloading github.com/redis/go-redis/extra/redisotel/v9 v9.0.5
go: downloading go.opentelemetry.io/contrib/exporters/autoexport v0.57.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.32.0
go: downloading github.com/ianlancetaylor/demangle v0.0.0-20240805132620-81f5be970eca
go: downloading github.com/tetratelabs/wabin v0.0.0-20230304001439-f6f874872834
go: downloading go.opentelemetry.io/otel/sdk/metric v1.37.0
go: downloading go.etcd.io/etcd/server/v3 v3.6.5
go: downloading github.com/google/pprof v0.0.0-20250403155104-27863c87afa6
go: downloading github.com/jcmturner/aescts/v2 v2.0.0
go: downloading github.com/jcmturner/rpc/v2 v2.0.3
go: downloading github.com/docker/docker-credential-helpers v0.8.2
go: downloading github.com/hashicorp/golang-lru/arc/v2 v2.0.5
go: downloading github.com/redis/go-redis/extra/rediscmd/v9 v9.0.5
go: downloading go.opentelemetry.io/contrib/bridges/prometheus v0.57.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.8.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.8.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.32.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.32.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.32.0
go: downloading go.opentelemetry.io/otel/exporters/prometheus v0.54.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.8.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.32.0
go: downloading go.opentelemetry.io/otel/sdk/log v0.8.0
go: downloading github.com/soheilhy/cmux v0.1.5
go: downloading github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75
go: downloading go.etcd.io/bbolt v1.4.3
go: downloading go.etcd.io/etcd/pkg/v3 v3.6.5
go: downloading gopkg.in/natefinch/lumberjack.v2 v2.2.1
go: downloading golang.org/x/mod v0.30.0
go: downloading github.com/hashicorp/golang-lru/v2 v2.0.5
go: downloading go.opentelemetry.io/otel/log v0.8.0
go: downloading github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading go.etcd.io/raft/v3 v3.6.0
go: downloading github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510
go: downloading github.com/jonboulle/clockwork v0.5.0
go: downloading github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1
go: downloading github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/golang-jwt/jwt/v5 v5.3.0
go: downloading github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0
go: downloading gonum.org/v1/gonum v0.16.0
go: downloading github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5
go: finding module for package helm.sh/helm/v4/pkg/chartutil
go: finding module for package helm.sh/helm/v4/pkg/releaseutil
go: github.com/cert-manager/cmctl/v2/pkg/install imports
	helm.sh/helm/v4/pkg/chartutil: module helm.sh/helm/v4@latest found (v4.0.4), but does not contain package helm.sh/helm/v4/pkg/chartutil
go: github.com/cert-manager/cmctl/v2/pkg/uninstall imports
	helm.sh/helm/v4/pkg/releaseutil: module helm.sh/helm/v4@latest found (v4.0.4), but does not contain package helm.sh/helm/v4/pkg/releaseutil

@cert-manager-prow cert-manager-prow bot added the dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. label Dec 9, 2025
@cert-manager-prow
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign maelvls for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@cert-manager-prow
Copy link
Contributor

Hi @renovate[bot]. Thanks for your PR.

I'm waiting for a cert-manager member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@cert-manager-prow cert-manager-prow bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Dec 9, 2025
@renovate renovate bot force-pushed the renovate/helm.sh-helm-v3-4.x branch 6 times, most recently from 287058c to ecc55da Compare December 15, 2025 08:35
@renovate renovate bot force-pushed the renovate/helm.sh-helm-v3-4.x branch from ecc55da to ed08324 Compare December 23, 2025 11:16
@renovate renovate bot force-pushed the renovate/helm.sh-helm-v3-4.x branch from ed08324 to c0b34af Compare December 28, 2025 12:57
@cert-manager-prow
Copy link
Contributor

@renovate[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-cert-manager-cmctl-verify c0b34af link true /test pull-cert-manager-cmctl-verify
pull-cert-manager-cmctl-test c0b34af link true /test pull-cert-manager-cmctl-test
pull-cert-manager-cmctl-integration c0b34af link true /test pull-cert-manager-cmctl-integration

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. dependencies Pull requests that update a dependency file ok-to-test size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant