Skip to content

fix(deps): update all-other-go-dependencies (major)#849

Open
gardener-ci-robot wants to merge 1 commit intomasterfrom
renovate/major-all-other-go-dependencies
Open

fix(deps): update all-other-go-dependencies (major)#849
gardener-ci-robot wants to merge 1 commit intomasterfrom
renovate/major-all-other-go-dependencies

Conversation

@gardener-ci-robot
Copy link
Collaborator

@gardener-ci-robot gardener-ci-robot commented Nov 25, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/google/go-github/v83 v83.0.0 → v84.0.0 age confidence
helm.sh/helm/v3 v3.20.0 → v4.1.1 age confidence

Release Notes

google/go-github (github.com/google/go-github/v83)

v84.0.0

Compare Source

This release contains the following breaking API changes:

  • feat!: Support workflow dispatch run details in response (#​4028)
    BREAKING CHANGE: CreateWorkflowDispatchEventByID and CreateWorkflowDispatchEventByFileName now return *WorkflowDispatchRunDetails.
  • fix!: Fix opts for methods listing issues and sub-issues (#​4016)
    BREAKING CHANGE: Split IssuesService.List into IssuesService.ListAllIssues and IssuesService.ListUserIssues. IssuesService.ListByOrg now accepts IssueListByOrgOptions. SubIssueService.ListByIssue now accepts ListOptions.

...and the following additional changes:

  • chore: Bump version of go-github to v84.0.0 (#​4049)
  • chore: Spell white space instead of whitespace (#​4047)
  • build(deps): Bump the go_modules group in /example (#​4040)
  • chore: Improve testJSONMarshal (#​4042)
  • Add 'munlicode' to REVIEWERS list (#​4046)
  • build(deps): Bump golang.org/x/net from 0.50.0 to 0.51.0 in /scrape (#​4045)
  • build(deps): Bump actions/setup-go from 6.2.0 to 6.3.0 in the actions group (#​4044)
  • chore: Fix TestNewFormRequest (#​4043)
  • feat: Add support for team type field (#​4037)
  • chore: Update openapi_operations.yaml (#​4041)
  • feat: Add support for repository fine-grained permissions (#​4032)
  • docs: Fix documentation links (#​4036)
  • feat: Add fields Codespaces, Copilot and ActionsInbound to APIMeta (#​3975)
  • chore: Use go:fix inline for deprecated ptr funcs (#​4034)
  • feat: Add ListFineGrainedPersonalAccessTokenRequests for org (#​4022)
  • feat: Ensure compatibility with encoding/json/v2 experiment (#​4029)
  • chore: Update golangci-lint and enable some revive rules (#​4025)
  • refactor: Use sorting functions from slices instead of sort (#​4020)
  • build(deps): Bump github.com/theupdateframework/go-tuf/v2 to v2.4.1 (#​4018)
  • chore: Update workflow and tools to use Go 1.26 and 1.25 (#​3995)
  • chore: Bump go-github from v82 to v83 in /scrape (#​4017)
helm/helm (helm.sh/helm/v3)

v4.1.1: Helm v4.1.1

Compare Source

Helm v4.1.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix: fine-grained context options for waiting #​31735
  • fix: kstatus do not wait forever on failed resources #​31730
  • fix: Revert "Consider GroupVersionKind when matching resources" #​31772
  • fix: handle nil elements in slice copying #​31751

Installation and Upgrading

Download Helm v4.1.1. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.2 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • feat(kstatus): fine-grained context options for waiting 5caf004 (Matheus Pimenta)
  • bugfix(kstatus): do not wait forever on failed resources 2519a88 (Matheus Pimenta)
  • Revert "Consider GroupVersionKind when matching resources" b2c487c (Matheus Pimenta)
  • fix(copystructure): handle nil elements in slice copying 261387a (Philipp Born)

