[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	8.13 → 8.14.6
helm	uses-with	minor	v3.8.1 → v3.22.1
helm/chart-releaser-action	action	minor	v1.7.0 → v1.8.0
io.javaoperatorsdk:operator-framework-spring-boot-starter-test	dependencies	minor	6.0.1 → 6.7.1
org.junit.jupiter:junit-jupiter (source)	dependencies	minor	5.12.2 → 5.14.4
io.fabric8:crd-generator-apt	dependencies	minor	7.1.0 → 7.9.0
org.bouncycastle:bcpkix-jdk18on (source)	dependencies	minor	1.80 → 1.86
io.javaoperatorsdk:operator-framework-spring-boot-starter	dependencies	minor	6.0.1 → 6.7.1
com.google.cloud.tools.jib	plugin	minor	3.4.5 → 3.5.4
org.springframework.boot (source)	plugin	minor	3.4.4 → 3.5.16
io.fabric8:crd-generator-collector	dependencies	minor	7.1.0 → 7.9.0
io.fabric8:crd-generator-api-v2	dependencies	minor	7.1.0 → 7.9.0

---

Release Notes

gradle/gradle (gradle)

v8.14.6: 8.14.6

Compare Source

The Gradle team is excited to announce Gradle 8.14.6.

Here are the highlights of this release:

• Java 24 support
• GraalVM Native Image toolchain selection
• Enhancements to test reporting
• Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.6 by updating your wrapper:

./gradlew :wrapper --gradle-version=8.14.6 && ./gradlew :wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.5: 8.14.5

Compare Source

The Gradle team is excited to announce Gradle 8.14.5.

Here are the highlights of this release:

• Java 24 support
• GraalVM Native Image toolchain selection
• Enhancements to test reporting
• Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.5 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.4: 8.14.4

Compare Source

This is a patch release for 8.14. We recommend using 8.14.4 instead of 8.14.

This release addresses two security vulnerabilities:

• Failure to disable repositories failing to answer can expose builds to malicious artifacts
• Failure to disable repositories with unknown host can expose builds to malicious artifacts

It also fixes the following issues:

• #​34365 [Backport] Gradle doesn't stop forked processes
• #​35125 [Backport] Precompiled script plugin with @​file annotation loses package and breaks
• #​35184 [Backport] Different fingerprints in the compile classpath for the same dependency
• #​35228 [Backport] Fix dependency resolution issues
• #​35288 [Backport] Include GradleDslBaseScriptModel in 8.x
• #​36326 [Backport] Improve repository disabling logic
• #​36396 [Backport] Add partial cgroups v2 support
• #​36420 [Backport] Improve Java 25 support in Gradle 8.14

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.14.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.4 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.3: 8.14.3

Compare Source

The Gradle team is excited to announce Gradle 8.14.3.

This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.

Here are the highlights of this release:

• Java 24 support
• GraalVM Native Image toolchain selection
• Enhancements to test reporting
• Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.3 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.2: 8.14.2

Compare Source

The Gradle team is excited to announce Gradle 8.14.2.

Here are the highlights of this release:

• Java 24 support
• GraalVM Native Image toolchain selection
• Enhancements to test reporting
• Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.2 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.1: 8.14.1

Compare Source

The Gradle team is excited to announce Gradle 8.14.1.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.1 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14: 8.14

Compare Source

The Gradle team is excited to announce Gradle 8.14.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

helm/helm (helm)

v3.22.1: Helm v3.22.1

Compare Source

Helm v3.22.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• Bumps dependencies to remove Go package vulnerabilities
• Updates the k8s.io Go packages

Installation and Upgrading

Download Helm v3.22.1. The common platform binaries are here:

• MacOS amd64 (checksum / cf850a81b908f8eef0331e6b18776da2767bcac639ca84472311dad20008495c)
• MacOS arm64 (checksum / e73da8a0b0d5193774fdff17ce6319c7436bb22ee229b45fd64f3c40368c753a)
• Linux amd64 (checksum / 896cf63684a42a723d61c980369d6e588330927deb13676ca0d85006dd6da0ea)
• Linux arm (checksum / a1563d16cf9537db798116d5647ad0ef8cf963fa7cbbe24d8db534250273cccc)
• Linux arm64 (checksum / 4c29e286b279d170fa048ddfc3e4e83dcd069ca9c52102766ba672d7149e694d)
• Linux i386 (checksum / 67b35ee3d31fa93b7ca5884e71beef3c3b5d9bab46ead792081ed2b6131d73c5)
• Linux ppc64le (checksum / 48a9711b69f0b63504f710ba18766dd5f5424fe380e67304aa3c89e1c0b97b5c)
• Linux s390x (checksum / ef039296b433a0a6965fdf55f4ee0ad50e3d94bb70a77e4896309406c9bc8fab)
• Linux riscv64 (checksum / 960ca50df1eb70a50a8cb90fc67573cf047239fc0b72f63514a534e4f2e2ef32)
• Windows amd64 (checksum / 32ce9f4509b81782c9740898c43946e1f97c4d93ec5d10222c9b6eeec21ea043)
• Windows arm64 (checksum / 10104b049309d4c751bca88254843e16edd84141411f63503f10845ea33cbd2f)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.3.2 and 3.22.2 are the next patch releases scheduled for November 11, 2026
• 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)

