Update module helm.sh/helm/v3 to v3.18.4 [SECURITY] (#3704)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [helm.sh/helm/v3](https://redirect.github.com/helm/helm) | require |
minor | `v3.17.3` -> `v3.18.4` |

### GitHub Vulnerability Alerts

####
[CVE-2025-53547](https://redirect.github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm)

A Helm contributor discovered that a specially crafted `Chart.yaml` file
along with a specially linked `Chart.lock` file can lead to local code
execution when dependencies are updated.

### Impact

Fields in a `Chart.yaml` file, that are carried over to a `Chart.lock`
file when dependencies are updated and this file is written, can be
crafted in a way that can cause execution if that same content were in a
file that is executed (e.g., a `bash.rc` file or shell script). If the
`Chart.lock` file is symlinked to one of these files updating
dependencies will write the lock file content to the symlinked file.
This can lead to unwanted execution. Helm warns of the symlinked file
but did not stop execution due to symlinking.

This affects when dependencies are updated. When using the `helm`
command this happens when `helm dependency update` is run. `helm
dependency build` can write a lock file when one does not exist but this
vector requires one to already exist. This affects the Helm SDK when the
downloader `Manager` performs an update.

### Patches

This issue has been resolved in Helm v3.18.4

### Workarounds

Ensure the `Chart.lock` file in a chart is not a symlink prior to
updating dependencies.

### For more information

Helm's security policy is spelled out in detail in our
[SECURITY](https://redirect.github.com/helm/community/blob/master/SECURITY.md)
document.

### Credits

Disclosed by Jakub Ciolek at AlphaSense.

---

### Release Notes

<details>
<summary>helm/helm (helm.sh/helm/v3)</summary>

###
[`v3.18.4`](https://redirect.github.com/helm/helm/releases/tag/v3.18.4):
Helm v3.18.4

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.18.3...v3.18.4)

Helm v3.18.4 is a security release. Users are encouraged to upgrade for
the best experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

##### Installation and Upgrading

Download Helm v3.18.4. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.18.4-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-darwin-amd64.tar.gz.sha256sum)
/ 860a7238285b44b5dc7b3c4dad6194316885d7015d77c34e23177e0e9554af8f)
- [MacOS arm64](https://get.helm.sh/helm-v3.18.4-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-darwin-arm64.tar.gz.sha256sum)
/ 041849741550b20710d7ad0956e805ebd960b483fe978864f8e7fdd03ca84ec8)
- [Linux amd64](https://get.helm.sh/helm-v3.18.4-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-linux-amd64.tar.gz.sha256sum)
/ f8180838c23d7c7d797b208861fecb591d9ce1690d8704ed1e4cb8e2add966c1)
- [Linux arm](https://get.helm.sh/helm-v3.18.4-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-linux-arm.tar.gz.sha256sum)
/ 34ea88aef15fd822e839da262176a36e865bb9cfdb89b1f723811c0cc527f981)
- [Linux arm64](https://get.helm.sh/helm-v3.18.4-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-linux-arm64.tar.gz.sha256sum)
/ c0a45e67eef0c7416a8a8c9e9d5d2d30d70e4f4d3f7bea5de28241fffa8f3b89)
- [Linux i386](https://get.helm.sh/helm-v3.18.4-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-linux-386.tar.gz.sha256sum)
/ 75c2d9858725a5907faf8f19d9fb21c0263e4cb864d27d6df8809f96f147d3c0)
- [Linux ppc64le](https://get.helm.sh/helm-v3.18.4-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-linux-ppc64le.tar.gz.sha256sum)
/ dbd74c59e7710f26e058596723abbf73662b553e01f40dfb08508ffffaeb7b81)
- [Linux s390x](https://get.helm.sh/helm-v3.18.4-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-linux-s390x.tar.gz.sha256sum)
/ c8bafb34bcebd53494f0223239977e1ff7b487e714598a5843a0cb1788e20075)
- [Linux riscv64](https://get.helm.sh/helm-v3.18.4-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.4-linux-riscv64.tar.gz.sha256sum)
/ f67f39104c7e695cbba04dc3b4507a80a034ce9e5ccbe55c84e91b1553b787bd)
- [Windows amd64](https://get.helm.sh/helm-v3.18.4-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.18.4-windows-amd64.zip.sha256sum)
/ 0af12a2233d71ef4207db1eabbf103b554631206ed5b2b34fc56b73a52596888)
- [Windows arm64](https://get.helm.sh/helm-v3.18.4-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.18.4-windows-arm64.zip.sha256sum)
/ de6bc8fcffeb041f524a92c6026ea22ef6f939118a30e6bb8b996b77a38486b1)

