Skip to content

Release history

helm releases

The Kubernetes Package Manager

Back to tool Latest release

All releases

26 shown

Review required
v3.21.0 Bug fix
Dependencies Auth

Nil value preservation

Open
No immediate action
v4.2.0 Breaking risk

Dry‑run respects generateName

Open
v3.20.2 Security relevant
Security fixes
  • GHSA-hr2v-4r36-88hr: Chart extraction path traversal via dot-segment in Chart.yaml
View release on GitHub
v4.1.4 Security relevant
Security fixes
  • GHSA-hr2v-4r36-88hr: Chart extraction path traversal
  • GHSA-q5jf-9vfq-h4h7: Plugin verification fails open when .prov missing
  • GHSA-vmx8-mqv2-9gmg: Plugin metadata path traversal
View release on GitHub
v4.1.3 Breaking risk

Fixed backwards compatibility regression for --atomic flag and critical bugs.

Full changelog

Helm v4.1.3 is a patch release. Users are encouraged to upgrade for the best experience.

Note there was no 4.1.2 release due to a release automation issue.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed a bug where --dry-run=server was not respecting generateName #31563
  • Fixed a bug where empty CRD resources caused a crash. Now it prints an error #31578
  • Fixed a bug where OCI references with tag+digest failed with "invalid byte" error #31601
  • Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key #31644
  • Fixed a regression since Helm 3.18.0 where Pulling charts from OCI repositories that use an index to store both Container Images and Helm Charts under the same tag failed #31776
  • Fixed a Helm 4 regression where gotemplate white space trimming directly after YAML doc separators, when present after postrendering, caused YAML file corruption #31868
  • Fixed a bug where FailedStatus is treated as a terminal state, causing upgrades to fail prematurely when cluster autoscalers needed time to provision nodes, or when pods were being deleted during rolling updates #31897
  • Fixed broken backwards compatibility for deprecated --atomic flag on install command #31901
  • SDK: Fixed a Windows 'Access Deined' error if multiple processes try to download the same chart version concurrently #31128
  • SDK: Fixed a bug where users did not receive any logs from the waiter, causing confusion as several minutes could pass with no user feedback #31717
  • SDK: Fixed a bug where server-side apply defaults did not always match the CLI defaults #31732
  • SDK: Fixed a Go import issue when downstream tooling attempted to vendor helm.sh/helm/v4/pkg/kube #31852