v4.1.0: Helm v4.1.0

Compare Source

Helm v4.1.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Feature: added chart name to dependency logs, namespace to resource waiting logs, and confirmation message when all resources are ready #​31530
  • Feature: improved plugin name validation error messages and field name detection #​31491
  • Feature: improved the --wait flag by allowing explicit strategy selection (including explicit --wait=hookOnly) and preventing SDK timeout errors when timeout is not specified #​31421
  • Feature: allow concurrent dependency build with atomic file write #​30984
  • Feature: added a --no-headers flag to the 'helm repo list' command, allowing users to suppress table headers in the output. Useful for scripting and automation #​31448
  • SDK feature: added a LoadArchive to common loader #​31462
  • SDK feature: introduced support for custom kstatus readers #​31706
  • Fixed bug where a plugin name could already be used by another command #​31427
  • Fixed bug where --server-side flag was not passed to install when using upgrade --install #​31635
  • Fixed bug where HELM_ environment variables were not passed to plugins. this fixes a regression which was blocking some getter plugins #​31613
  • Fixed bug where Helm test --logs failed with hook-delete-policy "hook-failed" or "hook-succeed" #​31579
  • Fixed kube client logging issue #​31560
  • Fixed regression where vendor-specific suffixes were stripped from .Capabilities.KubeVersion.GitVersion, breaking charts that detect managed Kubernetes platforms #​31528
  • Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #​12564
  • SDK: bump k8s API versions to v0.35.0
  • docs: updated helm template help text to document --api-versions #​31683
  • docs: fixed documentation about default wait strategy

Installation and Upgrading

Download Helm v4.1.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.1 and 3.20.1 are the next patch releases, scheduled for March 11, 2026
  • 4.2.0 and 3.21.0 are the next minor releases, scheduled for May 13, 2026

