LoginSign Up
← Back to all sparks
H

Helm

INFRA · APIS
Velocity5.0

Package manager for Kubernetes applications

helm.sh ↗

Helm 3 gets a security patch on its way out; 4.4 is set for January.

kubernetespackage-managementhelm-4end-of-lifesecurity-patches
◆Current state
Helm runs two trains: 3.22 was the last Helm 3 minor, and Helm 4 carries active development. 4.3.0 brought concurrent status computation, ownership checks before uninstall and reproducible archives, and 4.3.1 waits for CRDs under the hook-only strategy. 3.22.1 bumps dependencies to clear Go vulnerabilities and updates the k8s.io packages.
◆Where it's heading
Helm 4 is focused on correctness for GitOps and CI pipelines at scale, while Helm 3 is in patch-only mode carrying dependency and security bumps. The project now publishes a fixed patch cadence for both lines, which makes end-of-life planning predictable for operators.
◆Prediction
The release notes schedule 4.3.2 and 3.22.2 for November 11 and Helm 4.4.0 for January 13, 2027; expect Helm 3 patches to stay dependency-only.

◆Recent moves

  1. 13d ago

    Helm 3.22.1 patches Go dependency vulnerabilities

    3.22.1 only bumps dependencies to remove Go package vulnerabilities and updates the k8s.io packages. It confirms Helm 3 is in maintenance, and the notes set the next patches for November 11 and Helm 4.4.0 for January 13.

    View source ↗
  2. 14d ago

    Helm 4.3.1 waits for CRDs under hook-only strategy

    The first 4.3 patch fixes CRD establishment timing under HookOnlyStrategy and bumps the linter. It is a small correctness fix that keeps the 4.x line focused on reliable install ordering.

    View source ↗
  3. 1mo ago

    Helm 3.22.0: final minor release, deps and k8s-io 0.37.0

    Helm 3.22.0 is the final Helm 3 minor release — the release notes explicitly say 'primarily dependency updates and k8s-io group to 0.37.0,' with a single registry token-auth scope fix backported. No new capabilities; this is a maintenance close-out for the v3 branch.

    View source ↗
  4. 1mo ago

    Helm 4.3.0: concurrent status, uninstall safety, reproducible archives

    Helm 4.3.0 brings concurrent status computation (eliminating multi-minute delays on large deployments), resource ownership verification before uninstall, SOURCE_DATE_EPOCH support for reproducible chart archives, and a rollback description flag for audit trails. These are practical workflow improvements for teams running Helm at scale in GitOps pipelines.

    View source ↗
  5. 1mo ago

    Helm 3.22.0 RC1: staging candidate for final v3 minor

    Release candidate for Helm 3.22.0 — no notable changes listed, intended for staging validation before the final 3.x minor release. The RC itself carries no new functionality.

    View source ↗
  6. 1mo ago

    Helm 4.3.0 RC1: staging candidate for 4.3 feature release

    Release candidate for Helm 4.3.0 — no notable changes listed in the RC itself; the feature work from 4.3.0 (concurrent status, uninstall ownership checks) was validated here before the stable release.

    View source ↗