Helm v3.22.0 is a feature release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
- Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
- Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
- primarily dependency updates and k8s-io group to 0.37.0
Installation and Upgrading
Download Helm v3.22.0. The common platform binaries are here:
- MacOS amd64 (checksum / bd1d09f316558dda23698527859600936fed1371021ce0f2272d66b2fdcfa69c)
- MacOS arm64 (checksum / 4c9982a6cdeb458b60258df66b55398ca5b19293f6877faffe2909ad6f23dfe0)
- Linux amd64 (checksum / 1e4ab49e429626cf6c6958d914248b78c9730803c2751b87627e171dc800e7bb)
- Linux arm (checksum / 695793765e2246824a7c859562886f79b1cc89d99420c89f940590440f7129ee)
- Linux arm64 (checksum / f14e804dfee240f55525b667488fe9adca349e63e00c9af634c0beb1421ac310)
- Linux i386 (checksum / b96b7a125cc7d38aa952a78b16e96d05426cd9791dd013be51ebab1c203d6729)
- Linux loong64 (checksum / <error>
BlobNotFound<message>The specified blob does not exist. RequestId:8c31497a-101e-0042-27b6-404cb4000000 Time:2026-09-09T23:55:30.1192401Z</message></error>) - Linux ppc64le (checksum / fa304f47163a19f4e275fe4e890465a8a80a6f26ce4772c6b1649355c995def1)
- Linux s390x (checksum / 3f2cfd73018dcb9c25814e89c5946a362a8b951d8cce03152138d8cb28abcbff)
- Linux riscv64 (checksum / 50f84d698daac65bded677c61db7138e082b23e667a3cabeff4fd2521614e498)
- Windows amd64 (checksum / 899615865726d39f9b245e71e848c5bf4adc7ed33a8c43ede660facb48151b43)
- Windows arm64 (checksum / 75a331a3b03d11aed6369bdf6a1f8f9d33635bc820de5cd6025a581292046805)
This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.
The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.
What's Next
- 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
- 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
- chore(deps): bump the k8s-io group across 1 directory with 6 updates [144ca6] (dependabot[bot])
- bump version to 3.22 (#32606) [b5de8b] (Scott Rigby)
- fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362) [9dbcb9] (kimsungmin1)
- chore(deps): bump the github-actions group across 1 directory with 4 updates (#32575) [665ab5] (dependabot[bot])
- chore(deps): bump the k8s-io group with 7 updates (#32573) [084109] (dependabot[bot])
- chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563) [d0569c] (dependabot[bot])
- chore(deps): bump the github-actions group across 1 directory with 4 updates (#32557) [bcbdb1] (dependabot[bot])
- chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554) [6cdcc8] (dependabot[bot])
- chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542) [158719] (dependabot[bot])
- [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 (#32536) [a442b8] (Scott Rigby)
- fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 (#32535) [adab0e] (Scott Rigby)
- chore(deps): bump the github-actions group with 4 updates (#32524) [c068b5] (dependabot[bot])
- chore(deps): bump the github-actions group with 4 updates [74271c] (dependabot[bot])
- chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 [1c50d2] (dependabot[bot])
- chore(deps): bump the github-actions group with 4 updates (#32509) [882154] (dependabot[bot])
- chore(deps): bump actions/stale in the github-actions group (#32488) [05a279] (dependabot[bot])
- chore(deps): bump ossf/scorecard-action in the github-actions group (#32461) [c27e75] (dependabot[bot])
- fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 [bd392c] (Karan V)
- chore(deps): bump the k8s-io group with 7 updates [66a6f5] (dependabot[bot])
- chore(deps): bump the github-actions group with 4 updates [7cd012] (dependabot[bot])
- chore(deps): bump github/codeql-action/upload-sarif (#32449) [79330f] (dependabot[bot])
- chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#32446) [b29c73] (dependabot[bot])
- chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 [973bb3] (dependabot[bot])
- chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 [e25efc] (dependabot[bot])
- chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 [98e547] (dependabot[bot])
- chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#32412) [7f4b72] (dependabot[bot])
- chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#32381) [2cf143] (dependabot[bot])
- chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#32383) [270f73] (dependabot[bot])
- chore(deps): bump github/codeql-action/upload-sarif (#32382) [9e3a01] (dependabot[bot])
- ci: auto-label PRs targeting dev-v3 (#32340) [c9ed0c] (Benoit Tigeot)
- chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32331) [b842dd] (dependabot[bot])
- chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32332) [f6047c] (dependabot[bot])
- chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#32357) [f2f6bf] (dependabot[bot])
- chore(deps): bump actions/checkout from 4.2.2 to 7.0.0 (#32368) [69f70a] (dependabot[bot])
- chore(deps): bump actions/stale from 9.0.0 to 10.4.0 (#32369) [c95222] (dependabot[bot])
- chore(deps): bump actions/setup-go from 5.1.0 to 6.5.0 (#32358) [fc71f5] (dependabot[bot])
- chore(deps): bump github/codeql-action/upload-sarif (#32360) [659631] (dependabot[bot])
- chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#32359) [5d9943] (dependabot[bot])
- chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#32356) [a3d7a6] (dependabot[bot])
- chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#32354) [8e1997] (dependabot[bot])
- chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#32353) [24ef09] (dependabot[bot])
- chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#32310) [8082dd] (dependabot[bot])
- chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) [2c2449] (dependabot[bot])
- chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#32306) [953d28] (dependabot[bot])
- fix(engine): prevent Files.Lines panic on empty file [c02a9a] (Mahesh Sadupalli)
- Apply suggestions from code review [093015] (Benoit Tigeot)
- fix: drop containerd v1 dep to resolve govulncheck CVEs [a06188] (Benoit Tigeot)
- chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 [f97983] (dependabot[bot])
- chore(deps): bump github.com/cyphar/filepath-securejoin [c44466] (dependabot[bot])
- chore(deps): bump the k8s-io group with 2 updates [1bf9b5] (dependabot[bot])
- fixes [b7a0fd] (Matheus Pimenta)
- chore(deps): bump the k8s-io group across 1 directory with 2 updates [119a7d] (dependabot[bot])
- fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 [2fb05f] (Terry Howe)
- chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 [acc867] (dependabot[bot])
- chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 [b92093] (dependabot[bot])
- chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 [5b5ef1] (dependabot[bot])
- chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 [af67af] (dependabot[bot])
- Update .github/env [ceb9a6] (Terry Howe)
- ci: bump golangci-lint to v2.11.3 for go 1.26 [0ed92f] (Terry Howe)
- chore: bump go to 1.26 [c678c0] (Terry Howe)
- chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 [12c4d4] (dependabot[bot])
- chore(deps): bump github.com/distribution/distribution/v3 [a0f971] (dependabot[bot])
- chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 [995c31] (dependabot[bot])
- chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 [8c1716] (dependabot[bot])
- chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 [fe141b] (dependabot[bot])
- chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 [980836] (dependabot[bot])
- fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 [1dde6c] (Terry Howe)
- chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 [0162fe] (dependabot[bot])
- chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 [a664a5] (dependabot[bot])
- [v3] Bump to version v3.21 (#32103) [3033a7] (George Jenkins)
- [v3 backport] Fix rollback for missing resources [0a4757] (Feruzjon Muyassarov)
- fix(action): avoid nil REST client getter panic when installing CRDs [711a4e] (sergiochan)
