chore(deps): update dependency helm/helm to v3.20.0

[zon-renovate]

This PR contains the following updates:

Package	Update	Change
helm/helm	minor	3.15.3 -> 3.20.0

---

Release Notes

helm/helm (helm/helm)

v3.20.0: Helm v3.20.0

Compare Source

Helm v3.20.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• SDK: bump k8s API versions to v0.35.0
• v3 backport: Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #​12564
• v3 backport: Bump Go version to v1.25

Installation and Upgrading

Download Helm v3.20.0. The common platform binaries are here:

• MacOS amd64 (checksum / 724aef60f737ca73cfcc77924219dbfb229dde8492b2722cb372da617fd77367)
• MacOS arm64 (checksum / 1cb8022ef9c88026adf236cbdf02a80bf7678632d1c39d3d8045e815959ab20e)
• Linux amd64 (checksum / dbb4c8fc8e19d159d1a63dda8db655f9ffa4aac1b9a6b188b34a40957119b286)
• Linux arm (checksum / e66b9bcb51130f372b4750b2da83679e59d04633bfa825a1936c0b1039035bf0)
• Linux arm64 (checksum / bfb14953295d5324d47ab55f3dfba6da28d46c848978c8fbf412d4271bdc29f1)
• Linux i386 (checksum / e8e39f6df8b1c6d9d0f98f658d619c22c5a249a72975510d367def5e19adc7eb)
• Linux ppc64le (checksum / 3a44cf2df45274f907743997b9cef069e94589238324cf5116f9a3c092c743bf)
• Linux s390x (checksum / f38b6bb56db05fb7da82668d0cc82470a07fe17a5f881378d536cee68384c974)
• Linux riscv64 (checksum / b4336a2bf9b9a914897cb36b4343d4fd583cb4703dc2478d696a667391f30f2c)
• Windows amd64 (checksum / f9c7f686788d7b78775d3a3592fd98596aa825010cb9d157c9fbe3baabee1084)
• Windows arm64 (checksum / 4095cb1c46e29e9a7487fdbbee384d14656d3fa43dd8ef789061db6e29f0457b)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.1.1 and 3.20.1 are the next patch releases, scheduled for March 11, 2026
• 4.2.0 and 3.21.0 are the next minor releases, scheduled for May 13, 2026

Changelog

• bump version to v3.20 f6e17f6 (Scott Rigby)
• chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 4f5a655 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 65c504a (dependabot[bot])
• chore(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 f3b8af4 (dependabot[bot])
• chore(deps): bump the k8s-io group with 7 updates 89c2c61 (dependabot[bot])
• [dev-v3] Replace deprecated NewSimpleClientset 526076e (George Jenkins)
• [dev-v3] Bump Go v1.25, golangci-lint v2 0ae8e4f (George Jenkins)
• chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 e0d2595 (dependabot[bot])
• chore(deps): bump github.com/containerd/containerd from 1.7.29 to 1.7.30 858acb1 (dependabot[bot])
• fix(rollback): errors.Is instead of string comp 0cd9a60 (Hidde Beydals)
• fix(uninstall): supersede deployed releases 8bb0b37 (Hidde Beydals)
• Use latest patch release of Go in releases 930ba6f (Matt Farina)
• chore(deps): bump the k8s-io group with 7 updates 582211c (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 585c25c (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 6f17d46 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 46ff427 (dependabot[bot])
• chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 28b813a (dependabot[bot])
• chore(deps): bump github.com/rubenv/sql-migrate from 1.8.0 to 1.8.1 5dde5d6 (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 362900b (dependabot[bot])
• chore(deps): bump github.com/cyphar/filepath-securejoin ec61de5 (dependabot[bot])
• chore(deps): bump the k8s-io group with 7 updates a490607 (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.30.0 to 0.31.0 8509bcc (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 d495a94 (dependabot[bot])
• Remove dev-v3 helm-latest-version publish 01dc6cc (George Jenkins)
• chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 6647f84 (dependabot[bot])
• chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 b548118 (dependabot[bot])
• Revert "pkg/registry: Login option for passing TLS config in memory" 6a67b55 (Scott Rigby)
• chore(deps): bump github.com/cyphar/filepath-securejoin 6d4f8c0 (dependabot[bot])
• jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 3f0da15 (Benoit Tigeot)
• Fix helm pull untar dir check with repo urls e5e101c (Luna Stadler)
• chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 6aae923 (dependabot[bot])
• chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 1900c6a (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.29.0 to 0.30.0 43e9297 (dependabot[bot])
• chore(deps): bump github.com/cyphar/filepath-securejoin d347e2b (dependabot[bot])
• [backport] fix: get-helm-3 script use helm3-latest-version bd337b4 (George Jenkins)
• pkg/registry: Login option for passing TLS config in memory b80959f (Matheus Pimenta)
• chore(deps): bump the k8s-io group with 7 updates 1ac9d34 (dependabot[bot])
• Fix deprecation warning 9a366b4 (Benoit Tigeot)
• chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 0c5a17e (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.34.0 to 0.35.0 b999021 (dependabot[bot])
• Avoid "panic: interface conversion: interface {} is nil" 2fe49f9 (Benoit Tigeot)
• bump version to v3.19.0 c3610ab (Scott Rigby)
• chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 73b449f (dependabot[bot])
• fix: set repo authorizer in registry.Client.Resolve() ffbc537 (Eric Stroczynski)
• fix null merge f0b699e (Ben Foster)
• Add timeout flag to repo add and update flags 79a9cc5 (Reinhard Nägele)

