manusa · manusa · Aug 31, 2026 · Aug 31, 2026
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
 
 env:
-  GO_VERSION: 1.25.10
+  GO_VERSION: 1.26.7
 
 jobs:
   build-all:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -6,7 +6,7 @@ on:
       - 'v*'
 
 env:
-  GO_VERSION: 1.25.10
+  GO_VERSION: 1.26.7
 
 jobs:
   release:

diff --git a/.github/workflows/snapshots.yml b/.github/workflows/snapshots.yml
@@ -6,7 +6,7 @@ on:
     - cron: '0 2 * * *' # Every day at 2am
 
 env:
-  GO_VERSION: 1.25.10
+  GO_VERSION: 1.26.7
 
 jobs:
   snapshots:

diff --git a/helm-java/src/test/java/com/marcnuri/helm/HelmPushTest.java b/helm-java/src/test/java/com/marcnuri/helm/HelmPushTest.java
@@ -61,7 +61,8 @@ void tearDown() {
   void pushUnauthorizedThrowsException() {
     final PushCommand pushCommand = Helm.push()
       .withChart(packagedChart)
-      .withRemote(URI.create("oci://" + remoteServer));
+      .withRemote(URI.create("oci://" + remoteServer))
+      .plainHttp();
     assertThatIllegalStateException()
       .isThrownBy(pushCommand::call)
       .extracting(IllegalStateException::getMessage)
@@ -74,6 +75,7 @@ void pushUnauthorizedWithDebugThrowsExceptionWithDetail() {
     final PushCommand pushCommand = Helm.push()
       .withChart(packagedChart)
       .withRemote(URI.create("oci://" + remoteServer))
+      .plainHttp()
       .debug();
     assertThatIllegalStateException()
       .isThrownBy(pushCommand::call)
@@ -88,21 +90,23 @@ void pushUnauthorizedWithDebugThrowsExceptionWithDetail() {
 
   @Test
   void pushAuthorized() {
-    Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).call();
+    Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).plainHttp().call();
     final String result = Helm.push()
       .withChart(packagedChart)
       .withRemote(URI.create("oci://" + remoteServer))
+      .plainHttp()
       .call();
     assertThat(result)
       .contains("Pushed: ", "test:0.1.0", "Digest: ");
   }
 
   @Test
   void pushWithDebugShowsDebugMessages() {
-    Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).call();
+    Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).plainHttp().call();
     final String result = Helm.push()
       .withChart(packagedChart)
       .withRemote(URI.create("oci://" + remoteServer))
+      .plainHttp()
       .debug()
       .call();
     assertThat(result)

diff --git a/helm-java/src/test/java/com/marcnuri/helm/HelmRegistryTest.java b/helm-java/src/test/java/com/marcnuri/helm/HelmRegistryTest.java
@@ -43,15 +43,15 @@ class Login {
     @Test
     void withValidCredentialsSucceeds() {
       final String result = Helm.registry().login()
-        .withHost(remoteServer).withUsername("username").withPassword("password").call();
+        .withHost(remoteServer).withUsername("username").withPassword("password").plainHttp().call();
       assertThat(result).startsWith("Login Succeeded");
     }
 
     @Test
     void withDebugAndValidCredentialsSucceeds() {
       final String result = Helm.registry().login()
         .debug()
-        .withHost(remoteServer).withUsername("username").withPassword("password").call();
+        .withHost(remoteServer).withUsername("username").withPassword("password").plainHttp().call();
       assertThat(result)
         .containsPattern(Pattern.compile("^Login Succeeded$", Pattern.MULTILINE))
         .contains("level=info msg=\"authorized request\"");
@@ -60,7 +60,7 @@ void withDebugAndValidCredentialsSucceeds() {
     @Test
     void withInvalidCredentialsFails() {
       final RegistryCommand.LoginCommand loginCommand = Helm.registry().login()
-        .withHost(remoteServer).withUsername("username").withPassword("invalid");
+        .withHost(remoteServer).withUsername("username").withPassword("invalid").plainHttp();
       assertThatThrownBy(loginCommand::call)
         .isInstanceOf(IllegalStateException.class)
         .hasMessageContainingAll(
@@ -72,7 +72,7 @@ void withInvalidCredentialsFails() {
     void withDebugAndInvalidCredentialsFails() {
       final RegistryCommand.LoginCommand loginCommand = Helm.registry().login()
         .debug()
-        .withHost(remoteServer).withUsername("username").withPassword("invalid");
+        .withHost(remoteServer).withUsername("username").withPassword("invalid").plainHttp();
       assertThatThrownBy(loginCommand::call)
         .isInstanceOf(IllegalStateException.class)
         .hasMessageContainingAll(
@@ -87,15 +87,15 @@ class Logout {
 
     @Test
     void withPreviousLoginSucceeds() {
-      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword("password").call();
+      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword("password").plainHttp().call();
       final String result = Helm.registry().logout()
         .withHost(remoteServer).call();
       assertThat(result).startsWith("Removing login credentials for " + remoteServer);
     }
 
