Skip to content

Bump helm.sh/helm/v3 from 3.21.3 to 3.22.0 - #272

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/helm.sh/helm/v3-3.21.4
Open

Bump helm.sh/helm/v3 from 3.21.3 to 3.22.0#272
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/helm.sh/helm/v3-3.21.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps helm.sh/helm/v3 from 3.21.3 to 3.21.4.

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.21.4 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • fix(engine): prevent Files.Lines panic on empty file (backport to v3)- #32303 by @​mahesh-sadupalli
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932- #32463 by @​karan-vk
  • [dev-v3 backport] fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158- #32535 by @​scottrigby
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061- #32536 by @​scottrigby
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0- (includes golang.org/x/text v0.40.0 to fix GO-2026-5970) #32308

Installation and Upgrading

Download Helm v3.21.4. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) 813176c51bb5c181dbbd7901298ddcc104cd3417 (dependabot[bot])
  • [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061 b6aa8b1d71140347f75ef0b77fac91f28ffe10b3 (Scott Rigby)
  • fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158 57ce7aeec1eb82422c5c349dfadda20ea3f743fe (Scott Rigby)
  • fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 ab71449c76f66e55064ae4503a6e7adae21dcfa9 (Karan V)
  • fix(engine): prevent Files.Lines panic on empty file 955dfab1e6bdd70b5ccd7b932b2d500e9e26566c (Mahesh Sadupalli)

... (truncated)

Commits
  • 813176c chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308)
  • b6aa8b1 [dev-v3 backport] deps: bump google.golang.org/grpc@v1.82.1 for GO-2026-6061
  • 57ce7ae fix: bump go.opentelemetry.io/otel@v1.44.0 for GO-2026-5158
  • ab71449 fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932
  • 955dfab fix(engine): prevent Files.Lines panic on empty file
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated the application’s underlying components and supporting libraries to newer releases. This maintenance update does not change user-facing features or behavior; the application continues to offer the same functionality.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 20, 2026
@coderabbitai

coderabbitai Bot commented Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: stackrox/roxie/.coderabbit.yml
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: ffa06b6a-0c15-4b88-92dd-302bc275d7ff
📥 Commits

Reviewing files that changed from the base of the PR and between bd65f8e and 2bb558d.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

📝 Walkthrough

Walkthrough

The Go module manifest updates Helm, Kubernetes modules, and other dependency versions. It adds indirect dependencies and removes several indirect requirements.

Changes

Go dependency updates

Layer / File(s) Summary
Update module requirements
go.mod		 Helm and Kubernetes modules are updated. Several indirect dependency versions change; ProtonMail crypto, Cloudflare CIRCL, and lib/pq are added, while other indirect requirements are removed.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: mclasmeier

Merge Risk: 🔵 Low · up to 2bb55

This dependency bump moves Helm to a feature release (v3.22.0) and Kubernetes modules to v0.37.0, while the PR description describes a v3.21.4 patch update. Confirm which version is intended before merging; the manifest itself shows no concrete defect.

Pre-merge checks | Passed 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly and concisely describes the main changeset: updating helm.sh/helm/v3 from 3.21.3 to 3.22.0. This matches the go.mod summary.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of helm.sh/helm/v3 exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@mclasmeier

mclasmeier commented Oct 12, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot
Bump helm.sh/helm/v3 from 3.21.3 to 3.22.0
2bb558d 
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump helm.sh/helm/v3 from 3.21.3 to 3.21.4 Bump helm.sh/helm/v3 from 3.21.3 to 3.22.0 Oct 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/helm.sh/helm/v3-3.21.4 branch from bd65f8e to 2bb558d Compare October 12, 2026 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mclasmeier mclasmeier mclasmeier approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mclasmeier