Skip to content

chore(deps): update module helm.sh/helm/v3 to v3.20.2 (9.4)#4714

Merged
elastic-renovate-prod[bot] merged 11 commits into9.4from
renovate/9.4-helm.sh-helm-v3-3.x
Apr 22, 2026
Merged

chore(deps): update module helm.sh/helm/v3 to v3.20.2 (9.4)#4714
elastic-renovate-prod[bot] merged 11 commits into9.4from
renovate/9.4-helm.sh-helm-v3-3.x

Conversation

@elastic-renovate-prod
Copy link
Copy Markdown
Contributor

@elastic-renovate-prod elastic-renovate-prod Bot commented Apr 16, 2026

This PR contains the following updates:

Package Type Update Change
helm.sh/helm/v3 indirect minor v3.18.6 -> v3.20.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

helm/helm (helm.sh/helm/v3)

v3.20.2: Helm v3.20.2

Compare Source

v3.20.2

Helm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Security fixes

  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment

Installation and Upgrading

Download Helm v3.20.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026

Changelog

  • fix: Chart dot-name path bug 8fb76d6 (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e (Terry Howe)

v3.20.1: Helm v3.20.1

Compare Source

Helm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Backport of #​31644: Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key
  • Backport of #​31601: Fixed a bug where OCI references with tag+digest failed with "invalid byte" error

Installation and Upgrading

Download Helm v3.20.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.2.0 and 3.21.0 are the next minor releases and will be on May 13, 2026
  • 4.1.4 and 3.20.2 are the next patch releases and will be on April 8, 2026

Changelog

  • chore(deps): bump the k8s-io group with 7 updates a2369ca (dependabot[bot])
  • add image index test 90e1056 (Pedro Tôrres)
  • fix pulling charts from OCI indices 911f2e9 (Pedro Tôrres)
  • Remove refactorring changes from coalesce_test.go 76dad33 (Evans Mungai)
  • Fix import 45c12f7 (Evans Mungai)
  • Update pkg/chart/common/util/coalesce_test.go 26c6f19 (Evans Mungai)
  • Fix lint warning 09f5129 (Evans Mungai)
  • Preserve nil values in chart already 417deb2 (Evans Mungai)
  • fix(values): preserve nil values when chart default is empty map 5417bfa (Evans Mungai)

v3.20.0: Helm v3.20.0

Compare Source

Helm v3.20.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • SDK: bump k8s API versions to v0.35.0
  • v3 backport: Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases https://github.com/helm/helm/pull/12564
  • v3 backport: Bump Go version to v1.25

Installation and Upgrading

Download Helm v3.20.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.1 and 3.20.1 are the next patch releases, scheduled for March 11, 2026
  • 4.2.0 and 3.21.0 are the next minor releases, scheduled for May 13, 2026