v3.19.5: Helm v3.19.5

Compare Source

Helm v3.19.5 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• Fixed bug where removing subchart value via override resulted in warning #​31118
• Fixed bug where helm uninstall with --keep-history did not suspend previous deployed releases #​12556

Installation and Upgrading

Download Helm v3.19.5. The common platform binaries are here:

• MacOS amd64 (checksum / 57f4a847c349382b7cc742a6434ef25f88f0928a113d8cf49084b464878ef0b9)
• MacOS arm64 (checksum / 195e24e587f423f15a78feebab04583ceee68323598575a0e8b3b11b43fd26fe)
• Linux amd64 (checksum / a0a5e8c592ed3f376ac110715eff214730c7422f9a44d96cf98117d2b8b0e6c0)
• Linux arm (checksum / 1367926ea842729b4312fbf800234d15bcaa419c92201727b776da4550078a09)
• Linux arm64 (checksum / ce02147ffee6d993bf8ae97a44a22e9e1daf0b69d2d5b69a0c8cf6706445ccf5)
• Linux i386 (checksum / 54ec170590a6bfb26990c645426f92089d9eb574190c00620ca793d92b5891d5)
• Linux ppc64le (checksum / a51ba349875e2a219c909ae802435db403ea6924ca4725acb73f520da36e5f45)
• Linux s390x (checksum / 071f19deabaf2326a7ca54c3143934e2001c61bd106fa2949bf53d1e7452ecd0)
• Linux riscv64 (checksum / a33b2df76300d33008a2b47107f289a0de31d461e6bfb2354bf1fd747ccecc9b)
• Windows amd64 (checksum / f258b0d17a4c914ad453f9d8cc21643dddd354f4fbad4c7c595cf3480221379e)
• Windows arm64 (checksum / 232bccce9fe4212a22acc210a555edc75e101b26fb9a9eb1442c32bda8d102bf)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.1.0 and 3.20.0 is the next minor releases and will be on January 21, 2026
• 4.1.1 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

• fix(rollback): errors.Is instead of string comp 4a19a5b (Hidde Beydals)
• fix(uninstall): supersede deployed releases 7a00235 (Hidde Beydals)
• fix null merge 578564e (Ben Foster)

v3.19.4: Helm v3.19.4

Compare Source

Helm v3.19.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm v3.19.3 release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.4. The common platform binaries are here:

• MacOS amd64 (checksum / d9c9b1fc499c54282c4127c60cdd506da2c6202506b708a2b45fb6dfdb318f43)
• MacOS arm64 (checksum / 7e82ca63fe80a298cecefad61d0c10bc47963ff3551e94ab6470be6393a6a74b)
• Linux amd64 (checksum / 759c656fbd9c11e6a47784ecbeac6ad1eb16a9e76d202e51163ab78504848862)
• Linux arm (checksum / fcbb21b657c46ad646542964c262c4efb595bc60621e34273c1a2bb92eaff1dc)
• Linux arm64 (checksum / 9e1064f5de43745bdedbff2722a1674d0397bc4b4d8d8196d52a2b730909fe62)
• Linux i386 (checksum / 5bbf5541cb021c021a7f5b3e59e3808cc09678aa2650ece24c78f8a277466c0b)
• Linux ppc64le (checksum / a38d8f75406f9bc3e12d1ebf8819fd563a5156ada6fe665402732932eec9c743)
• Linux s390x (checksum / d153b3a316ce3f2936e601d94db5909aae4fbd5d1a4b28760fad2dd18c2bb749)
• Linux riscv64 (checksum / 9d90a7532b426e5d99edfa9fa93e1dba4729f96a3b493974e847651a9aa34020)
• Windows amd64 (checksum / 18e7d1b970dfb6f4f8ddbbd1659d75d90ca818a47519411c4cc305b918508d36)
• Windows arm64 (checksum / da870dbb870e5cad243f5c7dca54f27be289237a97d84077c885769a06394223)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.5 and 4.0.4 are the next patch releases and will be on January 14, 2026
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

• Use latest patch release of Go in releases 7cfb6e4 (Matt Farina)
• chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 59c951f (dependabot[bot])
• chore(deps): bump github.com/cyphar/filepath-securejoin d45f3f1 (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 d459544 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 becd387 (dependabot[bot])
• chore(deps): bump the k8s-io group with 7 updates edb1579 (dependabot[bot])

v3.19.3: Helm v3.19.3

Compare Source

Helm v3.19.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.3. The common platform binaries are here:

• MacOS amd64 (checksum / 170f0e69fb36ceedf5f304ec09c113410ec9a75c5a831e48f75905e9e11e7979)
• MacOS arm64 (checksum / 594bd6063b6d57f0a4474be3675be726d69ad046b252edf0d182fc82995aba8b)
• Linux amd64 (checksum / d9439f58aa72a4580b25b641940f950fe20695345eb16ec8f106134007062df1)
• Linux arm (checksum / f1d4e22dc0dad86006ad2e26110c710a1b27a37296a6c676d0267df210330dbc)
• Linux arm64 (checksum / 10136aef69056c7c5be9230782aab29cae659f7c8d63df24488b6c6469e17563)
• Linux i386 (checksum / 8abc252ddd53794fbe17c6933a2ea60261a7fdbde8520c7536123949979f6431)
• Linux ppc64le (checksum / d5f797f9fb5790bc1c9b5e6c389cb77552fe1aac39e12e6f81dc471d14689e07)
• Linux s390x (checksum / 4152a8e1da91028d1a55b8b9ba89c05824d5241afec1cb80fed75ae2fa246f43)
• Linux riscv64 (checksum / f15ce605be1659fbc2eb14688f634d2f75392c1ef4e292b21671472998d0a0a7)
• Windows amd64 (checksum / 8d702a409c08a5774fc79d8aa0337eb5043f6c3ad850b4ee5e7b55af199d8eaa)
• Windows arm64 (checksum / 6f5652e62604957f7ad43efc74eb7dec5ca0dfee19b573bc98d8206b933e211b)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

• Bump golang.org/x/crypto to v0.45.0 0707f56 (Dirk Müller)
• [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins)

v3.19.2: Helm v3.19.2

Compare Source

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

• MacOS amd64 (checksum / 7ef4416cdef4c2d78a09e1c8f07a51e945dc0343c883a46b1f628deab52690b7)
• MacOS arm64 (checksum / f0847f899479b66a6dd8d9fcd452e8db2562e4cf3f7de28103f9fcf2b824f1d5)
• Linux amd64 (checksum / 2114c9dea2844dce6d0ee2d792a9aae846be8cf53d5b19dc2988b5a0e8fec26e)
• Linux arm (checksum / 20bcb0aad82172335914e30ae3efd020d28abc1b470b4b565e67aff152c0e4ee)
• Linux arm64 (checksum / 566e9f3a5a83a81e4b03503ae37e368edd52d699619e8a9bb1fdf21561ae0e88)
• Linux i386 (checksum / 54932ecf2c46c6d3cd9926d28d56e18e70b42467d8ad682844c64cbe8f3dfc11)
• Linux ppc64le (checksum / 70d782fb208ebe67b5c508f6e5910a0b75f9b2c99ee3c569a9265aba147d6a37)
• Linux s390x (checksum / 69d2a38afba43c9cd49b0bc6031d77230208506ad2b3c2772b3ad13436639e93)
• Linux riscv64 (checksum / b60da5690e66acf89df796d11be91cc2052d6194a655b4d6ea5ee5c01112192b)
• Windows amd64 (checksum / 8b3ea37bcd7c5eda68eadd278690498fb886a17ec541b449216ab3b45748600e)
• Windows arm64 (checksum / ed37c24ac0f18721fe61182d24f55d8fd0d072052d3e7393338abaf10452b523)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

