Helm v3.18.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

• Add support for JSON Schema 2020
• Enabled cpu and memory profiling
• Add hook annotation to output hook logs to client on error

Installation and Upgrading

Download Helm v3.18.0. The common platform binaries are here:

• MacOS amd64 (checksum / 2be99836549413c2f0212d644e8740abd8ba5d7f55484c29d3363cea339891d9)
• MacOS arm64 (checksum / 4ce30bd86a3fc4f31d297827a5bf5b10ced8c4da2ff810bf9f53f561dbed7d10)
• Linux amd64 (checksum / 961e587fc2c03807f8a99ac25ef063fa9e6915f1894729399cbb95d2a79af931)
• Linux arm (checksum / 88f6264801fd9c5bb3d2d24c7b3da4e239d137b39bacd18d25b22823e6bd31f7)
• Linux arm64 (checksum / 489c9d2d3ea4e095331249d74b4407fb5ac1d338c28429d70cdedccfe6e2b029)
• Linux i386 (checksum / 3302c90957e259897d238feee65e05abb3fc586ab80a49cb577fd123b2e94cb3)
• Linux ppc64le (checksum / 559036fe183593488275a19796ca0b13f56e9d586b697a0d968e8b1e24472d7c)
• Linux s390x (checksum / ab0e347751b425ed9c4b619159a9ffeb85a82e07f7333921dec1a26780195a72)
• Linux riscv64 (checksum / ae98c3d9d352ac91909d28dbb03d91fc506cafcce647cfbd1954a02ef84f91d1)
• Windows amd64 (checksum / ae6a1b832043e3433d2823fc42692057dbf007efad34292708130b412c169a94)
• Windows arm64 (checksum / f354f0bdf725a0530162754632bc54fed2c56ad11a899b031702ee1c70ecb5fc)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.18.1 on June 11th, 2025 will contain only bug fixes.
• 3.19.0 on September 11th, 2025 is the next feature release.