Installation and Upgrading

Download Helm v4.1.3. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

Changelog

  • chore(defaults): server-side apply SDK defaults should always match the CLI defaults c94d381b03be117e7e57908edbf642104e00eb8f (Matheus Pimenta)
  • whitespace b36d660fb7a5a162d59dcc7877af190b477ecf2b (Austin Abro)
  • use logger with waiter 04a91af89e185fb2ff08592057726d54fdd22471 (Austin Abro)
  • Remove refactorring changes from coalesce_test.go c3c57dba9878074a7642f2cdf583e809bba7f96e (Evans Mungai)
  • Fix import d47cb2b7efaa26090510f4c2289127f40451062e (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go 790bf929d5d341df663e0219338fcbf0d5a3119b (Evans Mungai)
  • Fix lint warning f7cec12e23fe800495814432da4368b54c6d4552 (Evans Mungai)
  • Preserve nil values in chart already d94a5c97cbff6b8e857c578ac7fd29407aa60907 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map 8c5fe4ef9781c714dc121288a4d499e62cc10bf8 (Evans Mungai)
  • chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 217db28a4b75bff615275dc1e3975cf4d389c1d9 (dependabot[bot])
  • Restored --atomic flag on install command 7cb43e0c58d8ccf18ca54eadb8d8d6cfb14c06f7 (Travis Leeden)
  • fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 5b26d4f1f99091262fef50ed51133e7ae8e3b011 (Terry Howe)
  • fix: bump fluxcd/cli-utils to v0.37.2-flux.1 360c1315ba2d468fcff77193f52764c6ad912c90 (Terry Howe)
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 69a0a92ae3025cb00b480cb1084670d84b9fa018 (dependabot[bot])
  • fix: insert newline after doc separators glued to content by template trimming b868e6a7cce696744d3f0c87e3f6bba6a779aff3 (Matheus Pimenta)
  • fix: correct import comment in statuswait.go from v3 to v4 dbfbea91e34220911481f82fc6831284d954959a (rohansood10)
  • chore(deps): bump the k8s-io group with 7 updates 099192c285233653032e13f557e1b4a7c31e046b (dependabot[bot])
  • add image index test 4967ead76215e2ea694c37164d14520da9ba8bde (Pedro Tôrres)
  • fix pulling charts from OCI indices 2fe6b106e6d515b6792d53aff517489ae97387be (Pedro Tôrres)
  • fix: handle OCI digest algorithm prefix in chart downloader (#31601) e3e2d01ef45c6e4179d0536ea4a475f18fa23846 (Evans Mungai)
  • fix(install): check nil for restClientGetter and fix tests c15e7114dc0a0f24e0fda65dff83e7a18e264f60 (Manuel Alonso)
  • chore(refactor): better testing and functionality for installing crd df82e68ce1cac6825a59ed43d68d7560d6426979 (Manuel Alonso)
  • fix(test): fix tests and check nil for restclient 4b896ca82fa827760086998d6521965e0ace059f (Manuel Alonso)
  • fix(test): merge fix correctly 3fc79399c8af02b6704c10cba14be2ced9497cb2 (Manuel Alonso Gonzalez)
  • fix(install): add more tests and check nil file data 6017d2b470b07a4f55efd2c55ac0745203ddcd0b (Manuel Alonso)
  • fix(test): no check empty resources f451967ab5a5a9b1a26deb699bd1a1f4f2ba6b1e (Manuel Alonso)
  • fix(install): check lenght and file nil, add tests fdadff59eb8c3552de76c7647a9c787c248cdbd2 (Manuel Alonso)
  • fix(action): crd resources can be empty 10d606726560f1e813617c050c7b9cfbb8b0cb26 (Manuel Alonso)
  • fix: casing issue fixed 0fec40f9b61a1dc5799e67bd4fb4ea4321cdd836 (Mujib Ahasan)
  • fix: error handled correctly 263749874cb21ba31ebca17fe6c19fb3d0379417 (Mujib Ahasan)
  • fix: doc string added 961d7d7cd6b39ccc3a63bce7bba505b94a9be384 (Mujib Ahasan)
  • update: test coverage added for helper function validateNameAndGenerateName 29e45067f3f5a772c1400eb756605ba3bc615176 (Mujib Ahasan)
  • update: helper function added for the business logic d55b0b9022017aa7a5005d1c6bdc049872bc37f7 (Mujib Ahasan)
  • generateName is also considered in logic c1c090e8cead42ee16c36f987f2534c543b556fc (Mujib Ahasan)
  • update: business logic respected for skipping object missing name 5e093136f456232f0c80c4d2481e5191b3c72530 (Mujib Ahasan)
  • fixed: --dry-run=server now respect generateName f289d1605c9f02c843dd1b5dd03221fdb980f28e (Mujib Ahasan)
  • fix(downloader): safely handle concurrent file writes on Windows bfac7393e4cc8b22a36fb015264d10ddb30e03da (Orgad Shaneh)
View release on GitHub
v4.1.0 Breaking risk
Notable features
  • --wait flag with explicit strategy selection
  • --no-headers flag for helm repo list
  • Custom kstatus readers support
View release on GitHub
v4.0.5 Breaking risk

Fixed uninstall with --keep-history, rollback, plugin naming, and dependencies.

Full changelog

Helm v4.0.5 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed bug where helm uninstall with --keep-history did not suspend previous deployed releases #12556
  • Fixed rollback error when a manifest is removed in a failed upgrade #13437
  • Fixed check to ensure CLI plugin does not load with the same name as an existing Helm command
  • Fixed helm test --logs failure with hook-delete-policy "hook-failed" or "hook-succeed" #9098
  • Fixed a bug where empty dependency lists were incorrectly treated as present
  • Fixed a bug where the watch library did not only watch namespaces associated with the objects
  • Fixed regression in downloader plugins environment variables #31612
  • Fixed bug where --server-side flag is not respected with helm upgrade --install #31627
  • For SDK users: exposed KUBECONFIG to env