• [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins)

v3.19.1: Helm v3.19.1

Compare Source

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

• MacOS amd64 (checksum / 567f50c5855c45e85ecfa50846bf30adad5d68e1d35ff216866b4897e91bcb80)
• MacOS arm64 (checksum / 080f320cfc4ee3816fd6c8f73820f4b3d941b10f709e69bf9afd78f8f8e7c92a)
• Linux amd64 (checksum / 966bed9b1e0dda11268f59bd7268c3cd3e308b37b070546e1d78a02526ff63f2)
• Linux arm (checksum / cd21c7ee767b4138e13ca856f102732cae7270c1bbe6d080a3d98153953550ac)
• Linux arm64 (checksum / ceed150305a1d1ef4a37923a7f66931a6807c34a38ea487fa8340e102dd2c7f7)
• Linux i386 (checksum / be3b70efa7b0ddaddd60d94ef0a37b69e22a5ee05efbec579729cdaacc2e7c5e)
• Linux ppc64le (checksum / acb8a92d873cc2ae2dd44593d88a0bc3a78eb7abd6b3784c3fced9e005401018)
• Linux s390x (checksum / 279dcdeaa9f3b42c8558e6e1815466852a80bd373f9a9e83ae7f724ff2cda17f)
• Linux riscv64 (checksum / ed0a8b03c2163157a948a67702d1884f4936575f9be953c673748b41bd2a9881)
• Windows amd64 (checksum / 3fd3ab4a47364c04c51e0e7387e0598aa2c8c43dd535128665aa43e695cec11e)
• Windows arm64 (checksum / 361b04b599ada09be194461cd0347db20276849c22f57adc697963d57a515c6a)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.0.0 is the next major release and will be on November 12, 2025
• 3.19.2 and 4.0.01 are the next patch releases and will be on December 10, 2025
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

• chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 4f953c2 (dependabot[bot])
• jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 6801f4d (Benoit Tigeot)
• Avoid "panic: interface conversion: interface {} is nil" 2f619be (Benoit Tigeot)
• Fix helm pull untar dir check with repo urls 8112d47 (Luna Stadler)
• Fix deprecation warning 5dff7ce (Benoit Tigeot)
• chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 2dad4d2 (dependabot[bot])
• Add timeout flag to repo add and update flags a833710 (Reinhard Nägele)
• chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 2e12c81 (Dirk Müller)

v3.19.0: Helm v3.19.0

Compare Source

Helm v3.19.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• Fixed a helm pull regression from 3.18 - error pulling OCI charts with --password #​31230
• Fixed a helm lint regression from Helm 3.18 - rejected JSON Schema $ref URLs that worked in 3.17.x #​31166
• Fixed go mod tidy #​31154
• Fixed k8s version parsing not matching original #​31091
• Fixed charts failing when using a redirect registry #​31087
• Fixed missing debug logging for OCI transport
• Fixed broken legacy docker support for login #​30941
• Fixed bugs from the move to ORAS v2
• Fixed processing all hook deletions on failure #​30673
• Feature for helm create added httproute from gateway-api to create chart template #​30658

Installation and Upgrading

Download Helm v3.19.0. The common platform binaries are here:

• MacOS amd64 (checksum / 09a108c0abda42e45af172be65c49125354bf7cd178dbe10435e94540e49c7b9)
• MacOS arm64 (checksum / 31513e1193da4eb4ae042eb5f98ef9aca7890cfa136f4707c8d4f70e2115bef6)
• Linux amd64 (checksum / a7f81ce08007091b86d8bd696eb4d86b8d0f2e1b9f6c714be62f82f96a594496)
• Linux arm (checksum / 8708367b8e8bed9bdf8429bb57536e4223cdca96245dffc205cb0cb670b151f4)
• Linux arm64 (checksum / 440cf7add0aee27ebc93fada965523c1dc2e0ab340d4348da2215737fc0d76ad)
• Linux i386 (checksum / ca0329cd1b09267e7c63c563e32462265949c31512b537dd6615d0b5190040fc)
• Linux ppc64le (checksum / f57ea04d7fa62cc3e90a831eb67edb1400c810df6083875bee3a7c195a795ce4)
• Linux s390x (checksum / 0dff2f249f71690e3b420ebb5efc573eb26a51b4a614c4391c8c7fa3e47863f2)
• Linux riscv64 (checksum / 978af545a3d72a253ce1d4c03c9febb509a239a48b2581107e548883ab61a227)
• Windows amd64 (checksum / 6488630c2e5d5945ed990fa02fd9e99f9c6792cdbcd79eb264b6cfb90179d2d1)
• Windows arm64 (checksum / 488f7530a1776da1b46b14e988bf305c9d7419c78e7e73aeb92f198a41c9ef6b)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.1 will contain only bug fixes.
• 3.20.0 is the next feature release.

Changelog

• bump version to v3.19.0 3d8990f (Scott Rigby)
• fix: use username and password if provided 9a54bf1 (Evans Mungai)
• chore(deps): bump the k8s-io group with 7 updates 5af0f68 (dependabot[bot])
• chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 e485606 (dependabot[bot])
• chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 6355c3d (dependabot[bot])
• chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 ec61f66 (dependabot[bot])
• fix(helm-lint): fmt b278020 (Isaiah Lewis)
• fix(helm-lint): Add TLSClientConfig d33ac5e (Isaiah Lewis)
• fix(helm-lint): Add HTTP/HTTPS URL support for json schema references 8543709 (Isaiah Lewis)
• chore(deps): bump the k8s-io group with 7 updates 89a3f90 (dependabot[bot])
• fix: go mod tidy for v3 da4c583 (Terry Howe)
• chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 e40b1b3 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 a27e9db (dependabot[bot])
• fix Chart.yaml handling f13afaa (Matt Farina)
• Handle messy index files 039b0b1 (Matt Farina)
• chore(deps): bump github.com/containerd/containerd from 1.7.27 to 1.7.28 bec98a9 (dependabot[bot])
• json schema fix 6d9509a (Robert Sirchia)
• fix: k8s version parsing to match original 807225e (Borys Hulii)
• chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 cbbd569 (dependabot[bot])
• Do not explicitly set SNI in HTTPGetter 5e8ff72 (Terry Howe)
• chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 5b5fb5b (dependabot[bot])
• chore(deps): bump the k8s-io group with 7 updates d12538a (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 303f803 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 abcc2ed (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 521c67b (dependabot[bot])
• Disabling linter due to unknown issue 227c9cb (Matt Farina)
• Updating link handling 4389fa6 (Matt Farina)
• Bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 372e403 (dependabot[bot])
• build(deps): bump the k8s-io group with 7 updates 4fa5a64 (dependabot[bot])
• build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 6284ed8 (dependabot[bot])
• fix: user username password for login 2c55a4e (Terry Howe)
• Update pkg/registry/transport.go a16e986 (Terry Howe)
• Update pkg/registry/transport.go cea26d8 (Terry Howe)
• fix: add debug logging to oci transport b52bb41 (Terry Howe)
• build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 45075cf (dependabot[bot])
• build(deps): bump golang.org/x/text from 0.25.0 to 0.26.0 73a7826 (dependabot[bot])
• fix: legacy docker support broken for login 733f94c (Terry Howe)
• fix: plugin installer test with no Internet fc36041 (Terry Howe)
• Handle an empty registry config file. cfe8cef (Matt Farina)
• Prevent fetching newReference again as we have in calling method c33215d (Benoit Tigeot)
• Prevent failure when resolving version tags in oras memory store f552b67 (Benoit Tigeot)
• fix(client): skipnode utilization for PreCopy a18a52e (Brandt Keller)
• test: Skip instead of returning early. looks more intentional fedf502 (Jesse Simpson)
• test: tests repo stripping functionality fe512ba (Jesse Simpson)
• test: include tests for Login based on different protocol prefixes 099a9e1 (Jesse Simpson)
• fix(client): layers now returns manifest - remove duplicate from descriptors b07ab77 (Brandt Keller)
• fix(client): return nil on non-allowed media types c225c12 (Brandt Keller)
• Fix 3.18.0 regression: registry login with scheme c0f3ace (Scott Rigby)
• Update pkg/plugin/plugin.go dce60ad (Benoit Tigeot)
• Update pkg/plugin/plugin.go cda0865 (Benoit Tigeot)
• Wait for Helm v4 before raising when platformCommand and Command are set 5d9d9a0 (Benoit Tigeot)
• Revert "fix (helm) : toToml` renders int as float [ backport to v3 ]" c5249c1 (Matt Farina)
• build(deps): bump the k8s-io group with 7 updates 5b0520d (dependabot[bot])
• chore: update generalization warning message afefca8 (Feng Cao)
• build(deps): bump oras.land/oras-go/v2 from 2.5.0 to 2.6.0 8d6d27c (dependabot[bot])
• build(deps): bump the k8s-io group with 7 updates 502c0d5 (dependabot[bot])
• build(deps): bump golang.org/x/crypto from 0.37.0 to 0.38.0 92be9ac (dependabot[bot])
• fix: move warning to top of block eb5b6d5 (Feng Cao)
• fix: govulncheck workflow 6b15f26 (Matthieu MOREL)
• fix: replace fmt warning with slog 6b5c944 (Feng Cao)
• fix: add warning when ignore repo flag 247bf7c (Feng Cao)
• bump version to v3.18.0 9404459 (Robert Sirchia)
• backport #​30673 to dev-v3 0a800e8 (Gerard Nguyen)
• feat: add httproute from gateway-api to create chart template bd1b67b (Henrik Gerdes)