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

##### What's Next

-   3.18.5 is the next patch release and will be on August 13, 2025
-   3.19.0 is the next minor release and will be on September 11, 2025

##### Changelog

- Disabling linter due to unknown issue
[`f20a4ad`](https://redirect.github.com/helm/helm/commit/f20a4ad1d5c953ca0fb3d3b30aa9aa796d472ef1)
(Matt Farina)
- build(deps): bump the k8s-io group with 7 updates
[`563b094`](https://redirect.github.com/helm/helm/commit/563b0947b995c48354319aa054830db61f793a08)
(dependabot\[bot])
- Updating link handling
[`00de613`](https://redirect.github.com/helm/helm/commit/00de613324df4dd930e6d231d9aae7f9dee29c76)
(Matt Farina)

###
[`v3.18.3`](https://redirect.github.com/helm/helm/releases/tag/v3.18.3):
Helm 3.18.3

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.18.2...v3.18.3)

Helm v3.18.3 is a patch release. Users are encouraged to upgrade for the
best experience. Users are encouraged to upgrade for the best
experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

##### Installation and Upgrading

Download Helm v3.18.3. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.18.3-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-darwin-amd64.tar.gz.sha256sum)
/ d186851d40b1999c5d75696bc0b754e4d29e860c8d0cf4c132ac1b1940c5cffc)
- [MacOS arm64](https://get.helm.sh/helm-v3.18.3-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-darwin-arm64.tar.gz.sha256sum)
/ 3fe3e9739ab3c75d88bfe13e464a79a2a7a804fc692c3258fa6a9d185d53e377)
- [Linux amd64](https://get.helm.sh/helm-v3.18.3-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-linux-amd64.tar.gz.sha256sum)
/ 6ec85f306dd8fe9eb05c61ba4593182b2afcfefb52f21add3fe043ebbdc48e39)
- [Linux arm](https://get.helm.sh/helm-v3.18.3-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-linux-arm.tar.gz.sha256sum)
/ 5ec62879f57d6acc0436440c88459d2a5c8de233273e73ff6498d79fd2d92653)
- [Linux arm64](https://get.helm.sh/helm-v3.18.3-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-linux-arm64.tar.gz.sha256sum)
/ 3382ebdc6d6e027371551a63fc6e0a3073a1aec1061e346692932da61cfd8d24)
- [Linux i386](https://get.helm.sh/helm-v3.18.3-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-linux-386.tar.gz.sha256sum)
/ 22d7bad5c6012729e550e09d0b719336ea98c9c7207730456d152f32124609af)
- [Linux ppc64le](https://get.helm.sh/helm-v3.18.3-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-linux-ppc64le.tar.gz.sha256sum)
/ ca5ab0bb205488276095881f04b72bfed5c0ddb92f715940dde6a7ccae72818c)
- [Linux s390x](https://get.helm.sh/helm-v3.18.3-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-linux-s390x.tar.gz.sha256sum)
/ be261f040b59c04ad4f1ce6fc2f976e500167475cadb468bf78cb9772300fb5d)
- [Linux riscv64](https://get.helm.sh/helm-v3.18.3-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.3-linux-riscv64.tar.gz.sha256sum)
/ 1f87dab39ed599af463abba2c8b2d4c625cfcbc2f2010da2c9c47db017b1c2ca)
- [Windows amd64](https://get.helm.sh/helm-v3.18.3-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.18.3-windows-amd64.zip.sha256sum)
/ 4cb9185cd7b84395853c04c84c4524a6b794cab07211cedc2e36839f53d8e26d)
- [Windows arm64](https://get.helm.sh/helm-v3.18.3-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.18.3-windows-arm64.zip.sha256sum)
/ 7e83d901af47ca804d99d2eb679b4622fdfe1b5b06b15550f5a432a0e4591bb8)

This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2
5E36 B98E ` and can be found at
[@&#8203;mattfarina](https://redirect.github.com/mattfarina) [keybase
account](https://keybase.io/mattfarina). Please use the attached
signatures for verifying this release using `gpg`.