     @Test
     void withDebugAndPreviousLoginSucceeds() {
-      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword("password").call();
+      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword("password").plainHttp().call();
       final String result = Helm.registry().logout()
         .debug()
         .withHost(remoteServer).call();

diff --git a/helm-java/src/test/java/com/marcnuri/helm/HelmShowTest.java b/helm-java/src/test/java/com/marcnuri/helm/HelmShowTest.java
@@ -137,12 +137,13 @@ void setUp() {
       final String password = UUID.randomUUID().toString(); // If default password is used, test is flaky ¯\_(ツ)_/¯
       remoteServer = Helm.HelmLibHolder.INSTANCE.RepoOciServerStart(
         new RepoServerOptions(null, null, password)).out;
-      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).call();
+      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).plainHttp().call();
       helm.packageIt().withDestination(tempDir).call();
       final Path packagedChart = tempDir.resolve("test-0.1.0.tgz");
       Helm.push()
         .withChart(packagedChart)
         .withRemote(URI.create("oci://" + remoteServer))
+        .plainHttp()
         .call();
     }
 
@@ -172,12 +173,13 @@ void setUp() {
       final String password = UUID.randomUUID().toString(); // If default password is used, test is flaky ¯\_(ツ)_/¯
       remoteServer = Helm.HelmLibHolder.INSTANCE.RepoOciServerStart(
         new RepoServerOptions(null, null, password)).out;
-      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).call();
+      Helm.registry().login().withHost(remoteServer).withUsername("username").withPassword(password).plainHttp().call();
       helm.packageIt().withDestination(tempDir).call();
       final Path packagedChart = tempDir.resolve("test-0.1.0.tgz");
       Helm.push()
         .withChart(packagedChart)
         .withRemote(URI.create("oci://" + remoteServer))
+        .plainHttp()
         .call();
     }
 

diff --git a/native/internal/helm/registry.go b/native/internal/helm/registry.go
@@ -60,6 +60,7 @@ func RegistryLogin(options *RegistryOptions) (string, error) {
 		action.WithKeyFile(options.KeyFile),
 		action.WithCAFile(options.CaFile),
 		action.WithInsecure(options.InsecureSkipTLSverify),
+		action.WithPlainHTTPLogin(options.PlainHttp),
 	)
 	return appendToOutOrErr(debugBuffer, getRegistryClientOut().String(), err)
 }

diff --git a/native/main_test.go b/native/main_test.go
@@ -166,15 +166,17 @@ func TestPush(t *testing.T) {
 	})
 	_ = helm.Package(&helm.PackageOptions{Path: create, Destination: dir})
 	_, _ = helm.RegistryLogin(&helm.RegistryOptions{
-		Hostname: srv.RegistryURL,
-		Username: "username",
-		Password: "password",
-		Debug:    true,
+		Hostname:    srv.RegistryURL,
+		Username:    "username",
+		Password:    "password",
+		Debug:       true,
+		CertOptions: helm.CertOptions{PlainHttp: true},
 	})
 	out, err := helm.Push(&helm.PushOptions{
-		Chart:  path.Join(dir, "test-0.1.0.tgz"),
-		Remote: "oci://" + srv.RegistryURL,
-		Debug:  true,
+		Chart:       path.Join(dir, "test-0.1.0.tgz"),
+		Remote:      "oci://" + srv.RegistryURL,
+		Debug:       true,
+		CertOptions: helm.CertOptions{PlainHttp: true},
 	})
 	if err != nil {
 		t.Errorf("Expected push to succeed, got %s", err)
@@ -217,9 +219,10 @@ func TestRegistryLogin(t *testing.T) {
 		t.Errorf("Expected server to be started")
 	}
 	_, err = helm.RegistryLogin(&helm.RegistryOptions{
-		Hostname: srv.RegistryURL,
-		Username: "username",
-		Password: "password",
+		Hostname:    srv.RegistryURL,
+		Username:    "username",
+		Password:    "password",
+		CertOptions: helm.CertOptions{PlainHttp: true},
 	})
 	if err != nil {
 		t.Errorf("Expected login to succeed, got %s", err)
@@ -246,16 +249,18 @@ func TestRegistryLogout(t *testing.T) {
 	defer helm.RepoServerStopAll()
 	srv, _ := helm.RepoOciServerStart(&helm.RepoServerOptions{})
 	_, err := helm.RegistryLogin(&helm.RegistryOptions{
-		Hostname: srv.RegistryURL,
-		Username: "username",
-		Password: "password",
+		Hostname:    srv.RegistryURL,
+		Username:    "username",
+		Password:    "password",
+		CertOptions: helm.CertOptions{PlainHttp: true},
 	})
 	if err != nil {
 		t.Error("Expected initial login to succeed")
 	}
 	var out string
 	out, err = helm.RegistryLogout(&helm.RegistryOptions{
-		Hostname: srv.RegistryURL,
+		Hostname:    srv.RegistryURL,
+		CertOptions: helm.CertOptions{PlainHttp: true},
 	})
 	if err != nil {
 		t.Errorf("Expected logout to succeed, got %s", err)
-Original file line number
+Diff line change
@@ Expand Up / @@ -6,7 +6,7 @@ on: @@
           - 'v*'
     env:
-      GO_VERSION: 1.25.10
+      GO_VERSION: 1.26.7
     jobs:
       release:
@@ Expand Down @@