chore(deps): update dependency helm/helm to v3.21.3

[renovate]

This PR contains the following updates:

Package	Update	Change
helm/helm	minor	v3.20.2 → v3.21.3

---

Release Notes

helm/helm (helm/helm)

v3.21.3

Compare Source

v3.21.2

Compare Source

v3.21.1: Helm v3.21.1

Compare Source

Helm v3.21.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• Fixed nil pointer panic that could happen with helm template in ClientOnly flows. Now correctly returns a template error #​31920
• Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #​32152
• Bumped Go from 1.25 to 1.26 #​32168
• Dependency version updates

Installation and Upgrading

Download Helm v3.21.1. The common platform binaries are here:

• MacOS amd64 (checksum / dd353172bc8cef8c1845501043b82224520a79ff8b2cd4388ec5bfa060ce96b9)
• MacOS arm64 (checksum / 779ac09ad0cf333b12402555a32bd26174462384aba2f5a3845876f45d34146a)
• Linux amd64 (checksum / a349c62d6ab2d5d11f044fc0d3afa6deed7d27cc7d5c351f536b169d9fc2cc1a)
• Linux arm (checksum / ae52acbd13d1efa0d787aa679519da813c114c1b29b68e09a781fe258fc5c696)
• Linux arm64 (checksum / 9b3deeecb56c4795aa806858fa4d6388c049e3edfcd771723bd12c1cbef66893)
• Linux i386 (checksum / 1901a40be004699a2ac2cf05874bd84dfbed1f791327a0bc65c351d537b0f139)
• Linux ppc64le (checksum / 136daecc0f4650158b2adedf14f29022402d92fd111041e55b4038c3df97c3bb)
• Linux s390x (checksum / e5601b71342cba12ffd504c03c710769134fbec5bbdea6c90c859506e54d7591)
• Linux riscv64 (checksum / e22b20fe16f6bd0d9729034ae76a9e81708bd94b0aa9628f617dc3dfbe876a2b)
• Windows amd64 (checksum / e9d0dbeac9c9923c1b444ac4a1fc8e59d9f9afbeb30b4b6e9a00ac60a45b9459)
• Windows arm64 (checksum / 9b8b803b27a5c1bdcbc75bcf8d1bf45c8f2ffede8ae29bed3ec093746b9807f9)

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
• 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

• fix(action): avoid nil REST client getter panic when installing CRDs c56dd00 (sergiochan)
• fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 702529f (Terry Howe)
• chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 178e120 (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dcf35f8 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 44aff8b (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 ae2f31f (dependabot[bot])
• Update .github/env 402225f (Terry Howe)
• ci: bump golangci-lint to v2.11.3 for go 1.26 00eac21 (Terry Howe)
• chore: bump go to 1.26 bec346a (Terry Howe)
• chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 58b6ccf (dependabot[bot])
• chore(deps): bump github.com/distribution/distribution/v3 30b9f51 (dependabot[bot])
• chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 858aa47 (dependabot[bot])
• chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 1af25d4 (dependabot[bot])
• chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 97e4bc3 (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 29bdd1b (dependabot[bot])
• fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 bad6cd4 (Terry Howe)
• chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 75c2e9b (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 cd4dac3 (dependabot[bot])

Full Changelog: helm/helm@v3.21.0...v3.21.1

v3.21.0: Helm v3.21.0

Compare Source

Helm v3.21.0 is a feature release. Users are encouraged to upgrade for the best experience.

[!WARNING]
Helm v3 is approaching end-of-life. Please update to Helm v4.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• Kubernetes client libraries to v1.36
• notable changes here

Installation and Upgrading

Download Helm v3.21.0. The common platform binaries are here:

• MacOS amd64 (checksum / 8bc0c1f85f8738cc3cda4a2cc73047145bcdcb1f4d9cdcc29073037bfb22fa2e)
• MacOS arm64 (checksum / 68bfbdc022c543a2a022597b20298216877e98abe6e4a345d3ecf114d79cae5f)
• Linux amd64 (checksum / 0093eb572e3d2380f094df162ddb525e219249de88957afe24cfbb19632acd36)
• Linux arm (checksum / d310ac387324538a37192e8e13628eb1def2596bbac6b6481ae20d8d5e3532bd)
• Linux arm64 (checksum / 8de5a0c9a47431e59fd560e91e0779c8cf9316c383da7efb84128a4c339ecb2d)
• Linux i386 (checksum / fc85f14c9ce7e6a48a2b19a97edbc5529ed7aa2bc10f3d2c241e1c2ef12ccd22)
• Linux ppc64le (checksum / e2dced0f903acda417f879012c7e09ca461000e26a04e8f7a1cfe0dcf495f62c)
• Linux s390x (checksum / a176d7460a615b8df5b1a58ecf09fcc731c7733ca4cf10116cf198575b0371b5)
• Linux riscv64 (checksum / 4935c95c55bc5c3357143698a87185e17a39de9b6148dfd6cce0fc11859dbfeb)
• Windows amd64 (checksum / 3ea6b8383e6c0b7ce45d06a5746313b8e9225edd88d42f4f64582ff3792d7b55)
• Windows arm64 (checksum / 90d8c87e07267e6c71e678c9e33dd11cc121789c823ccc380de9d1dd521c8cba)

This release was signed by @​gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.21.1 will contain only bug fixes.
• 3.22.0 is the next feature release for Kubernetes v1.37

Changelog

• [v3] Bump to version v3.21 e0878d4 (George Jenkins)
• fix: upgrade opentelemetry packages to patch CVEs 13d5fc4 (Terry Howe)
• fix: Chart dot-name path bug 2552884 (George Jenkins)
• fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow ec05dd5 (Terry Howe)
• add image index test b0dfec5 (Pedro Tôrres)
• fix pulling charts from OCI indices e629995 (Pedro Tôrres)
• chore(deps): bump the k8s-io group with 7 updates 9c854fb (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 a692247 (dependabot[bot])
• chore(deps): bump golang.org/x/term from 0.39.0 to 0.40.0 9f2a7f6 (dependabot[bot])
• chore(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 79f039b (dependabot[bot])
• chore(deps): bump golang.org/x/text from 0.33.0 to 0.34.0 45210d5 (dependabot[bot])
• Remove refactorring changes from coalesce_test.go e2df39f (Evans Mungai)
• Fix import 97affe0 (Evans Mungai)
• Update pkg/chart/common/util/coalesce_test.go c264166 (Evans Mungai)
• Fix lint warning d409df8 (Evans Mungai)
• Preserve nil values in chart already 6fdd101 (Evans Mungai)
• fix(values): preserve nil values when chart default is empty map b13743c (Evans Mungai)
• chore(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 703999d (dependabot[bot])
• chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 a04be96 (dependabot[bot])

New Contributors

• @​KrzysztofDziankowski made their first contribution in #​31829

Full Changelog: helm/helm@v3.20.0...v3.21.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.