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

##### What's Next

-   3.18.4 is the next patch release and will be on July 09, 2025
-   3.19.0 is the next minor release and will be on September 11, 2025

##### Changelog

- build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0
[`6838ebc`](https://redirect.github.com/helm/helm/commit/6838ebcf265a3842d1433956e8a622e3290cf324)
(dependabot\[bot])
- fix: user username password for login
[`5b9e2f6`](https://redirect.github.com/helm/helm/commit/5b9e2f6b4c4e2c8e21d85dc01fbb9d8a454a1fa9)
(Terry Howe)
- Update pkg/registry/transport.go
[`2782412`](https://redirect.github.com/helm/helm/commit/278241207306c699aa6da71fe9e5922fa5db1743)
(Terry Howe)
- Update pkg/registry/transport.go
[`e66cf6a`](https://redirect.github.com/helm/helm/commit/e66cf6afdd4d8f92beb80d2026ff663472fd89df)
(Terry Howe)
- fix: add debug logging to oci transport
[`191f05c`](https://redirect.github.com/helm/helm/commit/191f05c068a25a80cd206c1256c6b11a63c4068b)
(Terry Howe)

###
[`v3.18.2`](https://redirect.github.com/helm/helm/releases/tag/v3.18.2):
Helm 3.18.2

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.18.1...v3.18.2)

Helm v3.18.2 is a patch release. Users are encouraged to upgrade for the
best experience. Users are encouraged to upgrade for the best
experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

##### Installation and Upgrading

Download Helm v3.18.2. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.18.2-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-darwin-amd64.tar.gz.sha256sum)
/ 8bfc850d4451dccecb01c73bdc844cb1b3ed2f1b90a89fc47e7b1670e1f369ec)
- [MacOS arm64](https://get.helm.sh/helm-v3.18.2-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-darwin-arm64.tar.gz.sha256sum)
/ d82a30d654862668ae1e58dbbba5ea6ed5f84312da59666ef628bf73b2188d39)
- [Linux amd64](https://get.helm.sh/helm-v3.18.2-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-linux-amd64.tar.gz.sha256sum)
/ c5deada86fe609deefdf40e9cbbe3da2f8cf3f6a4551a0ebe7886dc8fcf98bce)
- [Linux arm](https://get.helm.sh/helm-v3.18.2-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-linux-arm.tar.gz.sha256sum)
/ a848c9db5e51f7cc4975bcfbba415c30cdfb67e141b6efc0e8b3a66cd89e8607)
- [Linux arm64](https://get.helm.sh/helm-v3.18.2-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-linux-arm64.tar.gz.sha256sum)
/ 03181a494a0916b370a100a5b2536104963b095be53fb23d1e29b2afb1c7de8d)
- [Linux i386](https://get.helm.sh/helm-v3.18.2-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-linux-386.tar.gz.sha256sum)
/ dae13caca7a24d0adff3f59183a269275522964d75c1e4cbdb0ffaddc659e7bc)
- [Linux ppc64le](https://get.helm.sh/helm-v3.18.2-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-linux-ppc64le.tar.gz.sha256sum)
/ 1d21b2acdd79a13d20585b61fe90bababdd3f7047530d66aad650869c772b5c3)
- [Linux s390x](https://get.helm.sh/helm-v3.18.2-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-linux-s390x.tar.gz.sha256sum)
/ 382920a48a0800cf2bb67bf6ab403aab15f7631b369bed9df9bdcfdd5ebd5ae9)
- [Linux riscv64](https://get.helm.sh/helm-v3.18.2-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.2-linux-riscv64.tar.gz.sha256sum)
/ d702db0191e6a4091d631760aded83f809d8d7edf962d5252f1ea46804183ebf)
- [Windows amd64](https://get.helm.sh/helm-v3.18.2-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.18.2-windows-amd64.zip.sha256sum)
/ 49fc2d74a351974ebf544f8252a4e43d7e5f9e0137472415393178c2d3996e9f)
- [Windows arm64](https://get.helm.sh/helm-v3.18.2-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.18.2-windows-arm64.zip.sha256sum)
/ 6ecdf10aa6f356ebb841d1732225437100e65fdb90f99170e1b2e5726e4fd10d)

This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2
5E36 B98E ` and can be found at
[@&#8203;mattfarina](https://redirect.github.com/mattfarina) [keybase
account](https://keybase.io/mattfarina). Please use the attached
signatures for verifying this release using `gpg`.