Changelog

  • bump version to v3.20 f6e17f6 (Scott Rigby)
  • chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 4f5a655 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 65c504a (dependabot[bot])
  • chore(deps): bump github.com/foxcpp/go-mockdns from 1.1.0 to 1.2.0 f3b8af4 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates 89c2c61 (dependabot[bot])
  • [dev-v3] Replace deprecated NewSimpleClientset 526076e (George Jenkins)
  • [dev-v3] Bump Go v1.25, golangci-lint v2 0ae8e4f (George Jenkins)
  • chore(deps): bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0 e0d2595 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.29 to 1.7.30 858acb1 (dependabot[bot])
  • fix(rollback): errors.Is instead of string comp 0cd9a60 (Hidde Beydals)
  • fix(uninstall): supersede deployed releases 8bb0b37 (Hidde Beydals)
  • Use latest patch release of Go in releases 930ba6f (Matt Farina)
  • chore(deps): bump the k8s-io group with 7 updates 582211c (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 585c25c (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 6f17d46 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 46ff427 (dependabot[bot])
  • chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 28b813a (dependabot[bot])
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.8.0 to 1.8.1 5dde5d6 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 362900b (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin ec61de5 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates a490607 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.30.0 to 0.31.0 8509bcc (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 d495a94 (dependabot[bot])
  • Remove dev-v3 helm-latest-version publish 01dc6cc (George Jenkins)
  • chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 6647f84 (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 b548118 (dependabot[bot])
  • Revert "pkg/registry: Login option for passing TLS config in memory" 6a67b55 (Scott Rigby)
  • chore(deps): bump github.com/cyphar/filepath-securejoin 6d4f8c0 (dependabot[bot])
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 3f0da15 (Benoit Tigeot)
  • Fix helm pull untar dir check with repo urls e5e101c (Luna Stadler)
  • chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 6aae923 (dependabot[bot])
  • chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 1900c6a (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.29.0 to 0.30.0 43e9297 (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin d347e2b (dependabot[bot])
  • [backport] fix: get-helm-3 script use helm3-latest-version bd337b4 (George Jenkins)
  • pkg/registry: Login option for passing TLS config in memory b80959f (Matheus Pimenta)
  • chore(deps): bump the k8s-io group with 7 updates 1ac9d34 (dependabot[bot])
  • Fix deprecation warning 9a366b4 (Benoit Tigeot)
  • chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 0c5a17e (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.34.0 to 0.35.0 b999021 (dependabot[bot])
  • Avoid "panic: interface conversion: interface {} is nil" 2fe49f9 (Benoit Tigeot)
  • bump version to v3.19.0 c3610ab (Scott Rigby)
  • chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 73b449f (dependabot[bot])
  • fix: set repo authorizer in registry.Client.Resolve() ffbc537 (Eric Stroczynski)
  • fix null merge f0b699e (Ben Foster)
  • Add timeout flag to repo add and update flags 79a9cc5 (Reinhard Nägele)

v3.19.5: Helm v3.19.5

Compare Source

Helm v3.19.5 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Installation and Upgrading

Download Helm v3.19.5. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.0 and 3.20.0 is the next minor releases and will be on January 21, 2026
  • 4.1.1 and 3.20.1 are the next patch releases and will be on March 11, 2026

Changelog

  • fix(rollback): errors.Is instead of string comp 4a19a5b (Hidde Beydals)
  • fix(uninstall): supersede deployed releases 7a00235 (Hidde Beydals)
  • fix null merge 578564e (Ben Foster)

v3.19.4: Helm v3.19.4

Compare Source

Helm v3.19.4 is a security fix for a Go CVE in the previous tag. This patch release rebuilds the Helm v3.19.3 release with the latest Go toolchain, to fix the Go CVE. Users are encouraged to upgrade.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.5 and 4.0.4 are the next patch releases and will be on January 14, 2026
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • Use latest patch release of Go in releases 7cfb6e4 (Matt Farina)
  • chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 59c951f (dependabot[bot])
  • chore(deps): bump github.com/cyphar/filepath-securejoin d45f3f1 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 d459544 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.36.0 to 0.37.0 becd387 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates edb1579 (dependabot[bot])

v3.19.3: Helm v3.19.3

Compare Source

Helm v3.19.3 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.3. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • Bump golang.org/x/crypto to v0.45.0 0707f56 (Dirk Müller)
  • [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins)

v3.19.2: Helm v3.19.2

Compare Source

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • [backport] fix: get-helm-3 script use helm3-latest-version 8766e71 (George Jenkins)

v3.19.1: Helm v3.19.1

Compare Source

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.0.0 is the next major release and will be on November 12, 2025
  • 3.19.2 and 4.0.01 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 4f953c2 (dependabot[bot])
  • jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 6801f4d (Benoit Tigeot)
  • Avoid "panic: interface conversion: interface {} is nil" 2f619be (Benoit Tigeot)
  • Fix helm pull untar dir check with repo urls 8112d47 (Luna Stadler)
  • Fix deprecation warning 5dff7ce (Benoit Tigeot)
  • chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 2dad4d2 (dependabot[bot])
  • Add timeout flag to repo add and update flags a833710 (Reinhard Nägele)
  • chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 2e12c81 (Dirk Müller)

v3.19.0: Helm v3.19.0

Compare Source

Helm v3.19.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed a helm pull regression from 3.18 - error pulling OCI charts with --password #​31230
  • Fixed a helm lint regression from Helm 3.18 - rejected JSON Schema $ref URLs that worked in 3.17.x #​31166
  • Fixed go mod tidy #​31154
  • Fixed k8s version parsing not matching original #​31091
  • Fixed charts failing when using a redirect registry #​31087
  • Fixed missing debug logging for OCI transport
  • Fixed broken legacy docker support for login #​30941
  • Fixed bugs from the move to ORAS v2
  • Fixed processing all hook deletions on failure #​30673
  • Feature for helm create added httproute from gateway-api to create chart template #​30658

Installation and Upgrading

Download Helm v3.19.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.1 will contain only bug fixes.
  • 3.20.0 is the next feature release.

