Last 7 days
0
Features: 0
Changes: 0
Fixes: 0
Deprecations: 0
Helm
Package manager for defining, installing, and upgrading Kubernetes applications.
Latest Helm changelog updates, official release notes, breaking changes, security patches, pricing changes, and developer reactions in one product feed.
Follow this Helm release-notes page to spot useful features, risky migrations, noisy announcements, and source links before they hit your backlog.
Where Helm updates are checked
Changes.Watch links back to official changelog and release-note sources so summaries stay easy to verify.
Related changelog channels
Use channels to follow groups of tools around a stack, workflow, or topic.
Helm updates by type
Rolling windows show how many product updates landed in the last 7, 30, 90, and 365 days, grouped by existing changelog semantics.
0
2
8
28
Latest Helm changelog updates
Fixed panic in engine when handling empty files.
Improved error reporting for helm template debug and fixed panic on repeated IsReachable calls.
Updated containerd to v1.7.33 and removed v1 support to resolve known CVEs
- Updated golang.org/x/crypto dependency to version 0.54.0
Updated Helm to use Kubernetes client libraries v1.36, aligning with the upcoming Kubernetes v1.36 release.
Revert the previous fix for a race condition in WaitForDelete, restoring original behavior.
Fixed data race in FailingKubeClient GetWaiterWithOptions and corrected helm command success output to stdout.
Fixed a nil‑pointer panic in client‑only helm template flows, returning proper errors.
Upgrade Kubernetes client libraries to v1.36 and bump numerous Go dependencies
Switches release builds to Goreleaser and adds support for the loong64 architecture
Upgrade to Helm v3.20.2 to apply critical security fixes (GHSA‑hr2v‑4r36‑88hr).
Patch resolves multiple security vulnerabilities (GHSA) such as plugin provenance bypass, unsigned plugin installs, path traversal, and chart extraction directory collapse.
Fixed bug where user-provided nil values were not preserved when a chart default is an empty map or missing a key
- Fixed numerous bugs including dry‑run generateName handling, crashes on empty CRD resources, OCI reference parsing, and regression with OCI indexes and whitespace trimming after post‑render.
Added fine‑grained context options for waiting in kstatus (new feature).
Upgrade SDK to k8s API v0.35.0 and bump Go to v1.25, delivering new language and API support
Added multiple new CLI features such as chart name in dependency logs, a no‑headers flag for helm repo list, and explicit wait‑strategy selection including hookOnly
Fix warning when removing subchart values via override
Fixed several critical bugs: helm uninstall with keep‑history now correctly suspends prior releases; rollback errors on missing manifests are resolved; CLI plugin name clashes, test hook failures, empty dependency handling, watch namespa...
Rebuilds Helm v4.0.2 with the latest Go toolchain to patch a Go CVE.
Rebuilt Helm v3.19.3 with the latest Go toolchain to fix a Go CVE.
Fixed fallback version reporting and prevented segmentation faults on empty YAML in multidoc.
Bumped golang.org/x/crypto to v0.45.0.
Fixed multiple test failures, logging bugs, and syntax errors in documentation.
Introduces a redesigned plugin system supporting WebAssembly plugins, post‑renderers as plugins, and logging via slog.
Helm v3.19.2 is a patch rebuild of v3.19.1 with no functional code changes.
Updated key dependencies (containerd, spf13/pflag, golang.org/x/crypto) and improved jsonschema handling
Fixed regressions: helm pull OCI chart auth, helm lint JSON schema refs, go.mod tidy, k8s version parsing, redirect registry handling, and legacy Docker login support.
Patch release Helm v3.18.6, encouraging users to upgrade.
Addresses security vulnerabilities such as memory exhaustion from specific JSON schema values and panic caused by malformed YAML
Patch release Helm v3.17.4 resolves security advisory GHSA-557j-xg8c-q2mm concerning malicious Chart.yaml content and symlink attacks.
Upgrade to Helm v3.18.4 to address the GHSA-557j-xg8c-q2mm security vulnerability in chart dependency handling.
Updated golang.org/x/crypto dependency to version 0.39.0
Fixed legacy Docker login support that was broken.
Fixed regressions in template generation and OCI registry interactions introduced in 3.18.0.
Added JSON Schema 2020 support for chart validation
Helm v3.17.3 is a security patch release; users are strongly encouraged to upgrade.
Patch release v3.17.2 with updated binaries and checksums for multiple platforms
Added tests for nullifying nested global values, removing entire objects, and overriding subcharts with null values.
Add OCI digest support for pulling and installing charts
Helm v3.16.4 is a patch release encouraging users to upgrade for the latest fixes and improvements.
Fix label name issue and typo in chartfile lint test
Fixes handling of Helm index with broken chart versions and adds tests for the scenario
Upgrade to Helm v3.16.1 to resolve a regression introduced in 3.16.0
Added sha512sum template function and ActiveHelp for commands without additional args.
Patch release v3.15.4 updates dependencies (k8s.io group and docker) and provides signed binaries with checksums for all platforms.
Fixed burst limit setting for discovery operations
Security patch release; users are strongly urged to upgrade
Fixes build issue causing `helm version` to report the wrong release candidate instead of the actual version
Added optional hiding of secrets during dry‑run install/upgrade to protect sensitive data
Added helper to detect uninstalled releases and fixed reinstall of previously uninstalled charts with history retention.
Add note about dry‑run displaying secrets and improve error messages
Security patch fixing an uninitialized variable vulnerability in Helm's index and plugin YAML parsing, discovered by a contributor and AlphaSense researcher.
Fixed a path traversal vulnerability in chart saving and download logic
Added new `helm search` flag `--fail-on-no-result` and accelerated the `tpl` function with nested define access
Patch release v3.13.3 updates Helm libraries for Kubernetes 1.28.4
Updated key dependencies (grpc, docker, golang/net) and applied assorted internal fixes.
Fix import values precedence issue
- Added multiple dry‑run flag options and clarified value‑precedence handling, allowing null to delete values (regression fixed in 3.13.1).
Upgrade to Helm v3.12.3 which bumps Kubernetes modules to v0.27.3
Added new GetRegistryClient method to Helm's codebase.
Fixed helm lint infinite loop caused by malformed template objects.
Added OCI registry support with annotations, insecure registry handling, and custom certificate options
Updated dependencies: golang.org/x/text to 0.9.0, docker/docker, and containerd to 1.7.0
Updated rubenv/sql-migrate dependency to v1.3.1
Security patch addressing CVE where the getHostByName template function could disclose information; users are strongly encouraged to upgrade to v3.11.1.
Added helm status command to show core resource status with a new flag
Security patch resolving stack overflow and segmentation‑fault vulnerabilities in strvals, repo, and chartutil packages that could lead to denial‑of‑service.
Fixed function name typos in comments
Patch release v3.10.1 with numerous bug fixes and dependency updates (Azure CLI repo, Kubernetes 1.25.2, etc.).
Added --set-json flag, --list-no-headers output option, and a client‑side burst limit for throttling
Helm 3.9.4 is a security‑focused patch release addressing an out‑of‑memory panic in the strvals package that could lead to denial‑of‑service attacks.
Patch release v3.9.3 includes a security fix for CVE‑2022‑1996 by bumping k8s.io/kube openapi.
Helm v3.9.2 is a patch release rebuilt with Go 1.17.12, adding numerous CVE fixes to address security vulnerabilities.
Patch release Helm v3.9.1 includes bug fixes and minor improvements
Added a new quiet flag to `helm lint` and a post‑renderer args flag for passing arguments to the post renderer.
Fixed downloader plugin error handling, tarFromLocalDir path saving, value precedence, and validation error messaging
Updated Kubernetes dependencies (0.23.4, 1.23.3) and refreshed related libraries
Adds general‑availability OCI registry support, including version ranges and semver build tags
Fix memory leak in the upgrade action
Helm 3.7.1 is a patch release that bumps containerd to 1.5.7 and includes several bug fixes and a documentation typo correction in Charts.yaml.
Experimental OCI workflow revamped: helm chart export/list/remove removed, helm pull/push replace them, and a new OCI manifest format requires repackaging existing OCI charts (breaking change)
Fixed multiple bugs including Helm dependency version handling, URL getter behavior, TLS client repo config usage, and release decoding errors.
Fix regression bug introduced by the security patch in v3.6.1
Helm 3.6.1 is a security patch release addressing credential leakage when a Helm repository references another domain.
Add Apple Silicon (macOS arm64) binary support and expand OCI capabilities, including continued OCI experiment refinements and improved auto-completion.
Patch release v3.5.4 with bug‑fixes and updated deprecation notices
Helm v3.5.3 is a patch release that primarily introduces bug fixes and minor improvements.