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

##### What's Next

-   3.18.3 is the next patch release and will be on July 09, 2025
-   3.19.0 is the next minor release and will be on September 11, 2025

##### Changelog

- fix: legacy docker support broken for login
[`04cad46`](https://redirect.github.com/helm/helm/commit/04cad4610054e5d546aa5c5d9c1b1d5cf68ec1f8)
(Terry Howe)
- Handle an empty registry config file.
[`bc9f8a2`](https://redirect.github.com/helm/helm/commit/bc9f8a2d8baad5a54f7b421275f44c04117eb5cb)
(Matt Farina)

###
[`v3.18.1`](https://redirect.github.com/helm/helm/releases/tag/v3.18.1):
Helm v3.18.1

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.18.0...v3.18.1)

Helm v3.18.1 is a patch release. Users are encouraged to upgrade for the
best experience. Users are encouraged to upgrade for the best
experience.

Notes:

- This release fixes regressions around template generation and OCI
registry interaction in 3.18.0
- There are at least 2 known regressions unaddressed in this release.
They are being worked on.
- Empty registry configuration files. When the file exists but it is
empty.
    -   Login to Docker Hub on some domains fails.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

##### Installation and Upgrading

Download Helm v3.18.1. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.18.1-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-darwin-amd64.tar.gz.sha256sum)
/ 3973bda1863d74614e1dca69ee65050928a80b88f6d10ec514fa7886a02de309)
- [MacOS arm64](https://get.helm.sh/helm-v3.18.1-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-darwin-arm64.tar.gz.sha256sum)
/ 93562d2a0e34a505954e5b9556e319f390bc5bd07bed754ddc038b09cfe6fbd9)
- [Linux amd64](https://get.helm.sh/helm-v3.18.1-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-linux-amd64.tar.gz.sha256sum)
/ b1c7e8e261fd30f34c617282813ecafc63628fcd59a255a9fc51b1fe43394c05)
- [Linux arm](https://get.helm.sh/helm-v3.18.1-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-linux-arm.tar.gz.sha256sum)
/ 6a58bf4091f798ac1a6fa7e21ea142fe138f5b688f2e3af0c49147f99210fff6)
- [Linux arm64](https://get.helm.sh/helm-v3.18.1-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-linux-arm64.tar.gz.sha256sum)
/ 5ddc8fbd4b17857754a95be799543ceafa5aa9532b05f738ee590a76bb049988)
- [Linux i386](https://get.helm.sh/helm-v3.18.1-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-linux-386.tar.gz.sha256sum)
/ 890bfd82f9fc8fe829f33c80e3d31463fc22d0f3605aaf3b009b3d7a616ba9cc)
- [Linux ppc64le](https://get.helm.sh/helm-v3.18.1-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-linux-ppc64le.tar.gz.sha256sum)
/ 4d03617f742e4774ddf2170840ec385c67abf0db93e5df1aa9a036bb1275988e)
- [Linux s390x](https://get.helm.sh/helm-v3.18.1-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-linux-s390x.tar.gz.sha256sum)
/ e17b3574bdd4152ed8962089e3c0143e660db64e828a90a20127c9e5f48ab932)
- [Linux riscv64](https://get.helm.sh/helm-v3.18.1-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.1-linux-riscv64.tar.gz.sha256sum)
/ 225bdea665c5313e48c0219b39b6f0daea3288b1567f4825c540063784113214)
- [Windows amd64](https://get.helm.sh/helm-v3.18.1-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.18.1-windows-amd64.zip.sha256sum)
/ d0f74d2043dae67992d4dcdd430844aa4817e4735a42ef9ecb4d2f042e2ed2bb)
- [Windows arm64](https://get.helm.sh/helm-v3.18.1-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.18.1-windows-arm64.zip.sha256sum)
/ 486f2eabae7b497afc4643e54464b700de6fbc509f4b5b31ca108979a11ba5fd)

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

##### What's Next

-   3.18.2 will contain only bug fixes.
-   3.19.0 on September 11th, 2025 is the next feature release.