Changelog

• build(deps): bump the k8s-io group with 7 updates cc58e3f5a3aa615c6a86275e6f4444b5fdd3cc4e (dependabot[bot])
• fix: govulncheck workflow bf1436baf3c235cb1b689a016b7162d0cddd3947 (Matthieu MOREL)
• bump version to v3.18.0 d8edc2aebc2e5ad624640b56a22258b9bbec9099 (Robert Sirchia)
• fix:add proxy support when mTLS configured 48377fe4515cc6a5bf5ac92ea6086090e7b82798 (Rongrong Liu)
• docs: Note about http fallback for OCI registries cdd7c105a60929d733c1b67d4fe5062ff5619ac2 (Terry Howe)
• Bump net package to avoid CVE on dev-v3 f9ab8f772a01ff918d4a54febe18d4cc6899f2e2 (Benoit Tigeot)
• Bump toml 087fa18276033d37648deaf082de6b3ea635fb88 (Benoit Tigeot)
• backport #30677to dev3 2a5f83b960738cc58f090e67ac108418ac4dedf2 (dongjiang)
• build(deps): bump github.com/rubenv/sql-migrate from 1.7.2 to 1.8.0 5df2f3018a6ac20db369390fed142463d97b487f (dependabot[bot])
• Add install test for TakeOwnership flag 0906fe7f6b201d9aa73eb22f518366ea75c57937 (Evans Mungai)
• Fix --take-ownership 4ee3a19e9a98e3b58eb4579f019666e834408ca3 (Patrick Seidensal)
• build(deps): bump github.com/rubenv/sql-migrate from 1.7.1 to 1.7.2 3538c2a677809308821c18bdc309e5954f822211 (dependabot[bot])
• build(deps): bump golang.org/x/crypto from 0.36.0 to 0.37.0 6fa95c805e449eb7332059cc4aee837a9358f334 (dependabot[bot])
• build(deps): bump golang.org/x/term from 0.30.0 to 0.31.0 741b5beeb95b0858b1809a625870310a509a4d61 (dependabot[bot])
• Testing text bump 017f9fad2b2b51f1292c73922f0857b93d2fb233 (Benoit Tigeot)
• Permit more Go version and not only 1.23.8 666725202b2c7da205fe0c34a1ac5812e88d2500 (Benoit Tigeot)
• Bumps github.com/distribution/distribution/v3 from 3.0.0-rc.3 to 3.0.0 4ad1ccd8fb8bbf4ffec8ccab411f2ee57360824d (Benoit Tigeot)
• Unarchiving fix 3ce10e4f81e064a3807098c3d466c33f2ece8a18 (Matt Farina)
• Fix typo 422c58e4a2d7a00e2275916be1bfda0b28efba82 (Benoit Tigeot)
• Report as debug log, the time spent waiting for resources 5e7f12d4c3e2e37fa4bc065fddde8e191c336a15 (Benoit Tigeot)
• build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27 dcc286ca562e91bc5ea052d734d11e4bf2905e19 (dependabot[bot])
• Update pkg/registry/fallback.go 1435ec7c7717a147fb17701fd0da3992f7a44bb6 (Terry Howe)
• automatic fallback to http 674e882c88535c75b672cb6986df8fc23ad21dad (Terry Howe)
• chore(oci): upgrade to ORAS v2 c188441757c66e8e863969c5cb1b27be61482a22 (Terry Howe)
• Updating to 0.37.0 for x/net 2b12490c329e5a61c79f6f71cee8b450770b0752 (Matt Farina)
• build(deps): bump the k8s-io group with 7 updates 0648918abbc894b035351353a2af82b5c8b161c8 (dependabot[bot])
• build(deps): bump golang.org/x/crypto from 0.35.0 to 0.36.0 0911b9c7b0f29bd49905865cd77509c2d84c4479 (dependabot[bot])
• build(deps): bump github.com/opencontainers/image-spec 2f22d5544c78b3e81de95bac061515630cb5d157 (dependabot[bot])
• build(deps): bump github.com/containerd/containerd from 1.7.25 to 1.7.26 89361c905aae85cf0a20ec68df2fdd52103847ed (dependabot[bot])
• build(deps): bump golang.org/x/crypto from 0.33.0 to 0.35.0 6d64160ab65863892ef1cec022b5391b17147c6d (dependabot[bot])
• Fix cherry-pick helm.sh/helm/v4 -> helm.sh/helm/v3 bcb83e465f4487b481b8843f4d5dfe4f26472c55 (Scott Rigby)
• Refactor based on review comment 2aa90b8f2603f033479278eb99993d2efe39624c (Chris Berry)
• Refactor based on review comment 5739197faa75b3e2c7d32a999c3e17bd8949756d (Chris Berry)
• Add HookOutputFunc and generic yaml unmarshaller b8e13878fcf542aff465a90635b4d29f93dfb434 (Chris Berry)
• clarify fix error message 97b0e11871252ad99054d911d92666f84fdac79a (Scott Rigby)
• fix err check 2f79afb0a3c506fd41ea89f13efcfa4379f88b5f (Scott Rigby)
• remove comments about previous functionality c77f4ec6c41db7d5641da723eb6f67d1b8b0e606 (Scott Rigby)
• add short circuit return 3cd6afe845c905d2bc1dfa259e2ab4b571c19234 (Scott Rigby)
• Update based on review comments 5367001f4fa283ffb4dd15741c2dff053b5dfb52 (Chris Berry)
• Update based on review comments 3c445158d85b1bec417803f418f0b686188b2399 (Chris Berry)
• Fix lint 4cb639ed4edab7729859328d443b102d05a4b32d (Chris Berry)
• Tidy up imports 20f859c9ffb5e0a7b48c8331093250bd162e3ee0 (Chris)