Changelog

  • Update pkg/kube/statuswait.go f46f1ce (Evans Mungai)
  • pkg/kube: introduce support for custom kstatus readers 59ece92 (Matheus Pimenta)
  • chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 de0becd (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 46e5264 (dependabot[bot])
  • fix(release): fix test compilation error e751a70 (Evans Mungai)
  • Suppress SC2154 without changing behavior 9125b84 (Sarfraj Khan)
  • chore(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 0e0c02e (dependabot[bot])
  • Lint sync-repo.sh with ShellCheck d4a2787 (sarfraj89)
  • chore: move Evans Mungai from triage to maintainers fd090cc (Evans Mungai)
  • Replace reflect.Ptr with reflect.Pointer 2d6d9c0 (Mads Jensen)
  • fix: typo in the function names 138f730 (Gergely Brautigam)
  • Add documentation for --api-versions flag in template command c7cc77b (majiayu000)
  • Fixing failing tests for cli-tools update fe1c749 (Matt Farina)
  • chore(deps): bump github.com/fluxcd/cli-utils 5e82698 (dependabot[bot])
  • Replace deprecated NewSimpleClientset a15db7f (George Jenkins)
  • docs(README): add mise alternate installation documentation 04198dc (jylenhof)
  • enable exhaustive linter 9a898af (Brenden Ehlers)
  • fix: add default casess to switch statements 1c119bc (Brenden Ehlers)
  • build: set kube version via debug.BuildInfo c6d9a5b (Branch Vincent)
  • chore(deps): bump github.com/tetratelabs/wazero from 1.10.1 to 1.11.0 97cde79 (dependabot[bot])
  • chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 9123143 (dependabot[bot])
  • doc: update based on review suggestion 55a4aed (Deepak Chethan)
  • test(statuswait): fix Copilot code review suggestion for goroutine in tests d6b35ce (Mohsen Mottaghi)
  • test(statuswait): add more tests suggested by Copilot code review a1543d5 (Mohsen Mottaghi)
  • test(statuswait): add some tests for statuswait dd44f4e (Mohsen Mottaghi)
  • fix: use namespace-scoped watching to avoid cluster-wide LIST permissions 3dd54ed (Mohsen Mottaghi)
  • fix(doc): Update default wait strategy f92ae18 (Deepak)
  • Update to use slog 9772037 (tison)
  • Fix TestCliPluginExitCode 3c6557d (tison)
  • Check plugin name is not used 5196b84 (tison)
  • chore(deps): bump github.com/fluxcd/cli-utils 364a7aa (dependabot[bot])
  • Fix TestConcurrencyDownloadIndex typo 592815e (George Jenkins)
  • Use errors.Is to check for io.EOF and gzip.ErrHeader a490bb3 (Mads Jensen)
  • chore(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 09ae0d4 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 1f8e84d (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 e9a0510 (dependabot[bot])
  • chore: fix some comments to improve readability 858cf31 (wangjingcun)
  • chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 7fb1728 (dependabot[bot])
  • feat: move TerryHowe triage to maintainers e900a25 (Terry Howe)
  • Use latest patch release of Go in releases 8f636b5 (Matt Farina)
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.8.0 to 1.8.1 ea52f87 (dependabot[bot])
  • fix(upgrade): pass --server-side flag to install when using upgrade --install 2dc581d (Evans Mungai)
  • chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 a9bbffb (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 d195cfa (dependabot[bot])
  • Run the vulnerability check on PR that change the file 24a8258 (Matt Farina)
  • Fix govulncheck in CI bc9462f (Matt Farina)
  • Update the govulncheck.yml to run on change b825a18 (Matt Farina)
  • Enable the sloglint linter a18e59e (Mads Jensen)
  • fix(cli): handle nil config in EnvSettings.Namespace() 8534663 (Zadkiel AHARONIAN)
  • fix(getter): pass settings environment variables 119341d (Zadkiel AHARONIAN)
  • fixes comment in install.go a109ac2 (Stephanie Hohenberg)
  • chore(deps): bump actions/stale from 10.1.0 to 10.1.1 581ab1a (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 e62bf7f (dependabot[bot])
  • fixes tests after merge 2f598ff (Stephanie Hohenberg)
  • fixes lint issue bb9356e (Stephanie Hohenberg)
  • updates tests after rebase from master 8cf4ad7 (Stephanie Hohenberg)
  • Add tests to action package to improve coverage 31131cf (Stephanie Hohenberg)
  • chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 e6b2068 (dependabot[bot])
  • Inform we use a different golangci-lint version than the CI faa8912 (Benoit Tigeot)
  • Deal with golint warning with private executeShutdownFunc 45c5f3a (Benoit Tigeot)
  • Use length check for MetaDependencies instead of nil comparison b33d4ae (Calvin Bui)
  • Code review 70fc5f9 (Benoit Tigeot)
  • Fix linting issue 9f1c8a2 (Benoit Tigeot)
  • Update pkg/action/hooks.go 6bb5bcc (Michelle Fernandez Bieber)
  • added check for nil shutdown d930144 (Michelle Fernandez Bieber)
  • cleaned up empty line 7a61ebf (Michelle Fernandez Bieber)
  • updated comment and made defer of shutdown function return errors as before and not the possible shutdown error 1071477 (Michelle Fernandez Bieber)
  • added shutdown hook that is executed after the logs have been retrieved 7a55758 (Michelle Fernandez Bieber)
  • chore: fix typo in pkg/downloader/chart_downloader.go e71a29c (megha1906)
  • Bump required go version (go.mod version) b859163 (George Jenkins)
  • Use modernize to use newer Golang features. 6cceead (Mads Jensen)
  • Remove two redundant if-checks. 380abe2 (Mads Jensen)
  • Fix kube client logging 936cd32 (Matt Farina)
  • chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 cb35947 (dependabot[bot])
  • chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 4fddc64 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0 b87f2da (dependabot[bot])
  • fix: prevent segmentation violation on empty yaml in multidoc 81d244c (Benoit Tigeot)
  • fix: prevent reporting fallback on version when none specified 40e22de (Benoit Tigeot)
  • chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 c2405ce (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin 28baa97 (dependabot[bot])
  • bump version to 4.1 63e060f (Matt Farina)
  • fix: add missing context to debug logs 2dc5864 (shuv0id)
  • fix: preserve vendor suffixes in KubeVersion.GitVersion ce273ee (Benoit Tigeot)
  • chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 f6ceae9 (dependabot[bot])
  • fixup test f8a49f1 (George Jenkins)
  • logs a9cdc78 (George Jenkins)
  • fix b1a9760 (George Jenkins)
  • chore: add warning for registry login with namespace 5f3c617 (Terry Howe)
  • style: linting 71591ee (Benoit Tigeot)
  • test: split tests between valid and invalid b296cbe (Benoit Tigeot)
  • test: convert tests to table drive tests 9b242dd (Benoit Tigeot)
  • test: refactor TestMetadataLegacyValidate to be more generic c81a09b (Benoit Tigeot)
  • update tests 8c87024 (yxxhero)
  • fix: Use server-side apply for object create during update 18616e6 (George Jenkins)
  • Copy adopted resource info 855ebb6 (George Jenkins)
  • Refactor environment variable expansion in PrepareCommands and update tests 2d49f0c (yxxhero)
  • fix: correct LDFLAGS path for default Kubernetes version b6a8c65 (Benoit Tigeot)
  • fix: improve plugin name validation err messages early via unmarshalling acf331a (Benoit Tigeot)
  • fix: Make invalid name error message more similar and move tests 9e1e3d2 (Benoit Tigeot)
  • fix: focus only on plugin name but give more info about what we get cf077ce (Benoit Tigeot)
  • Make validation error similar and explicit for both metadatas f4b139a (Benoit Tigeot)
  • fix: improve plugin name validation error messages c04e18e (Benoit Tigeot)
  • Fix syntax errors in the document faa0adc (Fish-pro)
  • chore(deps): bump the k8s-io group with 7 updates c81e267 (dependabot[bot])
  • docs: Fix LFX Health Score badge URL in README.md 40856bf (Michael Crenshaw)
  • chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 fb82e0e (dependabot[bot])
  • chore(deps): bump github.com/tetratelabs/wazero from 1.9.0 to 1.10.1 72a84fb (dependabot[bot])
  • Publish Helm v4 -> helm-latest-version e4353dc (George Jenkins)
  • Adding script to download Helm v4 5ae8586 (Matt Farina)
  • chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 6cd0bf8 (dependabot[bot])
  • refactor: use strings.Builder to improve performance d8c4040 (promalert)
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.20.1 to 0.21.0 0089a07 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 7a85358 (dependabot[bot])
  • Update pkg/cmd/flags.go 02312a1 (Benoit Tigeot)
  • Error strategy list match help 277c140 (Benoit Tigeot)
  • Prevent surprising failure with SDK when timeout is not set 5f6fa43 (Benoit Tigeot)
  • Do not change the default waiting strategy when --wait is not set 52a2828 (Benoit Tigeot)
  • Provide more help for SDK user when setting up WaitStrategy 1112865 (Benoit Tigeot)
  • Avoid confusion between --wait (watcher) and no --wait (hookOnly) 8535e9f (Benoit Tigeot)
  • The default is not HookOnlyStrategy but WaitStrategy 1836f37 (Benoit Tigeot)
  • Make wait strategy selection more obvious a5e110f (Benoit Tigeot)
  • Update pkg/cmd/flags.go e8b0cff (Benoit Tigeot)
  • Increase documentation of --wait flag 95e1ee1 (Benoit Tigeot)
  • While testing SDK features for v4. I was surprised with the error: 5cbd9b3 (Benoit Tigeot)
  • fix: do not run release workflow on forks d93ef03 (Terry Howe)
  • Convert pkg/cmd/load_plugins.go to slog 6de83c5 (saimanojk1)
  • Rename copilot-instructions.md to AGENTS.md caff03f (Yarden Shoham)
  • fix(rollback): errors.Is instead of string comp d158708 (Hidde Beydals)
  • fix(uninstall): supersede deployed releases 2f1ecc7 (Hidde Beydals)
  • for remaining local variable case inconsistency 4576a81 (tison)
  • Properly test error messages on pull command's test ed6cf0e (Benoit Tigeot)
  • Adding a LoadArchive to common loader 0f5eda7 (Matt Farina)
  • for all other similar cases 90d0191 (tison)
  • chore(deps): bump github.com/cyphar/filepath-securejoin 21af58b (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 60aaa8a (dependabot[bot])
  • chore: increase logging package test coverage 558cea7 (Evans Mungai)
  • feat(repo): add --no-headers option to 'helm repo list' 6ef79bb (Paul Van Laer)
  • chore: fix typo of public field 0d6de28 (tison)
  • rename interface{} to any ffb3940 (Terry Howe)
  • test: protect unknown hook delete policies 269a32a (Marcin Owsiany)
  • chore: replace github.com/mitchellh/copystructure bee9c1a (Terry Howe)
  • fix: Fix Helm v4 release distribtion/get-helm-3 script d5d1ea3 (George Jenkins)
  • fix test ae4af69 (Artem Vdovin)
  • Make test scripts run without /bin/bash 6181e0a (Tom Wieczorek)
  • Ignore duplicated URN in logs 8025a39 (Benoit Tigeot)
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 03bb62f (Benoit Tigeot)
  • chore: delete unused var in installer.go 8068578 (zyfy29)
  • fix: assign KUBECONFIG environment variable value to env.Kubeconfig b25fa86 (LinPr)
  • add concurrency test on write & load index file 118d0eb (Artem Vdovin)
  • update writing index files to writeAtomicFile 314bd19 (Artem Vdovin)
  • fix index concurrency 351bb78 (Artem Vdovin)

