Skip to content

Update dependency helm to v3.10.0

GitLab Dependency Bot requested to merge gitlab-renovate-forks/helm-install-image:renovate/helm-3.x into master

This MR contains the following updates:

Package Update Change
helm minor 3.9.3 -> 3.10.0

MR created with the help of gitlab-org/frontend/renovate-gitlab-bot

Release Notes

helm/helm

v3.10.0

Compare Source

Helm v3.10.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing MRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Added --set-json flag to set json values.
  • Added support helm list --no-headers
  • Added --burst-limit option for client-side throttling limit configuration

Installation and Upgrading

Download Helm v3.10.0. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.10.1 will contain only bug fixes and be released on October 12, 2022.
  • 3.11.0 is the next feature release and will be released on January 18, 2023

Changelog

  • bump version to v3.10.0 ce66412 (Matt Farina)
  • Updating to Kubernetes 1.25 client libs 2108a23 (Matt Farina)
  • Updating the certificates used for testing 7cbec35 (Matt Farina)
  • Updating index handling 225f8d7 (Matt Farina)
  • Drop direct github.com/docker/docker dependency ea5365a (Mikhail Mazurskiy)
  • fix special string in the filename ece46c1 (d-d-up)
  • chore: add oci install description d1c0b7e (longkai)
  • Fixing x509 test on darwin b3aa0b4 (Matt Farina)
  • Bump k8s.io/kube-openapi to fix CVE-2022-1996 in github.com/emicklei/go-restful 1e0f8a4 (Guilherme Macedo)
  • fixes #​11142 missing array length check on release b9f347a (Arvid E. Picciani)
  • chore(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 0c9de28 (dependabot[bot])
  • Upgrading to Kubernetes 1.24.2 211bd2b (Martin Hickey)
  • Bump Oras to 1.2.0 51e6c8e (Martin Hickey)
  • fix: use go install instead of go get aa6e82b (Matthew Fisher)
  • bump Go 1.18 39b0a82 (yxxhero)
  • fix: improve logging & safety of statefulSetReady 7c74f1d (Dominic Evans)
  • make token caching an opt in feature 42a04c7 (Soule BA)
  • chore(deps): bump github.com/stretchr/testify from 1.7.4 to 1.7.5 0acd81b (dependabot[bot])
  • chore(deps): bump github.com/rubenv/sql-migrate from 1.1.1 to 1.1.2 ccc104a (dependabot[bot])
  • chore(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (#​11075) 3ff331f (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.4 994d786 (dependabot[bot])
  • Upgrading to Kubernetes 1.24.1 packages 5ef01c2 (Matt Farina)
  • chore(deps): bump github.com/Masterminds/squirrel from 1.5.2 to 1.5.3 fe2a66c (dependabot[bot])
  • feat(*): add flags/env for kube api tls overrides 687852e (Justen Walker)
  • Add --burst-limit option for client-side throttling limit configuration (#​10842) 823d929 (Igor Sutton)
  • chore(deps): bump github.com/lib/pq from 1.10.5 to 1.10.6 f3cfd4f (dependabot[bot])
  • chore(deps): bump oras.land/oras-go from 1.1.0 to 1.1.1 a3bb2f7 (dependabot[bot])
  • chore(deps): bump github.com/evanphx/json-patch 606633c (dependabot[bot])
  • Bump github.com/lib/pq from 1.10.4 to 1.10.5 ede591f (dependabot[bot])
  • build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4 8b69048 (dependabot[bot])
  • build(deps): bump github.com/docker/docker 67ed6e2 (dependabot[bot])
  • bump version to v3.9.0 1db28a2 (Matt Farina)
  • build(deps): bump github.com/jmoiron/sqlx from 1.3.4 to 1.3.5 43aa313 (dependabot[bot])
  • Bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 aafc920 (dependabot[bot])
  • Fixed helm uninstall not deleting the resource. fe00c92 (Mayank Thakur)
  • Fix UT d8c0e01 (stan-sz)
  • Fix linter 6c55d9e (stan-sz)
  • Update install.go a7e4ae7 (stan-sz)
  • Log error message on failed download 660e4ff (stan-sz)
  • Add support helm list --no-headers d76f86b (suzaku)
  • update go.mod d20c954 (yxxhero)
  • fix --registry-config issue 9f199b6 (yxxhero)
  • feat: add --set-json flag to set json values. 11e7d0c (Luca Di Rocco)
  • fix(helm): ignore file-not-found error for helm repo list -o json 94779dc (Teo Klestrup Röijezon)

v3.9.4

Compare Source

Helm v3.9.4 is a security (patch) release. Users are strongly recommended to update to this release.

While fuzz testing Helm, provided by the CNCF, a possible out of memory panic was discovered with the strvals package. Out of memory panics cannot be recovered from in Go. This can potentially be used to produce a denial of service (DOS). More details are available in the advisory.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing MRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.9.4. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.10.0 is the next feature release and will be on September 14, 2022

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, click this checkbox.

This MR has been generated by Renovate Bot.

Edited by GitLab Dependency Bot

Merge request reports