Changelog

  • bump version to v3.19.0 3d8990f (Scott Rigby)
  • fix: use username and password if provided 9a54bf1 (Evans Mungai)
  • chore(deps): bump the k8s-io group with 7 updates 5af0f68 (dependabot[bot])
  • chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 e485606 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 6355c3d (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 ec61f66 (dependabot[bot])
  • fix(helm-lint): fmt b278020 (Isaiah Lewis)
  • fix(helm-lint): Add TLSClientConfig d33ac5e (Isaiah Lewis)
  • fix(helm-lint): Add HTTP/HTTPS URL support for json schema references 8543709 (Isaiah Lewis)
  • chore(deps): bump the k8s-io group with 7 updates 89a3f90 (dependabot[bot])
  • fix: go mod tidy for v3 da4c583 (Terry Howe)
  • chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 e40b1b3 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 a27e9db (dependabot[bot])
  • fix Chart.yaml handling f13afaa (Matt Farina)
  • Handle messy index files 039b0b1 (Matt Farina)
  • chore(deps): bump github.com/containerd/containerd from 1.7.27 to 1.7.28 bec98a9 (dependabot[bot])
  • json schema fix 6d9509a (Robert Sirchia)
  • fix: k8s version parsing to match original 807225e (Borys Hulii)
  • chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 cbbd569 (dependabot[bot])
  • Do not explicitly set SNI in HTTPGetter 5e8ff72 (Terry Howe)
  • chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 5b5fb5b (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates d12538a (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 303f803 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 abcc2ed (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 521c67b (dependabot[bot])
  • Disabling linter due to unknown issue 227c9cb (Matt Farina)
  • Updating link handling 4389fa6 (Matt Farina)
  • Bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 372e403 (dependabot[bot])
  • build(deps): bump the k8s-io group with 7 updates 4fa5a64 (dependabot[bot])
  • build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 6284ed8 (dependabot[bot])
  • fix: user username password for login 2c55a4e (Terry Howe)
  • Update pkg/registry/transport.go a16e986 (Terry Howe)
  • Update pkg/registry/transport.go cea26d8 (Terry Howe)
  • fix: add debug logging to oci transport b52bb41 (Terry Howe)
  • build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 45075cf (dependabot[bot])
  • build(deps): bump golang.org/x/text from 0.25.0 to 0.26.0 73a7826 (dependabot[bot])
  • fix: legacy docker support broken for login 733f94c (Terry Howe)
  • fix: plugin installer test with no Internet fc36041 (Terry Howe)
  • Handle an empty registry config file. cfe8cef (Matt Farina)
  • Prevent fetching newReference again as we have in calling method c33215d (Benoit Tigeot)
  • Prevent failure when resolving version tags in oras memory store f552b67 (Benoit Tigeot)
  • fix(client): skipnode utilization for PreCopy a18a52e (Brandt Keller)
  • test: Skip instead of returning early. looks more intentional fedf502 (Jesse Simpson)
  • test: tests repo stripping functionality fe512ba (Jesse Simpson)
  • test: include tests for Login based on different protocol prefixes 099a9e1 (Jesse Simpson)
  • fix(client): layers now returns manifest - remove duplicate from descriptors b07ab77 (Brandt Keller)
  • fix(client): return nil on non-allowed media types c225c12 (Brandt Keller)
  • Fix 3.18.0 regression: reg

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@elastic-renovate-prod elastic-renovate-prod Bot requested a review from a team as a code owner April 16, 2026 23:15
@elastic-renovate-prod elastic-renovate-prod Bot added the Team:Security-Cloud Services Security Data Experience - Cloud Services team. label Apr 16, 2026
@elastic-renovate-prod
Copy link
Copy Markdown
Contributor Author

elastic-renovate-prod Bot commented Apr 16, 2026 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 10 additional dependencies were updated

Details:

Package Change
k8s.io/api v0.34.3 -> v0.35.1
k8s.io/apimachinery v0.34.3 -> v0.35.1
k8s.io/client-go v0.34.3 -> v0.35.1
github.com/containerd/containerd v1.7.27 -> v1.7.30
k8s.io/apiextensions-apiserver v0.33.3 -> v0.35.1
k8s.io/apiserver v0.33.3 -> v0.35.1
k8s.io/cli-runtime v0.33.3 -> v0.35.1
k8s.io/component-base v0.33.3 -> v0.35.1
k8s.io/kubectl v0.33.3 -> v0.35.1
k8s.io/utils v0.0.0-20250820121507-0af2bda4dd1d -> v0.0.0-20251002143259-bc988d571ff4

@elastic-renovate-prod elastic-renovate-prod Bot enabled auto-merge (squash) April 16, 2026 23:15
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 16, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/9.4-helm.sh-helm-v3-3.x upstream/renovate/9.4-helm.sh-helm-v3-3.x
git merge upstream/9.4
git push upstream renovate/9.4-helm.sh-helm-v3-3.x

@elastic-renovate-prod elastic-renovate-prod Bot force-pushed the renovate/9.4-helm.sh-helm-v3-3.x branch from 35aa2e5 to b3734a3 Compare April 17, 2026 03:04
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 17, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/9.4-helm.sh-helm-v3-3.x upstream/renovate/9.4-helm.sh-helm-v3-3.x
git merge upstream/9.4
git push upstream renovate/9.4-helm.sh-helm-v3-3.x

@elastic-renovate-prod elastic-renovate-prod Bot force-pushed the renovate/9.4-helm.sh-helm-v3-3.x branch 4 times, most recently from 6fa578a to f1cafbc Compare April 22, 2026 02:51
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 22, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/9.4-helm.sh-helm-v3-3.x upstream/renovate/9.4-helm.sh-helm-v3-3.x
git merge upstream/9.4
git push upstream renovate/9.4-helm.sh-helm-v3-3.x

@jeniawhite jeniawhite force-pushed the renovate/9.4-helm.sh-helm-v3-3.x branch from f1cafbc to 37cfe49 Compare April 22, 2026 05:03
@elastic-renovate-prod elastic-renovate-prod Bot force-pushed the renovate/9.4-helm.sh-helm-v3-3.x branch from 37cfe49 to 2cdff4a Compare April 22, 2026 06:47
@jeniawhite jeniawhite force-pushed the renovate/9.4-helm.sh-helm-v3-3.x branch from 2cdff4a to 9d82fd1 Compare April 22, 2026 13:51
@jeniawhite @claude
fix(tests): add WatchListClient feature gate override for k8s datapro…
143ab0e 
…vider tests

k8s v0.35 enables WatchListClient by default, causing informer cache sync
to hang when using the fake client in tests.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@elastic-renovate-prod
Copy link
Copy Markdown
Contributor Author

elastic-renovate-prod Bot commented Apr 22, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

jeniawhite and others added 3 commits April 22, 2026 10:17
@jeniawhite @claude
fix(tests): pre-warm k8s fake client TypeConverter to avoid 100ms tim…
2df69b8 
…eout

k8s v0.35+ fake.NewClientset triggers a one-time sync.Once that parses a
large JSON schema via structured-merge-diff. This initialization can take
>100ms and times out the pre-commit go-test hook (-timeout 100ms).

Add a TestMain to all test packages that use fake.NewClientset, calling
fake.NewClientset() once before m.Run(). TestMain runs before the test
timeout timer starts, so the slow first-call cost is amortized outside of
the 100ms window.

Affected packages:
- internal/dataprovider/providers/k8s
- internal/flavors/benchmark
- internal/processor/add_cluster_id
- internal/resources/fetching/fetchers/aws
- internal/resources/fetching/fetchers/k8s (pre-warm added to existing TestMain)
- internal/uniqueness

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeniawhite @claude
fix(lint): replace os.Exit(m.Run()) with m.Run() in TestMain functions
450092a 
The revive linter flags os.Exit in TestMain as redundant since Go 1.15:
the test runner automatically propagates the exit code when TestMain
returns. Drop os.Exit and the unused "os" import from all setup_test.go
files.

The fake.NewClientset() pre-warm still runs before m.Run(), so the
100ms timeout workaround remains effective.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeniawhite @claude
fix(lint): replace deprecated NewSimpleClientset with NewClientset
e6a50e3 
k8s v0.35+ marks fake.NewSimpleClientset as deprecated in favor of
fake.NewClientset which supports field management for server-side apply.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 22, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/9.4-helm.sh-helm-v3-3.x upstream/renovate/9.4-helm.sh-helm-v3-3.x
git merge upstream/9.4
git push upstream renovate/9.4-helm.sh-helm-v3-3.x

jeniawhite and others added 2 commits April 22, 2026 11:13
@jeniawhite @claude
chore: retrigger CI
12ba848 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeniawhite @claude
Merge branch '9.4' into renovate/9.4-helm.sh-helm-v3-3.x
7f927c7 
Resolve conflict: keep k8s packages at v0.35.3 (from 9.4 base) since
that is newer than helm's v0.35.1 requirement; retain both sets of
go.sum hashes to satisfy the full module graph.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 22, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/9.4-helm.sh-helm-v3-3.x upstream/renovate/9.4-helm.sh-helm-v3-3.x
git merge upstream/9.4
git push upstream renovate/9.4-helm.sh-helm-v3-3.x

jeniawhite and others added 2 commits April 22, 2026 11:59
@jeniawhite @claude
Merge branch '9.4' into renovate/9.4-helm.sh-helm-v3-3.x
39408e8 
Resolve go.mod: take k8s.io/apiextensions-apiserver, apiserver,
cli-runtime, and component-base at v0.35.4 from 9.4 (branch had
v0.35.1 indirect deps that go mod tidy would upgrade to match
k8s.io/api v0.35.4).

Resolve go.sum: take v0.35.4 hashes for k8s packages, remove stale
v0.33.3/v0.35.1/v0.35.3 entries, remove stale kubectl v0.33.3 entries.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jeniawhite @claude
fix: remove stale mxk/go-flowrate from go.mod pruned by go mod tidy
768ca3a 
With the updated k8s dependencies, mxk/go-flowrate is no longer in the
dependency graph and go mod tidy removes it.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@mergify mergify Bot added the queued label Apr 22, 2026
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 22, 2026 •
edited
Loading

Merge Queue Status

  • ✅ Entered queue — 2026-04-22 17:41 UTC · Rule: default
  • 🚫 Left the queue — 2026-04-22 17:41 UTC · at 768ca3a204a009cd3e7e07996cd263d7dfd4159b

This pull request spent 34 seconds in the queue, with no time running CI.

Reason

The pull request conflicts with the base branch

Hint

You should update or rebase your pull request.

If you want to requeue this pull request, you can post a @mergifyio queue comment.

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 22, 2026

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/9.4-helm.sh-helm-v3-3.x upstream/renovate/9.4-helm.sh-helm-v3-3.x
git merge upstream/9.4
git push upstream renovate/9.4-helm.sh-helm-v3-3.x

@mergify mergify Bot added dequeued and removed queued labels Apr 22, 2026
@jeniawhite @claude
Merge branch '9.4' into renovate/9.4-helm.sh-helm-v3-3.x
8320be0 
Resolve kubectl conflict: take v0.35.4 from 9.4 (merged via PR #4729)
over branch's v0.35.1 (from helm's transitive deps), as MVS picks max.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@mergify mergify Bot removed the dequeued label Apr 22, 2026
@elastic-renovate-prod elastic-renovate-prod Bot merged commit 23a3144 into 9.4 Apr 22, 2026
10 of 11 checks passed
@elastic-renovate-prod elastic-renovate-prod Bot deleted the renovate/9.4-helm.sh-helm-v3-3.x branch April 22, 2026 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

backport-skip dependencies Pull requests that update a dependency file renovate renovate-auto-approve Team:Security-Cloud Services Security Data Experience - Cloud Services team.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jeniawhite