This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryUpdates deps, feat, and chore across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Support disabling hooks. Support disabling hooks. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Medium |
Support disabling insecure template functions only. Support disabling insecure template functions only. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Center section divider to match table width. Center section divider to match table width. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Dependency | Low |
Bump github.com/zclconf/go-cty from 1.18.1 to 1.19.0. Bump github.com/zclconf/go-cty from 1.18.1 to 1.19.0. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bump github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.28. Bump github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.28. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.0. Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.0. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bump golang.org/x/sync from 0.21.0 to 0.22.0. Bump golang.org/x/sync from 0.21.0 to 0.22.0. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bump golang.org/x/term from 0.44.0 to 0.45.0. Bump golang.org/x/term from 0.44.0 to 0.45.0. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bump github.com/helmfile/chartify from 0.27.0 to 0.28.0. Bump github.com/helmfile/chartify from 0.27.0 to 0.28.0. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bump github.com/helmfile/vals from 0.44.4 to 0.44.5. Bump github.com/helmfile/vals from 0.44.4 to 0.44.5. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bump actions/setup-go from 6 to 7. Bump actions/setup-go from 6 to 7. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Bugfix | Medium |
Ensure OCI registry login when SkipRepos is set. Ensure OCI registry login when SkipRepos is set. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
Full changelog
What's Changed
- build(deps): bump github.com/zclconf/go-cty from 1.18.1 to 1.19.0 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2692
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.28 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2693
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.0 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2694
- build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2695
- build(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2696
- chore: bump helm to v4.2.3 and v3.21.3 by @yxxhero in https://github.com/helmfile/helmfile/pull/2699
- feat: center section divider to match table width by @yxxhero in https://github.com/helmfile/helmfile/pull/2698
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.28 to 1.32.29 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2697
- build(deps): bump github.com/mattn/go-runewidth from 0.0.19 to 0.0.24 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2700
- docs: add OCI auth troubleshooting by @dashitongzhi in https://github.com/helmfile/helmfile/pull/2679
- fix: ensure OCI registry login when SkipRepos is set by @yxxhero in https://github.com/helmfile/helmfile/pull/2701
- build(deps): bump github.com/helmfile/chartify from 0.27.0 to 0.28.0 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2702
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.105.0 to 1.105.1 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2703
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.29 to 1.32.30 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2704
- feat: support disabling hooks by @fabiobaiao in https://github.com/helmfile/helmfile/pull/2691
- build(deps): bump github.com/helmfile/vals from 0.44.4 to 0.44.5 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2706
- build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in https://github.com/helmfile/helmfile/pull/2705
- feat: support disabling insecure template functions only by @fabiobaiao in https://github.com/helmfile/helmfile/pull/2689
New Contributors
- @dashitongzhi made their first contribution in https://github.com/helmfile/helmfile/pull/2679
- @fabiobaiao made their first contribution in https://github.com/helmfile/helmfile/pull/2691
Full Changelog: https://github.com/helmfile/helmfile/compare/v1.7.0...v1.7.1
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About helmfile
Declaratively deploy your Kubernetes manifests, Kustomize configs, and Charts as Helm releases. Generate all-in-one manifests for use with ArgoCD.
Related context
Beta — feedback welcome: [email protected]