##### Changelog

- fix(client): skipnode utilization for PreCopy
[`f6f8700`](https://redirect.github.com/helm/helm/commit/f6f8700a539c18101509434f3b59e6a21402a1b2)
(Brandt Keller)
- fix(client): layers now returns manifest - remove duplicate from
descriptors
[`4da7015`](https://redirect.github.com/helm/helm/commit/4da701593f8c8a137fc36a95f9e9ecfe1d01528f)
(Brandt Keller)
- fix(client): return nil on non-allowed media types
[`1a8507f`](https://redirect.github.com/helm/helm/commit/1a8507fd5ad910f466accfd1c784ed0c333c343a)
(Brandt Keller)
- Prevent fetching newReference again as we have in calling method
[`015531c`](https://redirect.github.com/helm/helm/commit/015531ca4f386a6fee6c9f48eae63124d19c76a7)
(Benoit Tigeot)
- Prevent failure when resolving version tags in oras memory store
[`9db1a12`](https://redirect.github.com/helm/helm/commit/9db1a120f9f7404044cc4619ea7379b430004e36)
(Benoit Tigeot)
- Update pkg/plugin/plugin.go
[`e8bfa0e`](https://redirect.github.com/helm/helm/commit/e8bfa0eed689ee822c6ba9b4bcae45ecdb36b671)
(Benoit Tigeot)
- Update pkg/plugin/plugin.go
[`24b4490`](https://redirect.github.com/helm/helm/commit/24b44902a266f911617105273d4afd16f25f4aaf)
(Benoit Tigeot)
- Wait for Helm v4 before raising when platformCommand and Command are
set
[`7e8f534`](https://redirect.github.com/helm/helm/commit/7e8f53421a184125cf988814206237ce01d95139)
(Benoit Tigeot)
- Fix 3.18.0 regression: registry login with scheme
[`ea04cea`](https://redirect.github.com/helm/helm/commit/ea04cea48bf2b312e506ae03c412c6fd95929c5c)
(Scott Rigby)
- Revert "fix (helm) : toToml\` renders int as float \[ backport to v3
]"
[`bec6609`](https://redirect.github.com/helm/helm/commit/bec66098fdb4ac37298f46701a2d5b28e5776b72)
(Matt Farina)

###
[`v3.18.0`](https://redirect.github.com/helm/helm/releases/tag/v3.18.0):
Helm v3.18.0

[Compare
Source](https://redirect.github.com/helm/helm/compare/v3.17.3...v3.18.0)

Helm v3.18.0 is a feature release. Users are encouraged to upgrade for
the best experience.

The community keeps growing, and we'd love to see you there!

- Join the discussion in [Kubernetes
Slack](https://kubernetes.slack.com):
    -   for questions and just to hang out
    -   for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via
[Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts:
[ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0)

##### Notable Changes

-   Add support for JSON Schema 2020
-   Enabled cpu and memory profiling
-   Add hook annotation to output hook logs to client on error

##### Installation and Upgrading

Download Helm v3.18.0. The common platform binaries are here:

- [MacOS amd64](https://get.helm.sh/helm-v3.18.0-darwin-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-darwin-amd64.tar.gz.sha256sum)
/ 2be99836549413c2f0212d644e8740abd8ba5d7f55484c29d3363cea339891d9)
- [MacOS arm64](https://get.helm.sh/helm-v3.18.0-darwin-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-darwin-arm64.tar.gz.sha256sum)
/ 4ce30bd86a3fc4f31d297827a5bf5b10ced8c4da2ff810bf9f53f561dbed7d10)
- [Linux amd64](https://get.helm.sh/helm-v3.18.0-linux-amd64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-linux-amd64.tar.gz.sha256sum)
/ 961e587fc2c03807f8a99ac25ef063fa9e6915f1894729399cbb95d2a79af931)
- [Linux arm](https://get.helm.sh/helm-v3.18.0-linux-arm.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-linux-arm.tar.gz.sha256sum)
/ 88f6264801fd9c5bb3d2d24c7b3da4e239d137b39bacd18d25b22823e6bd31f7)
- [Linux arm64](https://get.helm.sh/helm-v3.18.0-linux-arm64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-linux-arm64.tar.gz.sha256sum)
/ 489c9d2d3ea4e095331249d74b4407fb5ac1d338c28429d70cdedccfe6e2b029)
- [Linux i386](https://get.helm.sh/helm-v3.18.0-linux-386.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-linux-386.tar.gz.sha256sum)
/ 3302c90957e259897d238feee65e05abb3fc586ab80a49cb577fd123b2e94cb3)
- [Linux ppc64le](https://get.helm.sh/helm-v3.18.0-linux-ppc64le.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-linux-ppc64le.tar.gz.sha256sum)
/ 559036fe183593488275a19796ca0b13f56e9d586b697a0d968e8b1e24472d7c)
- [Linux s390x](https://get.helm.sh/helm-v3.18.0-linux-s390x.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-linux-s390x.tar.gz.sha256sum)
/ ab0e347751b425ed9c4b619159a9ffeb85a82e07f7333921dec1a26780195a72)
- [Linux riscv64](https://get.helm.sh/helm-v3.18.0-linux-riscv64.tar.gz)
([checksum](https://get.helm.sh/helm-v3.18.0-linux-riscv64.tar.gz.sha256sum)
/ ae98c3d9d352ac91909d28dbb03d91fc506cafcce647cfbd1954a02ef84f91d1)
- [Windows amd64](https://get.helm.sh/helm-v3.18.0-windows-amd64.zip)
([checksum](https://get.helm.sh/helm-v3.18.0-windows-amd64.zip.sha256sum)
/ ae6a1b832043e3433d2823fc42692057dbf007efad34292708130b412c169a94)
- [Windows arm64](https://get.helm.sh/helm-v3.18.0-windows-arm64.zip)
([checksum](https://get.helm.sh/helm-v3.18.0-windows-arm64.zip.sha256sum)
/ f354f0bdf725a0530162754632bc54fed2c56ad11a899b031702ee1c70ecb5fc)

The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get
you going from there. For **upgrade instructions** or detailed
installation notes, check the [install
guide](https://helm.sh/docs/intro/install/). You can also use a [script
to
install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3)
on any system with `bash`.

##### What's Next

-   3.18.1 on June 11th, 2025 will contain only bug fixes.
-   3.19.0 on September 11th, 2025 is the next feature release.