v4.0.5: Helm v4.0.5

Compare Source

Helm v4.0.5 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed bug where helm uninstall with --keep-history did not suspend previous deployed releases #​12556
  • Fixed rollback error when a manifest is removed in a failed upgrade #​13437
  • Fixed check to ensure CLI plugin does not load with the same name as an existing Helm command
  • Fixed helm test --logs failure with hook-delete-policy "hook-failed" or "hook-succeed" #​9098
  • Fixed a bug where empty dependency lists were incorrectly treated as present
  • Fixed a bug where the watch library did not only watch namespaces associated with the objects
  • Fixed regression in downloader plugins environment variables #​31612
  • Fixed bug where --server-side flag is not respected with helm upgrade --install #​31627
  • For SDK users: exposed KUBECONFIG to env

Installation and Upgrading

Download Helm v4.0.5. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.0 and 3.20.0 is the next minor releases and will be on January 21, 2026
  • 4.1.1 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • fix(upgrade): pass --server-side flag to install when using upgrade --install 1b6053d (Evans Mungai)
  • fix(cli): handle nil config in EnvSettings.Namespace() 1e3ee1d (Zadkiel AHARONIAN)
  • fix(getter): pass settings environment variables 31bd995 (Zadkiel AHARONIAN)
  • test(statuswait): fix Copilot code review suggestion for goroutine in tests 41a6b36 (Mohsen Mottaghi)
  • test(statuswait): add more tests suggested by Copilot code review 2a2e6f7 (Mohsen Mottaghi)
  • test(statuswait): add some tests for statuswait 3818c02 (Mohsen Mottaghi)
  • fix: use namespace-scoped watching to avoid cluster-wide LIST permissions 66cab24 (Mohsen Mottaghi)
  • Use length check for MetaDependencies instead of nil comparison abf2007 (Calvin Bui)
  • Deal with golint warning with private executeShutdownFunc 4b3de18 (Benoit Tigeot)
  • Code review 3212770 (Benoit Tigeot)
  • Fix linting issue 417aae9 (Benoit Tigeot)
  • Update pkg/action/hooks.go 6c838b4 (Michelle Fernandez Bieber)
  • added check for nil shutdown c5d87f2 (Michelle Fernandez Bieber)
  • cleaned up empty line 53175b7 (Michelle Fernandez Bieber)
  • updated comment and made defer of shutdown function return errors as before and not the possible shutdown error d2df1ab (Michelle Fernandez Bieber)
  • added shutdown hook that is executed after the logs have been retrieved 5b223de (Michelle Fernandez Bieber)
  • Fix TestCliPluginExitCode e845b68 (tison)
  • Check plugin name is not used 30bfd57 (tison)
  • Fix rollback for missing resources 0fd2c41 (Feruzjon Muyassarov)
  • fix: assign KUBECONFIG environment variable value to env.Kubeconfig b456e27 (LinPr)
  • fix(rollback): errors.Is instead of string comp e2021f8 (Hidde Beydals)
  • fix(uninstall): supersede deployed releases af7c153 (Hidde Beydals)