Changelog

• chore(deps): bump github.com/distribution/distribution/v3 (#​32697) d6c1a0e (dependabot[bot])
• [v3] chore(deps): bump k8s.io group to v0.37.1 (#​32761) 2c7472f (Scott Rigby)
• [v3] chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace otlptracegrpc and otlptracehttp to v1.45.0 (#​32760) 8d91c8f (Scott Rigby)
• chore(deps): bump golang.org/x/net to v0.60.0 for GO-2026-6617 GO-2026-6612 GO-2026-6611 GO-2026-6610 GO-2026-6603 (#​32759) 13edc4f (Scott Rigby)

v3.22.0: Helm v3.22.0

Compare Source

Helm v3.22.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• primarily dependency updates and k8s-io group to 0.37.0

Installation and Upgrading

Download Helm v3.22.0. The common platform binaries are here:

• MacOS amd64 (checksum / bd1d09f316558dda23698527859600936fed1371021ce0f2272d66b2fdcfa69c)
• MacOS arm64 (checksum / 4c9982a6cdeb458b60258df66b55398ca5b19293f6877faffe2909ad6f23dfe0)
• Linux amd64 (checksum / 1e4ab49e429626cf6c6958d914248b78c9730803c2751b87627e171dc800e7bb)
• Linux arm (checksum / 695793765e2246824a7c859562886f79b1cc89d99420c89f940590440f7129ee)
• Linux arm64 (checksum / f14e804dfee240f55525b667488fe9adca349e63e00c9af634c0beb1421ac310)
• Linux i386 (checksum / b96b7a125cc7d38aa952a78b16e96d05426cd9791dd013be51ebab1c203d6729)
• Linux loong64 (checksum / BlobNotFoundThe specified blob does not exist.
  RequestId:8c31497a-101e-0042-27b6-404cb4000000
  Time:2026-09-09T23:55:30.1192401Z)
• Linux ppc64le (checksum / fa304f47163a19f4e275fe4e890465a8a80a6f26ce4772c6b1649355c995def1)
• Linux s390x (checksum / 3f2cfd73018dcb9c25814e89c5946a362a8b951d8cce03152138d8cb28abcbff)
• Linux riscv64 (checksum / 50f84d698daac65bded677c61db7138e082b23e667a3cabeff4fd2521614e498)
• Windows amd64 (checksum / 899615865726d39f9b245e71e848c5bf4adc7ed33a8c43ede660facb48151b43)
• Windows arm64 (checksum / 75a331a3b03d11aed6369bdf6a1f8f9d33635bc820de5cd6025a581292046805)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
• 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)