Full Changelog: helm/helm@v3.18.6...v3.19.0

v3.18.6: Helm v3.18.6

Compare Source

Helm v3.18.6 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.6. The common platform binaries are here:

• MacOS amd64 (checksum / 80cad0470e38cf25731cdead7c32dfbeb887bc177bd6fa01e31b065722f8f06b)
• MacOS arm64 (checksum / 48e30d236a1f334c6acb78501be5a851eaa2a267fefeb1131b6484eb2f9f30d7)
• Linux amd64 (checksum / 3f43c0aa57243852dd542493a0f54f1396c0bc8ec7296bbb2c01e802010819ce)
• Linux arm (checksum / 13156fbe87a9db201b7d8fd0b42dee2a2e76a77388ea3bd59e3074cfa49d3619)
• Linux arm64 (checksum / 5b8e00b6709caab466cbbb0bc29ee09059b8dc9417991dd04b497530e49b1737)
• Linux i386 (checksum / d245db7c80edaf47bc42d3fab0b79d2e75d63fa49d06bc0ca599686ebdbd1422)
• Linux ppc64le (checksum / 61eac730dac2029d7acf1c53bd0b1056f78ca2c3f915da7fa3995e74c021eae8)
• Linux s390x (checksum / c6435c220b2577abea11ee9281fda8a5164583fb1f502702f6ef5c2b4347e38f)
• Linux riscv64 (checksum / cea696b01b66fad76b24d9ef28a86802b0931cbc25cec687e8469589438995eb)
• Windows amd64 (checksum / 4263320a8d70df0bb1e245534fba1b541f9889005cdb68dec9798b197c3f66b0)
• Windows arm64 (checksum / fdff469f270d8a155d9289843b92f7b00b2ca353b8ec61532e920eeb3fc2b480)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

• fix(helm-lint): fmt b76a950 (Isaiah Lewis)
• fix(helm-lint): Add TLSClientConfig b79a421 (Isaiah Lewis)
• fix(helm-lint): Add HTTP/HTTPS URL support for json schema references b9180e6 (Isaiah Lewis)

v3.18.5: Helm v3.18.5

Compare Source

Helm v3.18.5 is a security release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Security Advisories

• Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
• Incorrect YAML Content Leads To Panic

Installation and Upgrading

Download Helm v3.18.5. The common platform binaries are here:

• MacOS amd64 (checksum / 3200c32cf19bf69b446e97c0060af39f018d2e441e418ad174ba39052f63fb15)
• MacOS arm64 (checksum / 32ce3f4910d5a96c1170f3f8f230d4c8b8bc007e5d47b085b8416cfe559d7925)
• Linux amd64 (checksum / 9879bf9c471cdecbbee5ee17cf1de1849b0ffd12871ea01f17ede6861d7134f5)
• Linux arm ([checksum](https://get.helm.sh/helm-v3.18.5-linux-arm.tar.gz.s

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.