Fixed three security issues (two in upstream dependencies, one in Helm code) and updated Sprig random functions.
Helm 3.5.1 is a patch release rebuilt with Go 1.15.7, which includes critical security fixes from the Go runtime.
Added OCI registry support, enabling oci:// scheme for chart dependencies and implementing helm pull for OCI registries (experimental flag required).
Upgrade Helm binaries to include Kubernetes 1.19.4 package versions
Add a new `--skip-refresh` flag to `helm dep build` with unit tests
Added repository migration for stable/incubator charts with auto‑detection and blocking of old URLs (breaking change).
Added a flag to helm init to skip adding the deprecated stable and incubator chart repositories and switched the default stable repo URL to a new long‑term archive location with warnings for old URLs
Fixes regressions introduced in Helm 3.3.2, including import package issues and idempotent repo add failures
Fixed a bug that prevented Helm from loading chart repository index files containing extra metadata.
Fixed a bug where Helm failed to load chart repository index files containing extra metadata
Helm v2.16.11 is a security patch release fixing four critical issues including unsanitized plugin/alias names and non‑strict parsing of index.yaml and plugin.yaml.
Updated Helm to v3.3.2 with patches for multiple security issues, including unsanitized plugin fields and stricter YAML parsing of repository metadata
Patch release v3.3.1 with multiple bug fixes and minor improvements
Final Helm v2 bugfix release before deprecation; encourages migration to Helm v3.
Added new Helm environment variables, HelmVersion field to Capabilities, and enhanced linting checks (name validation, chart.yaml/appVersion validation, missing selector detection).
Helm 2.16.9 now fails with an error on malformed plugin paths, preventing silent fixes and reducing future security risk.
Helm v3.2.4 patches a security vulnerability in the HTTP plugin installer that affected all Helm 3 versions prior to 3.2.4.
Patches a high‑severity Go crypto vulnerability that could cause a panic/DOS via malformed X.509 certificates on 32‑bit systems.
v3.2.3 restores missing commits from v3.2.1 that were omitted in v3.2.2 due to a release process error.
Security release fixing Go module proxy cached wrong SHA, preventing occasional Go toolchain security errors despite no actual vulnerability.
Patch release 3.2.1 adds numerous bug fixes and stability improvements for Helm 3.2
Patched numerous bugs across Helm core and Tiller, including pod list sorting, nil‑pointer crashes, template recursion limits, Go 1.14 compatibility, job waiting, and missing API versions.
Helm v3.1.3 is a patch release that addresses security issues and users are encouraged to upgrade.
Major autocompletion improvements and a new PostgreSQL SQL driver (beta) added
Helm v2.16.6 patch release with bug fixes, including a nil pointer error and Go 1.14 compatibility updates.
Fixes a validation issue that caused failures on certain Kubernetes minor versions (e.g., 1.15.x).
Patch release v2.16.4 adds several bug fixes such as template recursion limits, status display, and improved handling of corrupted Tiller storage
Patch release v3.1.2 adds numerous bug fixes (autocompletion, Windows archive path handling, TLS config correction, skipCRDs flag for helm upgrade, Helm‑2 repo‑alias compatibility, Chart.lock packaging, verification output, dependency pr...
Helm 3.1.1 is a patch release that primarily fixes bugs and improves stability
Helm v2.16.3 is a security patch release addressing CVE‑2019‑1551; users employing DH512 keys are advised to upgrade.
Security patch release addressing CVE‑2019‑1551 (openssl); Helm/Tiller not directly vulnerable but DH512 key users should upgrade.
Added post‑render hooks and restored the description flag for custom release notes
Fixed numerous bugs across Helm core, including logging, storage handling, template recursion, chart rendering, and CRD handling
Helm v3.0.2 patch release focused on bug fixes and stability improvements.
Helm 3.0.1 is a signed patch release focusing on numerous bug fixes and stability improvements.
Introduces Helm 3 with a new architecture (no Tiller), new chart format v2, library charts, and experimental OCI registry support.
Helm v2.16.1 is a patch release; users are encouraged to upgrade for the best experience.
Added support for Kubernetes 1.16, including new manifest apiVersions.
Patch release Helm v2.15.2 fixes an error when loading irregular files.
Patch release v2.15.1 includes several bug fixes
Helm 2.15.0 is the final feature release for Helm 2 and the series now enters maintenance mode, accepting only bug fixes and security patches.
