← Back to all sparks
H

Helm

INFRA · APIS
Velocity5.0

Package manager for Kubernetes applications

Helm 4.3.2 is a small patch; 4.4 is set for January 13.

kubernetespackage-managementhelm-4end-of-lifesecurity-patches
◆Current state
Helm runs two trains: 3.22 was the last Helm 3 minor, and Helm 4 carries development. 4.3.0 in September brought concurrent status computation, ownership checks before uninstall and reproducible archives. 4.3.2 on November 13 fixes registry clients so Helm can always configure the transport, corrects help text and bumps golang.org/x/net. The notes put 4.4.0 on January 13, 2027 and repeat that no Helm 3 minor releases will follow.
◆Where it's heading
Helm 4 is in a quiet patch phase between minors, and Helm 3 only gets dependency and security updates as it winds down. Users are being steered to Helm 4.
◆Prediction
Expect a Helm 3 patch for dependency CVEs and a 4.4.0 release candidate in late December ahead of the January 13 date.

◆Recent moves

  1. 1d ago

    Helm 4.3.2 fixes registry transport and bumps Go deps

    A two-fix patch: registry clients always get a transport Helm can configure, and help text is corrected, plus golang.org/x/net updates. It keeps 4.3 steady until 4.4 in January.

    View source ↗
  2. 29d ago

    Helm 3.22.1 patches Go dependency vulnerabilities

    3.22.1 only bumps dependencies to remove Go package vulnerabilities and updates the k8s.io packages. It confirms Helm 3 is in maintenance, and the notes set the next patches for November 11 and Helm 4.4.0 for January 13.

    View source ↗
  3. 1mo ago

    Helm 4.3.1 waits for CRDs under hook-only strategy

    The first 4.3 patch fixes CRD establishment timing under HookOnlyStrategy and bumps the linter. It is a small correctness fix that keeps the 4.x line focused on reliable install ordering.

    View source ↗
  4. 2mo ago

    Helm 3.22.0: final minor release, deps and k8s-io 0.37.0

    Helm 3.22.0 is the final Helm 3 minor release — the release notes explicitly say 'primarily dependency updates and k8s-io group to 0.37.0,' with a single registry token-auth scope fix backported. No new capabilities; this is a maintenance close-out for the v3 branch.

    View source ↗
  5. 2mo ago

    Helm 4.3.0: concurrent status, uninstall safety, reproducible archives

    Helm 4.3.0 brings concurrent status computation (eliminating multi-minute delays on large deployments), resource ownership verification before uninstall, SOURCE_DATE_EPOCH support for reproducible chart archives, and a rollback description flag for audit trails. These are practical workflow improvements for teams running Helm at scale in GitOps pipelines.

    View source ↗
  6. 2mo ago

    Helm 3.22.0 RC1: staging candidate for final v3 minor

    Release candidate for Helm 3.22.0 — no notable changes listed, intended for staging validation before the final 3.x minor release. The RC itself carries no new functionality.

    View source ↗