Skip to content

chore(deps): bump helm.sh/helm/v4 from 4.2.4 to 4.3.0 - #7127

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/helm.sh/helm/v4-4.3.0
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/go_modules/helm.sh/helm/v4-4.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Bumps helm.sh/helm/v4 from 4.2.4 to 4.3.0.

Release notes

Sourced from helm.sh/helm/v4's releases.

Helm v4.3.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Installation and Upgrading

Download Helm v4.3.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026

... (truncated)

Commits
  • bec5b06 chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1
  • d0d42e7 chore(deps): bump the k8s-io group across 1 directory with 6 updates
  • 7328f42 bump version to 4.3 (#32605)
  • 2b3f680 Merge pull request #32596 from gjenkins8/gjenkins/fix_ci
  • ca6681c chore: Fix independent-merge lint issues
  • 37752b7 refactor(repo): Use byte buffer to build index file (#32579)
  • 28e64bd chore: fix gofumpt extra-rules (#32486)
  • 4dfbaa4 Remove deprecated internal/chart/v3/ code (#32365)
  • 9a3c040 fix(template): regression - route registry messages to stderr in template and...
  • 11e2010 refactor: remove per-file decompression size limit (#31748)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [helm.sh/helm/v4](https://github.com/helm/helm) from 4.2.4 to 4.3.0.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v4.2.4...v4.3.0)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v4
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@ksail-bot
ksail-bot Bot enabled auto-merge (squash) September 18, 2026 17:19
@github-actions

github-actions Bot commented Sep 18, 2026 •

Copy link
Copy Markdown
Contributor

✅MegaLinter analysis: Success

✅ Linters with no issues

actionlint, bash-exec, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_GITLEAKS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Parked on ksail#6728. Helm v4.3.0 raises k8s.io/apiserver to a version whose RESTUpdateStrategy.AllowCreateOnUpdate signature the vcluster dependency (loft-sh/apiserver, pinned at v0.0.0-20260707184419-aef558a5ae8d) no longer satisfies. Every build job fails at compile time in pkg/builders/default_storage_strategy.go:33 (run 35374629945). This is the same Kubernetes 0.37 vs vcluster 0.36 split that #6728 tracks, so this bump lands when that one clears. A rebase will not fix it.

@devantler

devantler commented Sep 19, 2026 •

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Blocker: #6728 | upstream | last-verified 2026-09-19: OPEN (blocked, dependencies); Helm v4.3.0 still crosses the repository’s Kubernetes 0.36/0.37 dependency boundary. Auto-merge is disabled and this PR is labelled blocked until that compatibility issue closes.

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Parked on a named upstream blocker, not abandoned. This PR's build failure is not its own: it raises k8s.io/apiserver to v0.37.0 in the selected build list, and both kyverno/kyverno@v1.19.1 and loft-sh/apiserver (via loft-sh/vcluster v0.36.1) fail to compile against the 0.37 packages. I reproduced the failure locally with go build ./..., and confirmed that pinning k8s.io/apiserver back to v0.36.4 does not help — apiserver 0.36 then fails against apimachinery 0.37, so the k8s modules have to move as a set.

kyverno's latest release (v1.19.1, 2026-09-10) still requires k8s 0.36.3, so there is nothing to adapt to on our side yet.

Tracked in #7143 with the evidence and the re-check condition. Leaving this PR open so it rebuilds once kyverno ships a k8s-0.37 release; no adaptation commit, because any adaptation now would be a downgrade of the bump this PR exists to make.

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Parked on a named upstream blocker: this bump raises the Kubernetes libraries to v0.37, which vcluster does not support yet (its newest release still builds against v0.36), so the build cannot compile. Tracked in #7167; it will be revisited when vcluster ships support.

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Parked on #7259. This bump pulls k8s.io/client-go to v0.37.0, and ksail cannot compile against the v0.37 Kubernetes libraries until Kyverno and vcluster ship compatible releases (neither has as of 2026-09-24). The red build and the conflict both clear once main moves to v0.37; that work is tracked on #7259.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: 🫴 Ready

Development

Successfully merging this pull request may close these issues.

1 participant