• Add hook annotations to output pod logs to client on success and fail ca90972b3d81acb1ad9d6f80bb1770113776f06a (Chris Berry)
• chore: use []error instead of []string a9e20757c6b348da7db789f81a874cdb5b315e9f (Evans Mungai)
• Update cmd/helm/profiling.go 996ad8445379b44bbefc9116e8b5a0cdd9bce259 (Evans Mungai)
• chore: update profiling doc in CONTRIBUTING.md 867c97e70d42f523a223973770149c7faeb6f04f (Evans Mungai)
• Update CONTRIBUTING guide af2410192d0854f1431efaa9858b2d830f3312c4 (Evans Mungai)
• Prefer environment variables to CLI flags c7dfa87f9d5640ed07b76bfda24dd1e3db635690 (Evans Mungai)
• Fix linter warning b39411a66829d711168de543fa823cbd5e749ca4 (Evans Mungai)
• Move pprof paths to HELM_PPROF env variable 4c50f01046be19467eb99495cbce51319700b81a (Evans Mungai)
• Update CONTRIBUTING.md 3b43f7be60c54edc3ea7d76d6253bb5d12eece32 (Evans Mungai)
• Update CONTRIBUTING.md a32e11bdc3af0250a10ce6bbb8a2dc566f66cd3d (Evans Mungai)
• Additional review fixes from PR 483ebf915da5ab2c2bbdb46644bca2fe22ae51f9 (Evans Mungai)
• feat: Add flags to enable CPU and memory profiling 461197f9c62f4c37ad2b727962db95378c3f3073 (Evans Mungai)
• build(deps): bump github.com/distribution/distribution/v3 e7fa545819dbb51c8f94a1936174ee48b52db694 (dependabot[bot])
• build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 d1687ba8d9c94c711215dc49ad88117585c9c765 (dependabot[bot])
• Moving to SetOut and SetErr for Cobra 4c2f88b2abb53ee04d6003e67d6efa44b29eb832 (Matt Farina)
• build(deps): bump the k8s-io group with 7 updates a2413aa26dd873a782b8f96cac424991b223c3da (dependabot[bot])
• build(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 959d643b977b2b1571fe3ccd21d8e9cbfe1b4ea3 (dependabot[bot])
• build(deps): bump golang.org/x/term from 0.28.0 to 0.29.0 3a87c684e77eef5fcd5bb3b2c51f8e739b871a7c (dependabot[bot])
• build(deps): bump golang.org/x/text from 0.21.0 to 0.22.0 711cef8d1c0602a949b39be4c6eafe118e2fc30c (dependabot[bot])
• build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 76806237ad36e527d2e6158f80ab84f237c52ec3 (dependabot[bot])
• build(deps): bump github.com/cyphar/filepath-securejoin 03747d963f7e51e7fd1eac8a768f2791bf25a7e3 (dependabot[bot])
• build(deps): bump github.com/evanphx/json-patch f1db83f78f06ee017492b471bb2c19ff2249aacd (dependabot[bot])
• build(deps): bump the k8s-io group with 7 updates 3bc3751f7019d2a1f5b922421d398f9ddd880106 (dependabot[bot])
• fix: check group for resource info match 2ebce786ba295a3ca7a281c3ffd78086cf561f89 (Jiasheng Zhu)
• Bump github.com/cyphar/filepath-securejoin from 0.3.6 to 0.4.0 8e86e76d50a9f365e79b6211100dd4308289da6c (dependabot[bot])
• add test for nullifying nested global value 326c1e3f6782a7ed53980ac010c44689c0ae4fb6 (Ryan Hockstad)
• Ensuring the file paths are clean prior to passing to securejoin fba9d08dced3583ef88fc235b307995830173aa9 (Matt Farina)
• Bump github.com/containerd/containerd from 1.7.24 to 1.7.25 a79be7d5d348525257ea3be3305f7343522bb083 (dependabot[bot])
• Bump golang.org/x/crypto from 0.31.0 to 0.32.0 b029d74a52009d4e14d406bcc952d2191e0200f0 (dependabot[bot])
• Bump golang.org/x/term from 0.27.0 to 0.28.0 a1c0ae88a7ccbda9b5915bac196db54e677fd1d2 (dependabot[bot])
• bump version to v3.17.0 d6db69ed66a3b127a96e3339a00ea84586310868 (Matt Farina)
• Bump github.com/moby/term from 0.5.0 to 0.5.2 54ffefbcf79b5d835c29a730ea7aef6afd9109ee (dependabot[bot])
• Add test case for removing an entire object ef2eb552837446fe8a5a91bc68abf4d9eab685a8 (Ryan Hockstad)
• Tests for bugfix: Override subcharts with null values #12879 60fcce18d1646e266dfe8191e25a85dcdb7b0038 (Scott Rigby)
• feat: Added multi-platform plugin hook support to v3 Signed-off-by: Steve Hipwell steve.hipwell@gmail.com 83dddb183946266289e55eb3c3d8c8a35b24b34a (Andrew Block)
• This commit fixes the issue where the yaml.Unmarshaller converts all int values into float64, this passes in option to decoder, which enables conversion of int into . 0a6834fdf060b4fbc4e1ea4bcb85908891539d48 (Althaf M)
• merge null child chart objects 5a58751a053ea59b88399487a5f0f8f5c27b9461 (Ryan Hockstad)