Helm v3.22.1
security~~~!
Helm v3.22.1 was released with a security item that bumps dependencies to remove Go package vulnerabilities. Other changes update the k8s.io Go packages to v0.37.1 and the OpenTelemetry OTLP trace exporters to v1.45.0. The notes also state that the next patch releases for Helm 4.3.2 and 3.22.2 are scheduled for November 11, 2026, and that Helm 4.4.0 is scheduled for January 13, 2027.
What changes for platform teams
Platform teams running Helm 3 get dependency-level CVE fixes in this release, but the source does not name the affected packages or the tool's own code. The notes say there will be no further Helm 3 minor releases after this line, so teams should plan migration to Helm 4.
Changes
- Bumps dependencies to remove Go package vulnerabilitiessecurity
- Updates the k8s.io Go packageschanged
- [v3] chore(deps): bump k8s.io group to v0.37.1 (#32761) 2c7472f482d9fe255e5cd51feb51eaab18df198f (Scott Rigby)changed
- [v3] chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace otlptracegrpc and otlptracehttp to v1.45.0 (#32760) 8d91c8f55d86b62091d25f9f688bc26d51a98dbb (Scott Rigby)changed
- For questions and just to hang outother
- For discussing PRs, code, and bugsother
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoomother
- MacOS amd64 (checksum / cf850a81b908f8eef0331e6b18776da2767bcac639ca84472311dad20008495c)other
- MacOS arm64 (checksum / e73da8a0b0d5193774fdff17ce6319c7436bb22ee229b45fd64f3c40368c753a)other
- Linux amd64 (checksum / 896cf63684a42a723d61c980369d6e588330927deb13676ca0d85006dd6da0ea)other
- Linux arm (checksum / a1563d16cf9537db798116d5647ad0ef8cf963fa7cbbe24d8db534250273cccc)other
- Linux arm64 (checksum / 4c29e286b279d170fa048ddfc3e4e83dcd069ca9c52102766ba672d7149e694d)other
8 more lines
- Linux i386 (checksum / 67b35ee3d31fa93b7ca5884e71beef3c3b5d9bab46ead792081ed2b6131d73c5)other
- Linux ppc64le (checksum / 48a9711b69f0b63504f710ba18766dd5f5424fe380e67304aa3c89e1c0b97b5c)other
- Linux s390x (checksum / ef039296b433a0a6965fdf55f4ee0ad50e3d94bb70a77e4896309406c9bc8fab)other
- Linux riscv64 (checksum / 960ca50df1eb70a50a8cb90fc67573cf047239fc0b72f63514a534e4f2e2ef32)other
- Windows amd64 (checksum / 32ce9f4509b81782c9740898c43946e1f97c4d93ec5d10222c9b6eeec21ea043)other
- Windows arm64 (checksum / 10104b049309d4c751bca88254843e16edd84141411f63503f10845ea33cbd2f)other
- 4.3.2 and 3.22.2 are the next patch releases scheduled for November 11, 2026other
- 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (seeother
3 maintenance lines (dependency bumps, CI, tests, docs)
- Test, debug, and contribute charts: ArtifactHub/packagesmaintenance
- Bump github.com/distribution/distribution/v3 (#32697) d6c1a0e4027caa6abc7892e7ea9f0cda7447baa3 (dependabot[bot])maintenance
- Bump golang.org/x/net to v0.60.0 for GO-2026-6617 GO-2026-6612 GO-2026-6611 GO-2026-6610 GO-2026-6603 (#32759) 13edc4f2fd73578fc517f7050e3ca4ef6af7e289 (Scott Rigby)maintenance
Full release notes ↗ · all Helm releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules