Skip to content

Releases: helm/helm

Helm v3.11.1

08 Feb 18:02
v3.11.1
293b50c
Compare
Choose a tag to compare

Helm v3.11.1 is a security (patch) release. Users are strongly recommended to update to this release.

The template function getHostByName can be used to disclose information. More details are available in the CVE.

This release introduces a breaking changes to Helm:

  • When using the helm client for the template, install, and upgrade commands there is a new flag. --enable-dns needs to be set for the getHostByName template function to attempt to lookup an IP address for a given hostname. If the flag is not set the template function will return an empty string and skip looping up an IP address for the host.
  • The Helm SDK has added the EnableDNS property to the install action, the upgrade action, and the Engine. This property must be set to true for the in order for the getHostByName template function to attempt to lookup an IP address.

The default for both of these cases is false.

Philipp Stehle at SAP disclosed the vulnerability to the Helm project.

Installation and Upgrading

Download Helm v3.11.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.11.2 is the next patch/bug fix release and will be on March 08, 2023.
  • 3.12.0 is the next feature release and be on May 10, 2023.

Helm v3.11.0

18 Jan 17:33
v3.11.0
472c573
Compare
Choose a tag to compare

Helm v3.11.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • The Helm status command and the SDK can now show the status of core resources deployed in a chart (e.g., deployments). To use with helm status you need to use the --show-resources flag.
  • Add support for comma separated values in template --api-versions
  • Allow CGO_ENABLED to be overridden when building Helm from source

Installation and Upgrading

Download Helm v3.11.0. The common platform binaries are here:

This release was signed with F126 1BDE 9290 12C8 FF2E 501D 6EA5 D759 8529 A53E and can be found at @hickeyma keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.11.1 is the next patch/bug fix release and will be on February 08, 2023.
  • 3.12.0 is the next feature release and be on May 10, 2023.

Changelog

  • Fix improper use of Table request/response to k8s API 472c573 (Matt Farina)
  • Check status code before retrying request ee1ec6e (Cenk Alti)
  • bump version to v3.11.0 9d8fee1 (Matt Farina)
  • Bump containerd to 1.6.15, oras-go to 1.2.2 and image-spec to v1.1.0-rc2 017785a (Luca Comellini)
  • change linting error messages for null values in arrays 6a5f240 (Daniel Strobusch)
  • Fix after CR 3d81ea2 (Jakub Warczarek)
  • Trigger CI f46ff13 (Jakub Warczarek)
  • Add test for User-Agent header setting and refactor 553f1e3 (Jakub Warczarek)
  • Fix User-Agent header in requests made by Helm 2fa7b3d (Jakub Warczarek)
  • Bump k8s.io deps to v0.26.0 1fc2a6a (Luca Comellini)
  • fix adopted resource not replaced 3181c7d (Vaibhav Sharma)
  • chore(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1 8774890 (dependabot[bot])
  • Resolve conflicts for go.mod and go.sum 6c76abb (Soujanya Mangipudi)
  • Fix backwards compatibility b6fef6c (Martin Hickey)
  • docs: add docs for cli/values.Options 0fdfe05 (Zuhair AlSader)
  • Update chartrepo.go c8890e9 (caixisheng)
  • chore(deps): bump golang.org/x/text from 0.4.0 to 0.5.0 b307d0f (dependabot[bot])
  • bump sprig version 3.2.3 fda1a0b (yxxhero)
  • Update string handling a59e584 (Martin Hickey)
  • Update repo handling 256e976 (Martin Hickey)
  • improve error message on plugin install 965f859 (Philipp Stehle)
  • harmonize URL reference resolving dfb25e1 (Philipp Stehle)
  • Update logic of non-git situation just to print warning logs 0ebd620 (Wonyeong Choi)
  • Add a flag var to check git is installed or not c027014 (Wonyeong Choi)
  • Add support for CSVs in template --api-versions arg 5aa316e (Ryan Drew)
  • update .golangci for go1.18 61374f6 (yanggang)
  • redirect registry client output to stderr 1535ad5 (Cyril Jouve)
  • chore(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.1 b3afe43 (dependabot[bot])
  • Readiness & liveness probes correct port 9d027ea (Peter Leong)
  • Update schema validation handling 775af2a (Martin Hickey)
  • fix a few function names on comments 09d3f31 (cui fliter)
  • use intstr.GetScaledValueFromIntOrPercent instead of the deprecated 9d59d92 (Qifan Shen)
  • Updating the deb location for azure cli 70a3df4 (Matt Farina)
  • retry http request on temporary errors b5378b3 (Cenk Alti)
  • Revert "Tolerate temporary errors from etcdserver" d32c623 (Cenk Alti)
  • Updating the repo the azure cli is installed from 9fbf1b3 (Matt Farina)
  • Updating to kubernetes 1.25.2 packages 221b0f5 (Matt Farina)
  • Allow CGO_ENABLED to be overridden for build 6f6c0d8 (Joe Julian)
  • chore(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 98077dd (dependabot[bot])
  • chore(deps): bump github.com/lib/pq from 1.10.6 to 1.10.7 bfd1890 (dependabot[bot])
  • chore(deps): bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0 1478a09 (dependabot[bot])
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.1.2 to 1.2.0 4376d2f (dependabot[bot])
  • Tolerate temporary errors from etcdserver ebc79fa (Davanum Srinivas)
  • update: Optimize the error message 4fcec24 (wujunwei)
  • add nil judge for dependency , maintainers validate and some testcase. a7a1117 (wujunwei)
  • Fix code style ae828ce (Martin Hickey)
  • bump version to v3.10.0 cd809f9 (Matt Farina)
  • Addressing review comments - move printing code out of client.go ffa19a4 (Soujanya Mangipudi)
  • Addressing review comments: Extend Interface with new InterfaceResources to avoid breaking changes Move change to staus command behind --show-resources flag 20e3577 (Soujanya Mangipudi)
  • feat(helm): Supporting helm3 to show up resource names that were deployed as part of release in helm status command 9d5be80 (Soujanya Mangipudi)
  • During deletion, explicitly log already deleted resource name. b7c35d2 (Marcin Owsiany)
  • fix: add cases.NoLower option for we can get same effect to strings.Title f0037e5 (wujunwei)
  • one defer 3b19dde (CI)
  • don't change r.CachePath 781ddba (CI)
  • avoid adding new public function cd76fcd (CI)
  • fix tests 32a41fc (CI)
  • fix: clean up temp files in FindChartInAuthAndTLSAndPassRepoURL (#11171) 24fa3d9 (CI)
  • Fix URL with encoded path support for ChartDownloader d9e5bbc (Mathieu Parent)

v3.11.0-rc.2

13 Jan 20:40
v3.11.0-rc.2
472c573
Compare
Choose a tag to compare
v3.11.0-rc.2 Pre-release
Pre-release

Helm v3.11.0-rc.2 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v3.11.0 is officially released.

The official changelog will come out with the v3.11.0 release. For now, you can see the commit changes from v3.10.3 here.

Installation and Upgrading

Download Helm v3.11.0-rc.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

v3.11.0-rc.1

10 Jan 03:06
v3.11.0-rc.1
9d8fee1
Compare
Choose a tag to compare
v3.11.0-rc.1 Pre-release
Pre-release

NOTICE: This release candidate has a known regression. Details available at #11712

Helm v3.11.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v3.11.0 is officially released.

The official changelog will come out with the v3.11.0 release. For now, you can see the commit changes from v3.10.3 here.

Installation and Upgrading

Download Helm v3.11.0-rc.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

Helm v3.10.3

14 Dec 17:54
v3.10.3
Compare
Choose a tag to compare

v3.10.3

Helm v3.10.3 is a security (patch) release. Users are strongly recommended to update to this release.

While fuzz testing Helm, provided by the CNCF:

  • a possible stack overflow was discovered with the strvals package. Stack overflow cannot be recovered from in Go. This can potentially be used to produce a denial of service (DOS) for SDK users. More details are available in the advisory.
  • a possible segmentation violation was discovered with the repo package. Some segmentation violations cannot be recovered from in Go. This can potentially be used to produce a denial of service (DOS) for SDK users. More details are available in the advisory.
  • a possible segmentation violation was discovered with the chartutil package. This can potentially be used to produce a denial of service (DOS) for SDK users. More details are available in the advisory

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.10.3. The common platform binaries are here:

This release was signed with F126 1BDE 9290 12C8 FF2E 501D 6EA5 D759 8529 A53E and can be found at @hickeyma keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.11.0 is the next feature release and will be on January 18, 2023.

Changelog

  • Fix backwards compatibility 835b733 (Martin Hickey)
  • Update string handling 3caf8b5 (Martin Hickey)
  • Update repo handling 7c0e203 (Martin Hickey)
  • Update schema validation handling f4b9322 (Martin Hickey)

Helm v3.10.2

10 Nov 17:13
v3.10.2
Compare
Choose a tag to compare

Helm v3.10.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.10.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.10.3 will contain only bug fixes and be released on December 14, 2022
  • 3.11.0 is the next feature releaseand be released on January 18, 2023

Changelog

  • fix a few function names on comments 50f003e (cui fliter)
  • redirect registry client output to stderr c3a62f7 (Cyril Jouve)
  • Readiness & liveness probes correct port 727bdf1 (Peter Leong)

Helm 3.10.1

12 Oct 20:51
v3.10.1
Compare
Choose a tag to compare

Helm v3.10.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.10.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.10.2 will contain only bug fixes and be released on November 9, 2022
  • 3.11.1 is the next feature releaseand be released on January 18, 2023

Changelog

  • Updating the deb location for azure cli 9f88ccb (Matt Farina)
  • Updating the repo the azure cli is installed from a59afc4 (Matt Farina)
  • Updating to kubernetes 1.25.2 packages 35af809 (Matt Farina)
  • one defer 97780c7 (CI)
  • don't change r.CachePath 9f61b0a (CI)
  • avoid adding new public function 75a1369 (CI)
  • fix tests 959acd8 (CI)
  • fix: clean up temp files in FindChartInAuthAndTLSAndPassRepoURL (#11171) f6830f7 (CI)
  • Allow CGO_ENABLED to be overridden for build 9140924 (Joe Julian)
  • update: Optimize the error message 23ff142 (wujunwei)
  • add nil judge for dependency , maintainers validate and some testcase. f22e260 (wujunwei)
  • Fix URL with encoded path support for ChartDownloader 4e07531 (Mathieu Parent)
  • fix: add cases.NoLower option for we can get same effect to strings.Title 4844431 (wujunwei)
  • Tolerate temporary errors from etcdserver 802a229 (Davanum Srinivas)

Helm 3.10.0

21 Sep 17:32
v3.10.0
ce66412
Compare
Choose a tag to compare

Helm v3.10.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Added --set-json flag to set json values.
  • Added support helm list --no-headers
  • Added --burst-limit option for client-side throttling limit configuration

Installation and Upgrading

Download Helm v3.10.0. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.10.1 will contain only bug fixes and be released on October 12, 2022.
  • 3.11.0 is the next feature release and will be released on January 18, 2023