Changelog

• chore(deps): bump the k8s-io group across 1 directory with 6 updates 144ca65 (dependabot[bot])
• bump version to 3.22 (#​32606) b5de8bb (Scott Rigby)
• fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#​32362) 9dbcb9f (kimsungmin1)
• chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32575) 665ab55 (dependabot[bot])
• chore(deps): bump the k8s-io group with 7 updates (#​32573) 0841093 (dependabot[bot])
• chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#​32563) d0569c7 (dependabot[bot])
• chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32557) bcbdb1e (dependabot[bot])
• chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#​32554) 6cdcc8f (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#​32542) 158719f (dependabot[bot])
• [dev-v3 backport] deps: bump google.golang.org/grpc@​v1.82.1 for GO-2026-6061 (#​32536) a442b8c (Scott Rigby)
• fix: bump go.opentelemetry.io/otel@​v1.44.0 for GO-2026-5158 (#​32535) adab0ef (Scott Rigby)
• chore(deps): bump the github-actions group with 4 updates (#​32524) c068b54 (dependabot[bot])
• chore(deps): bump the github-actions group with 4 updates 74271c4 (dependabot[bot])
• chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 1c50d2f (dependabot[bot])
• chore(deps): bump the github-actions group with 4 updates (#​32509) 8821540 (dependabot[bot])
• chore(deps): bump actions/stale in the github-actions group (#​32488) 05a2798 (dependabot[bot])
• chore(deps): bump ossf/scorecard-action in the github-actions group (#​32461) c27e757 (dependabot[bot])
• fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 bd392c6 (Karan V)
• chore(deps): bump the k8s-io group with 7 updates 66a6f56 (dependabot[bot])
• chore(deps): bump the github-actions group with 4 updates 7cd0125 (dependabot[bot])
• chore(deps): bump github/codeql-action/upload-sarif (#​32449) 79330fc (dependabot[bot])
• chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#​32446) b29c730 (dependabot[bot])
• chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 973bb34 (dependabot[bot])
• chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 e25efcf (dependabot[bot])
• chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 98e547f (dependabot[bot])
• chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#​32412) 7f4b72a (dependabot[bot])
• chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#​32381) 2cf1437 (dependabot[bot])
• chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#​32383) 270f73b (dependabot[bot])
• chore(deps): bump github/codeql-action/upload-sarif (#​32382) 9e3a010 (dependabot[bot])
• ci: auto-label PRs targeting dev-v3 (#​32340) c9ed0ca (Benoit Tigeot)
• chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#​32331) b842ddf (dependabot[bot])
• chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#​32332) f6047c9 (dependabot[bot])
• chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#​32357) f2f6bf6 (dependabot[bot])
• chore(deps): bump actions/checkout from 4.2.2 to 7.0.0 (#​32368) 69f70a8 (dependabot[bot])
• chore(deps): bump actions/stale from 9.0.0 to 10.4.0 (#​32369) c95222a (dependabot[bot])
• chore(deps): bump actions/setup-go from 5.1.0 to 6.5.0 (#​32358) fc71f51 (dependabot[bot])
• chore(deps): bump github/codeql-action/upload-sarif (#​32360) 6596318 (dependabot[bot])
• chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#​32359) 5d9943c (dependabot[bot])
• chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#​32356) a3d7a6c (dependabot[bot])
• chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#​32354) 8e19970 (dependabot[bot])
• chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#​32353) 24ef09a (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#​32310) 8082dd4 (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#​32308) 2c24490 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#​32306) 953d280 (dependabot[bot])
• fix(engine): prevent Files.Lines panic on empty file c02a9ae (Mahesh Sadupalli)
• Apply suggestions from code review 093015b (Benoit Tigeot)
• fix: drop containerd v1 dep to resolve govulncheck CVEs a061886 (Benoit Tigeot)
• chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 f979836 (dependabot[bot])
• chore(deps): bump github.com/cyphar/filepath-securejoin c444665 (dependabot[bot])
• chore(deps): bump the k8s-io group with 2 updates 1bf9b5f (dependabot[bot])
• fixes b7a0fd0 (Matheus Pimenta)
• chore(deps): bump the k8s-io group across 1 directory with 2 updates 119a7d9 (dependabot[bot])
• fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 2fb05f8 (Terry Howe)
• chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 acc867b (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 b920935 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 5b5ef19 (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 af67af8 (dependabot[bot])
• Update .github/env ceb9a62 (Terry Howe)
• ci: bump golangci-lint to v2.11.3 for go 1.26 0ed92f0 (Terry Howe)
• chore: bump go to 1.26 c678c0c (Terry Howe)
• chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 12c4d45 (dependabot[bot])
• chore(deps): bump github.com/distribution/distribution/v3 a0f9711 (dependabot[bot])
• chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 995c31e (dependabot[bot])
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 8c17168 (dependabot[bot])
• chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 fe141bd (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 980836f (dependabot[bot])
• fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 1dde6c7 (Terry Howe)
• chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 0162fed (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 a664a58 (dependabot[bot])
• [v3] Bump to version v3.21 (#​32103) 3033a77 (George Jenkins)
• [v3 backport] Fix rollback for missing resources 0a47573 (Feruzjon Muyassarov)
• fix(action): avoid nil REST client getter panic when installing CRDs 711a4ea (sergiochan)

v3.21.4: Helm v3.21.4

Compare Source

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #​32303 by @​mahesh-sadupalli
• fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #​32463 by @​karan-vk
• [dev-v3 backport] fix: bump go.opentelemetry.io/otel@​v1.44.0 for GO-2026-5158- #​32535 by @​scottrigby
• [dev-v3 backport] deps: bump google.golang.org/grpc@​v1.82.1 for GO-2026-6061- #​32536 by @​scottrigby
• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #​32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