Installation and Upgrading

Download Helm v4.0.5. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.0 and 3.20.0 is the next minor releases and will be on January 21, 2026
  • 4.1.1 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • fix(upgrade): pass --server-side flag to install when using upgrade --install 1b6053d48b51673c5581973f5ae7e104f627fcf5 (Evans Mungai)
  • fix(cli): handle nil config in EnvSettings.Namespace() 1e3ee1d2ba5a421165fe053a41aa4071cf69ed62 (Zadkiel AHARONIAN)
  • fix(getter): pass settings environment variables 31bd995ce201e295ff2f87e11fdf13bf55fdffd2 (Zadkiel AHARONIAN)
  • test(statuswait): fix Copilot code review suggestion for goroutine in tests 41a6b364a1433dabcefca945619b55a43046f6ce (Mohsen Mottaghi)
  • test(statuswait): add more tests suggested by Copilot code review 2a2e6f722a95a9c312d9f4133e98a67ceaaa5054 (Mohsen Mottaghi)
  • test(statuswait): add some tests for statuswait 3818c02f81cdaf2a0eb9e0082d1f89f2cff9df08 (Mohsen Mottaghi)
  • fix: use namespace-scoped watching to avoid cluster-wide LIST permissions 66cab24bb95f68448a83304c6d3297ec45c8fdb7 (Mohsen Mottaghi)
  • Use length check for MetaDependencies instead of nil comparison abf2007685501002a5051ded95de9090b5c530f3 (Calvin Bui)
  • Deal with golint warning with private executeShutdownFunc 4b3de18628896dc2924643e4a32ab4b9228eb922 (Benoit Tigeot)
  • Code review 321277002a2513d841cc81480dff37985f28e41a (Benoit Tigeot)
  • Fix linting issue 417aae9c01a79c01f3de8c2a08079fddada6078e (Benoit Tigeot)
  • Update pkg/action/hooks.go 6c838b4a18fa345cce5a22367522058d3d2ebcc2 (Michelle Fernandez Bieber)
  • added check for nil shutdown c5d87f2f7da0f3d90bd69d71daa70ada29c9d5b9 (Michelle Fernandez Bieber)
  • cleaned up empty line 53175b76c784a75610c66c36a17787fc463a242d (Michelle Fernandez Bieber)
  • updated comment and made defer of shutdown function return errors as before and not the possible shutdown error d2df1ab59e235c2a2edf27bbfdc72ccc09b3af2c (Michelle Fernandez Bieber)
  • added shutdown hook that is executed after the logs have been retrieved 5b223de7c809fe026f1fff03d1fa684187bdfcbe (Michelle Fernandez Bieber)
  • Fix TestCliPluginExitCode e845b68fe3ea0c91f429b384e3b78f3f853ae208 (tison)
  • Check plugin name is not used 30bfd57c5f677b12ea88a32b5e66735967570e4e (tison)
  • Fix rollback for missing resources 0fd2c418b0146c1ea6182c7f7c7676a345554156 (Feruzjon Muyassarov)
  • fix: assign KUBECONFIG environment variable value to env.Kubeconfig b456e274652c84316d5bfcf06d6a8b648e3cc23b (LinPr)
  • fix(rollback): errors.Is instead of string comp e2021f8818d2cf20c118d91fdba8fba5c472c3bb (Hidde Beydals)
  • fix(uninstall): supersede deployed releases af7c15303ace3c506c5c790c41186a09df1c8a54 (Hidde Beydals)
View release on GitHub
v4.0.0 Breaking risk
Breaking changes
  • CLI flags and output format changed
  • SDK API incompatible with v3
  • Post-renderers now implemented as plugins
Notable features
  • WebAssembly-based plugin system
  • Server-side apply support
  • Content-based caching for charts
View release on GitHub
v3.19.1 Bug fix

Bug fixes for chart pulling, dependency handling, and crypto updates.

Full changelog

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.0.0 is the next major release and will be on November 12, 2025
  • 3.19.2 and 4.0.01 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 4f953c223ba21103268e0b664c64240bc69fced7 (dependabot[bot])
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 6801f4d6b3c97a146e21034a34b3d098d0013931 (Benoit Tigeot)
  • Avoid "panic: interface conversion: interface {} is nil" 2f619be224790e7b2447b10faa3b965701177e40 (Benoit Tigeot)
  • Fix helm pull untar dir check with repo urls 8112d47cbba491a70d84005e5a88bd0e72ef5040 (Luna Stadler)
  • Fix deprecation warning 5dff7ce71b53828d36121f81ac59cf389b811ebc (Benoit Tigeot)
  • chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 2dad4d27fa39e658bfb87c9f61f3aea09669536a (dependabot[bot])
  • Add timeout flag to repo add and update flags a8337106b434584b600d2b51c191610dde34fc53 (Reinhard Nägele)
  • chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 2e12c81d2aa702e31340582d9f9f7fe05d2700b4 (Dirk Müller)
View release on GitHub
v3.19.0 New feature
Notable features
  • HTTPRoute support in helm create
  • Fixed OCI chart pull regression
  • Fixed JSON Schema validation
View release on GitHub
v3.18.5 Security relevant
Security fixes
  • GHSA-9h84-qmv7-982p: JSON Schema memory exhaustion
  • GHSA-f9f8-9pmf-xv68: YAML panic
View release on GitHub
v3.17.4 Security relevant
Security fixes
  • GHSA-557j-xg8c-q2mm: Chart dependency update with malicious Chart.yaml and symlink
View release on GitHub
v3.18.4 Security relevant
Security fixes
  • GHSA-557j-xg8c-q2mm: Chart dependency update with malicious Chart.yaml and symlink
View release on GitHub

Beta — feedback welcome: [email protected]