Changelog

  • bump version to v3.10.0 ce66412 (Matt Farina)
  • Updating to Kubernetes 1.25 client libs 2108a23 (Matt Farina)
  • Updating the certificates used for testing 7cbec35 (Matt Farina)
  • Updating index handling 225f8d7 (Matt Farina)
  • Drop direct github.com/docker/docker dependency ea5365a (Mikhail Mazurskiy)
  • fix special string in the filename ece46c1 (d-d-up)
  • chore: add oci install description d1c0b7e (longkai)
  • Fixing x509 test on darwin b3aa0b4 (Matt Farina)
  • Bump k8s.io/kube-openapi to fix CVE-2022-1996 in github.com/emicklei/go-restful 1e0f8a4 (Guilherme Macedo)
  • fixes #11142 missing array length check on release b9f347a (Arvid E. Picciani)
  • chore(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 0c9de28 (dependabot[bot])
  • Upgrading to Kubernetes 1.24.2 211bd2b (Martin Hickey)
  • Bump Oras to 1.2.0 51e6c8e (Martin Hickey)
  • fix: use go install instead of go get aa6e82b (Matthew Fisher)
  • bump Go 1.18 39b0a82 (yxxhero)
  • fix: improve logging & safety of statefulSetReady 7c74f1d (Dominic Evans)
  • make token caching an opt in feature 42a04c7 (Soule BA)
  • chore(deps): bump github.com/stretchr/testify from 1.7.4 to 1.7.5 0acd81b (dependabot[bot])
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.1.1 to 1.1.2 ccc104a (dependabot[bot])
  • chore(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#11075) 3ff331f (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.4 994d786 (dependabot[bot])
  • Upgrading to Kubernetes 1.24.1 packages 5ef01c2 (Matt Farina)
  • chore(deps): bump github.com/Masterminds/squirrel from 1.5.2 to 1.5.3 fe2a66c (dependabot[bot])
  • feat(*): add flags/env for kube api tls overrides 687852e (Justen Walker)
  • Add --burst-limit option for client-side throttling limit configuration (#10842) 823d929 (Igor Sutton)
  • chore(deps): bump github.com/lib/pq from 1.10.5 to 1.10.6 f3cfd4f (dependabot[bot])
  • chore(deps): bump oras.land/oras-go from 1.1.0 to 1.1.1 a3bb2f7 (dependabot[bot])
  • chore(deps): bump github.com/evanphx/json-patch 606633c (dependabot[bot])
  • Bump github.com/lib/pq from 1.10.4 to 1.10.5 ede591f (dependabot[bot])
  • build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4 8b69048 (dependabot[bot])
  • build(deps): bump github.com/docker/docker 67ed6e2 (dependabot[bot])
  • bump version to v3.9.0 1db28a2 (Matt Farina)
  • build(deps): bump github.com/jmoiron/sqlx from 1.3.4 to 1.3.5 43aa313 (dependabot[bot])
  • Bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 aafc920 (dependabot[bot])
  • Fixed helm uninstall not deleting the resource. fe00c92 (Mayank Thakur)
  • Fix UT d8c0e01 (stan-sz)
  • Fix linter 6c55d9e (stan-sz)
  • Update install.go a7e4ae7 (stan-sz)
  • Log error message on failed download 660e4ff (stan-sz)
  • Add support helm list --no-headers d76f86b (suzaku)
  • update go.mod d20c954 (yxxhero)
  • fix --registry-config issue 9f199b6 (yxxhero)
  • feat: add --set-json flag to set json values. 11e7d0c (Luca Di Rocco)
  • fix(helm): ignore file-not-found error for helm repo list -o json 94779dc (Teo Klestrup Röijezon)

v3.10.0-rc.1

12 Sep 20:42
v3.10.0-rc.1
ce66412
Compare
Choose a tag to compare
v3.10.0-rc.1 Pre-release
Pre-release

Helm v3.10.0-rc.1 is a pre-release. It is to help gather feedback from the community as well as give users a chance to test Helm in staging environments before v3.10.0 is officially released.

The official changelog will come out with the v3.10.0 release. For now, you can see the commit changes from v3.9.4 here.

Installation and Upgrading

Download Helm v3.10.0-rc.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

Helm 3.9.4

24 Aug 20:00
v3.9.4
Compare
Choose a tag to compare

Helm v3.9.4 is a security (patch) release. Users are strongly recommended to update to this release.

While fuzz testing Helm, provided by the CNCF, a possible out of memory panic was discovered with the strvals package. Out of memory panics cannot be recovered from in Go. This can potentially be used to produce a denial of service (DOS). More details are available in the advisory.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.9.4. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.10.0 is the next feature release and will be on September 14, 2022