v4.0.4: Helm v4.0.4

Helm v4.0.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm v4.0.2 release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade. Note that tag v4.0.3 was skipped due to a build failure.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.5 and 4.0.5 are the next patch releases and will be on January 14, 2026
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • Bump v4.0.2 CVE deps cd700e0 (George Jenkins)
  • Use latest patch release of Go in releases 9db13ee (Matt Farina)

v4.0.2: Helm v4.0.2

Compare Source

Helm v4.0.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.2. The common platform binaries are here:

  • MacOS amd64 (checksum / 1dd2ce37855f5380abc86d56ab38387d4f1b8b05be296760addfe32d7c56a393)
  • MacOS arm64 (checksum / fed6a23bba5db8a21e40175f44c159e057b26a6361f4280e24c820d0841e150b)
  • [Linux amd64](ht

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@gardener-ci-robot gardener-ci-robot requested a review from a team as a code owner November 25, 2025 13:10
@gardener-robot gardener-robot added needs/review Needs review size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Nov 25, 2025
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch 7 times, most recently from d70df13 to 7edb608 Compare December 1, 2025 10:49
@gardener-github-actions gardener-github-actions bot added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Dec 1, 2025
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch 4 times, most recently from a9cb4f7 to 0dd5447 Compare December 6, 2025 11:46
@gardener-ci-robot gardener-ci-robot changed the title Update all-other-go-dependencies (major) fix(deps): update all-other-go-dependencies (major) Dec 10, 2025
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch 11 times, most recently from 1fa0c99 to 1d59985 Compare December 17, 2025 09:04
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch 3 times, most recently from 8b972fb to 9808180 Compare December 19, 2025 12:50
@gardener-prow
Copy link

gardener-prow bot commented Jan 16, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign dguendisch for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch 3 times, most recently from d2a601f to 30e021c Compare January 21, 2026 21:07
@gardener-ci-robot
Copy link
Collaborator Author

gardener-ci-robot commented Jan 21, 2026 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
sigs.k8s.io/kustomize/kyaml v0.20.1 -> v0.21.0

@gardener-prow gardener-prow bot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jan 21, 2026
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch 4 times, most recently from bae51ba to cf84f8a Compare January 26, 2026 10:57
@gardener-prow gardener-prow bot added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jan 26, 2026
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch from cf84f8a to c7f10f9 Compare January 27, 2026 19:34
@gardener-prow gardener-prow bot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jan 27, 2026
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/major-all-other-go-dependencies branch 2 times, most recently from 18db1a9 to 7147b52 Compare January 29, 2026 13:59
@gardener-prow gardener-prow bot added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jan 29, 2026
@gardener-github-actions gardener-github-actions bot added the ok-to-test Indicates a non-member PR verified by an org member that is safe to test. label Feb 2, 2026
@github-actions github-actions bot added needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. and removed ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Feb 2, 2026
@gardener-ci-robot gardener-ci-robot changed the title fix(deps): update all-other-go-dependencies (major) fix(deps): update module helm.sh/helm/v3 to v4 Feb 2, 2026
@gardener-github-actions gardener-github-actions bot added the ok-to-test Indicates a non-member PR verified by an org member that is safe to test. label Feb 2, 2026
@github-actions github-actions bot removed the ok-to-test Indicates a non-member PR verified by an org member that is safe to test. label Feb 2, 2026
@gardener-ci-robot gardener-ci-robot changed the title fix(deps): update module helm.sh/helm/v3 to v4 fix(deps): update module helm.sh/helm/v3 to v4 - autoclosed Feb 2, 2026
@hendrikKahl
Copy link
Member

hendrikKahl commented Feb 3, 2026

/remove-lifecycle stale

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. do-not-merge/needs-kind Indicates a PR lacks a `kind/foo` label and requires one. needs/review Needs review needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@gardener-ci-robot @hendrikKahl @gardener-robot