• MacOS amd64 (checksum / 9173d05edf9592c6be1d0412ffafd935448dfc7a63c2bc732b8c67e55503e8a8)
• MacOS arm64 (checksum / 6e0bf5eb6daafc2b1ec34bb5ba04ef103f3afc16192fb19805c2924d7ea1033f)
• Linux amd64 (checksum / 61f88ab166748cb19604d7884cb100ae9ccb13804ddeb98e08af167eacbb6a14)
• Linux arm (checksum / b02709eab565cfcee8acdb10c143daf05ab06d994baeb85e63976513367925a7)
• Linux arm64 (checksum / b54c04b4e0b2540bbdc08c17a121dab70e9a2ed0de5705528fec68a5fd3b85a7)
• Linux i386 (checksum / 71280742be811c7d9d6b4546125f185ba01c6fd967e47491766b0055a0570cf5)
• Linux ppc64le (checksum / ba4e4f440b6992f119160e3ceea29d80158546c9241748332ffa1cfdfbb0bd8f)
• Linux s390x (checksum / 321de1ff6fe57a9a5eca6b56d78d6959babe295ec7aab49af1a0d2bcfc02dfc8)
• Linux riscv64 (checksum / fef3ec7e1ddafe8927253ad79f2f8e3ac41f3f92328eb2c23bd4513b4421e5d9)
• Windows amd64 (checksum / 268a7b98b313403055e4f31807aeaac529c90e1188acd7857ae3e960b0f67cce)
• Windows arm64 (checksum / e23545fff21ef04853a9540925dd73c4b9caaa24ee7fdd8482b1ee626a4eecc9)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

• chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#​32308) 813176c (dependabot[bot])
• [dev-v3 backport] deps: bump google.golang.org/grpc@​v1.82.1 for GO-2026-6061 b6aa8b1 (Scott Rigby)
• fix: bump go.opentelemetry.io/otel@​v1.44.0 for GO-2026-5158 57ce7ae (Scott Rigby)
• fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449 (Karan V)
• fix(engine): prevent Files.Lines panic on empty file 955dfab (Mahesh Sadupalli)

Full Changelog: helm/helm@v3.21.3...v3.21.4

v3.21.3: Helm v3.21.3

Compare Source

Helm v3.21.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.21.3. The common platform binaries are here:

• MacOS amd64 (checksum / 76d0db4730b05d3d625eee11e80f0721b32b4d8422f4e5d093de6337bf3ac9f8)
• MacOS arm64 (checksum / 19879a848cad832b7a1ac24b767a481d20fb3b95ab53a220849649422ada144e)
• Linux amd64 (checksum / 15e041a93a590dce8100f39385cd98c84a765c9e36aeeb9e2dc6ff9e4769e2e0)
• Linux arm (checksum / 60f3106ba5e24371af51574fccf489d382d2f59c56ce566d02f2a6f00bf4fb3b)
• Linux arm64 (checksum / 67f58155079ff9ffab98ba5c88daff0ed9b542f3a4732f5dd426dde7dd0f5244)
• Linux i386 (checksum / 95e7ef76d4631f30e3f6c17d4355420878ca85771dbe7deb7b797521007aebe4)
• Linux ppc64le (checksum / c8657c0f77b7d3e2f9508c4a9a545b5862d01690f2a528fbbe659a3a4d534382)
• Linux s390x (checksum / d6c2dd29b32da1cb9dfef5af0cb93a1f391beca4e714779186330681b39f4b59)
• Linux riscv64 (checksum / ff063cc304a60af858242aa71b5635852d65aa7d3301a46eca17a31c54e8d994)
• Windows amd64 (checksum / ff490897e07e976c65a9bd7690cfc139b35ba5e8f25d00eaf1e53a30f1ad3f62)
• Windows arm64 (checksum / 1d409b98f99a38704ccb3f0917cbad2417ed53f75751902b6bd84447803b69a9)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.2.4 and 3.21.4 are the next patch releases scheduled for August 12, 2026
• 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

• Apply suggestions from code review 1ad6e68 (Benoit Tigeot)
• fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e (Benoit Tigeot)
• chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178b (dependabot[bot])

v3.21.2: Helm v3.21.2

Compare Source

Helm v3.21.2 is a patch release to correct bump the Kubernetes client libraries (client-go, etc) to match the expected Kubernetes v1.36 release. U

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.