##### Changelog

- build(deps): bump the k8s-io group with 7 updates
[`cc58e3f`](https://redirect.github.com/helm/helm/commit/cc58e3f5a3aa615c6a86275e6f4444b5fdd3cc4e)
(dependabot\[bot])
- fix: govulncheck workflow
[`bf1436b`](https://redirect.github.com/helm/helm/commit/bf1436baf3c235cb1b689a016b7162d0cddd3947)
(Matthieu MOREL)
- bump version to v3.18.0
[`d8edc2a`](https://redirect.github.com/helm/helm/commit/d8edc2aebc2e5ad624640b56a22258b9bbec9099)
(Robert Sirchia)
- fix:add proxy support when mTLS configured
[`48377fe`](https://redirect.github.com/helm/helm/commit/48377fe4515cc6a5bf5ac92ea6086090e7b82798)
(Rongrong Liu)
- docs: Note about http fallback for OCI registries
[`cdd7c10`](https://redirect.github.com/helm/helm/commit/cdd7c105a60929d733c1b67d4fe5062ff5619ac2)
(Terry Howe)
- Bump net package to avoid CVE on dev-v3
[`f9ab8f7`](https://redirect.github.com/helm/helm/commit/f9ab8f772a01ff918d4a54febe18d4cc6899f2e2)
(Benoit Tigeot)
- Bump toml
[`087fa18`](https://redirect.github.com/helm/helm/commit/087fa18276033d37648deaf082de6b3ea635fb88)
(Benoit Tigeot)
- backport #&#8203;30677to dev3
[`2a5f83b`](https://redirect.github.com/helm/helm/commit/2a5f83b960738cc58f090e67ac108418ac4dedf2)
(dongjiang)
- build(deps): bump github.com/rubenv/sql-migrate from 1.7.2 to 1.8.0
[`5df2f30`](https://redirect.github.com/helm/helm/commit/5df2f3018a6ac20db369390fed142463d97b487f)
(dependabot\[bot])
- Add install test for TakeOwnership flag
[`0906fe7`](https://redirect.github.com/helm/helm/commit/0906fe7f6b201d9aa73eb22f518366ea75c57937)
(Evans Mungai)
- Fix --take-ownership
[`4ee3a19`](https://redirect.github.com/helm/helm/commit/4ee3a19e9a98e3b58eb4579f019666e834408ca3)
(Patrick Seidensal)
- build(deps): bump github.com/rubenv/sql-migrate from 1.7.1 to 1.7.2
[`3538c2a`](https://redirect.github.com/helm/helm/commit/3538c2a677809308821c18bdc309e5954f822211)
(dependabot\[bot])
- build(deps): bump golang.org/x/crypto from 0.36.0 to 0.37.0
[`6fa95c8`](https://redirect.github.com/helm/helm/commit/6fa95c805e449eb7332059cc4aee837a9358f334)
(dependabot\[bot])
- build(deps): bump golang.org/x/term from 0.30.0 to 0.31.0
[`741b5be`](https://redirect.github.com/helm/helm/commit/741b5beeb95b0858b1809a625870310a509a4d61)
(dependabot\[bot])
- Testing text bump
[`017f9fa`](https://redirect.github.com/helm/helm/commit/017f9fad2b2b51f1292c73922f0857b93d2fb233)
(Benoit Tigeot)
- Permit more Go version and not only 1.23.8
[`6667252`](https://redirect.github.com/helm/helm/commit/666725202b2c7da205fe0c34a1ac5812e88d2500)
(Benoit Tigeot)
- Bumps github.com/distribution/distribution/v3 from 3.0.0-rc.3 to 3.0.0
[`4ad1ccd`](https://redirect.github.com/helm/helm/commit/4ad1ccd8fb8bbf4ffec8ccab411f2ee57360824d)
(Benoit Tigeot)
- Unarchiving fix
[`3ce10e4`](https://redirect.github.com/helm/helm/commit/3ce10e4f81e064a3807098c3d466c33f2ece8a18)
(Matt Farina)
- Fix typo
[`422c58e`](https://redirect.github.com/helm/helm/commit/422c58e4a2d7a00e2275916be1bfda0b28efba82)
(Benoit Tigeot)
- Report as debug log, the time spent waiting for resources
[`5e7f12d`](https://redirect.github.com/helm/helm/commit/5e7f12d4c3e2e37fa4bc065fddde8e191c336a15)
(Benoit Tigeot)
- build(deps): bump github.com/containerd/containerd from 1.7.26 to
1.7.27
[`dcc286c`](https://redirect.github.com/helm/helm/commit/dcc286ca562e91bc5ea052d734d11e4bf2905e19)
(dependabot\[bot])
- Update pkg/registry/fallback.go
[`1435ec7`](https://redirect.github.com/helm/helm/commit/1435ec7c7717a147fb17701fd0da3992f7a44bb6)
(Terry Howe)
- automatic fallback to http
[`674e882`](https://redirect.github.com/helm/helm/commit/674e882c88535c75b672cb6986df8fc23ad21dad)