Patch release Helm v2.14.3 with signed binaries and upgrade instructions for Tiller
Patch release v2.14.2 adds bug fixes: delete hooks now wait for resources to be removed from etcd.
Patch v2.14.1 fixes manifest schema validation issues – disables validation for all manifests and only validates new ones
Updated core dependencies (Go 1.12, Kubernetes client 1.14, semver 1.4) and added the helm.sh/resource‑policy annotation for delete functionality.
Patch release v2.13.1 with bug fixes and minor improvements; upgrade is recommended.
Introduces new flags: atomic for safe install/upgrade rollback, devel for inspecting prerelease charts, parallel for concurrent test execution, and renders subchart notes on install/upgrade.
Helm v2.12.3 is a bug‑fix release fixing chart validation (ignore pax header files) and name verification (RFC 1123 subdomains).
Fixed a path traversal vulnerability allowing malicious charts to unpack files outside the chart directory via helm fetch unpack and helm lint.
Patch release fixing bugs and reverting a faulty CRD install hook change
Added $HELM_KEY_PASSPHRASE env var for chart signing and introduced the helm convert plugin
Added Kubernetes v1.11 support, updated Sprig to v2.16.0, and introduced TLS hostname and environment‑variable TLS flags for Helm/Tiller
Added multiple new CLI flags and capabilities (col‑width, release description, TLS hostname, kubeconfig file, s390x client binaries, namespace name label injection, stdin support for plugin getters, and detailed plugin exit‑code handling).
Helm v2.9.1 patches bugs and bumps the version to v2.9.1
Added new capabilities such as auth plugins, JSON/YAML output formats, hook delete policies and improved proxy handling;
Fixed helm init wait, search crash on uppercase characters, and deployment upgrade handling
Fixed multiple bugs including grpc message size limit, helm init upgrade logic, selector extraction, pod recreation, and API version handling
Added Kubernetes 1.9 support with apps/v1 workloads, selector immutability, and rollingUpdate as default strategy
Fix TLS handling by enforcing client certificate verification against Tiller's CA, closing a self‑signed certificate bypass.
Patch release fixing multiple bugs across Helm client and Tiller (HOME env var handling on Windows, upgrade of last deployed release, relative chart path support, and localhost to 127.0.0.1 change).
Added node selector support and output flags to helm init
Helm 2.6.2 is a patch release that fixes numerous bugs and recommends immediate upgrade.
Fixed dependency update bug that incorrectly deleted subcharts
Helm 2.6.0, compiled against Kubernetes 1.7, is a stability‑focused release with over 90 improvements and security hardening, but no major new features.
Fixed deadlock in Tiller and removed storage locking logic
Added experimental Tiller backend plugins via gRPC, a new Helm documentation website, and new features such as array‑index support in set, the u flag for package, plugin update command, repo flag, and experimental aliasing in requirement...
Fix wait flag behavior and ensure helm test returns non‑zero exit codes on failures
Reverted mergo library upgrade that broke KUBECONFIG file merging.
Helm 2.4.0 adds native support for Kubernetes 1.6, including RBAC configuration for Tiller and compiled against k8s 1.6 APIs.
Fixed segmentation fault when hoisting variables from a subchart to its parent
Introduces Helm Plugin Manager with simple install/remove commands, local development workflow, and plugin hooks system
Critical fix for the 'helm delete' bug that caused data loss.
Fixed the Tiller crash (issue #2043) that caused a panic during upgrades
Fixed wait/recreate pod flags and repository.yaml compatibility issues
Added `helm test` command with test suite support and related hooks
Fixed Deis Workflow installation and namespace detection bugs.
Added standardized debug output and release debugging for helm upgrade and install dry‑run commands.
Helm 2.1.1 is a bug‑fix release but is superseded by 2.1.2 due to missing commits; users should upgrade to 2.1.2.
Adds Kubernetes 1.5 support while still supporting 1.4, but Helm 2.1.0 is not guaranteed to be compatible with 2.0.x releases, requiring client and server upgrades.
Fixed helm upgrade and rollback handling of failed releases and resolved spurious "no release found" errors
Fixed critical bug in helm delete and improved the set parser to handle backslash escaping
Increased max release name length to 53 characters and ensured upgrades correctly remove deleted manifest fields.
Fixed make failure when building and pushing Docker images for DM server-side components.