(Terry Howe)
- chore(oci): upgrade to ORAS v2
[`c188441`](https://redirect.github.com/helm/helm/commit/c188441757c66e8e863969c5cb1b27be61482a22)
(Terry Howe)
- Updating to 0.37.0 for x/net
[`2b12490`](https://redirect.github.com/helm/helm/commit/2b12490c329e5a61c79f6f71cee8b450770b0752)
(Matt Farina)
- build(deps): bump the k8s-io group with 7 updates
[`0648918`](https://redirect.github.com/helm/helm/commit/0648918abbc894b035351353a2af82b5c8b161c8)
(dependabot\[bot])
- build(deps): bump golang.org/x/crypto from 0.35.0 to 0.36.0
[`0911b9c`](https://redirect.github.com/helm/helm/commit/0911b9c7b0f29bd49905865cd77509c2d84c4479)
(dependabot\[bot])
- build(deps): bump github.com/opencontainers/image-spec
[`2f22d55`](https://redirect.github.com/helm/helm/commit/2f22d5544c78b3e81de95bac061515630cb5d157)
(dependabot\[bot])
- build(deps): bump github.com/containerd/containerd from 1.7.25 to
1.7.26
[`89361c9`](https://redirect.github.com/helm/helm/commit/89361c905aae85cf0a20ec68df2fdd52103847ed)
(dependabot\[bot])
- build(deps): bump golang.org/x/crypto from 0.33.0 to 0.35.0
[`6d64160`](https://redirect.github.com/helm/helm/commit/6d64160ab65863892ef1cec022b5391b17147c6d)
(dependabot\[bot])
- Fix cherry-pick helm.sh/helm/v4 -> helm.sh/helm/v3
[`bcb83e4`](https://redirect.github.com/helm/helm/commit/bcb83e465f4487b481b8843f4d5dfe4f26472c55)
(Scott Rigby)
- Refactor based on review comment
[`2aa90b8`](https://redirect.github.com/helm/helm/commit/2aa90b8f2603f033479278eb99993d2efe39624c)
(Chris Berry)
- Refactor based on review comment
[`5739197`](https://redirect.github.com/helm/helm/commit/5739197faa75b3e2c7d32a999c3e17bd8949756d)
(Chris Berry)
- Add HookOutputFunc and generic yaml unmarshaller
[`b8e1387`](https://redirect.github.com/helm/helm/commit/b8e13878fcf542aff465a90635b4d29f93dfb434)
(Chris Berry)
- clarify fix error message
[`97b0e11`](https://redirect.github.com/helm/helm/commit/97b0e11871252ad99054d911d92666f84fdac79a)
(Scott Rigby)
- fix err check
[`2f79afb`](https://redirect.github.com/helm/helm/commit/2f79afb0a3c506fd41ea89f13efcfa4379f88b5f)
(Scott Rigby)
- remove comments about previous functionality
[`c77f4ec`](https://redirect.github.com/helm/helm/commit/c77f4ec6c41db7d5641da723eb6f67d1b8b0e606)
(Scott Rigby)
- add short circuit return
[`3cd6afe`](https://redirect.github.com/helm/helm/commit/3cd6afe845c905d2bc1dfa259e2ab4b571c19234)
(Scott Rigby)
- Update based on review comments
[`5367001`](https://redirect.github.com/helm/helm/commit/5367001f4fa283ffb4dd15741c2dff053b5dfb52)
(Chris Berry)
- Update based on review comments
[`3c44515`](https://redirect.github.com/helm/helm/commit/3c445158d85b1bec417803f418f0b686188b2399)
(Chris Berry)
- Fix lint
[`4cb639e`](https://redirect.github.com/helm/helm/commit/4cb639ed4edab7729859328d443b102d05a4b32d)
(Chris Berry)
- Tidy up imports
[`20f859c`](https://redirect.github.com/helm/helm/commit/20f859c9ffb5e0a7b48c8331093250bd162e3ee0)
(Chris)
- Add hook annotations to output pod logs to client on success and fail
[`ca90972`](https://redirect.github.com/helm/helm/commit/ca90972b3d81acb1ad9d6f80bb1770113776f06a)
(Chris Berry)
- chore: use \[]error instead of \[]string
[`a9e2075`](https://redirect.github.com/helm/helm/commit/a9e20757c6b348da7db789f81a874cdb5b315e9f)
(Evans Mungai)
- Update cmd/helm/profiling.go
[`996ad84`](https://redirect.github.com/helm/helm/commit/996ad8445379b44bbefc9116e8b5a0cdd9bce259)
(Evans Mungai)
- chore: update profiling doc in CONTRIBUTING.md
[`867c97e`](https://redirect.github.com/helm/helm/commit/867c97e70d42f523a223973770149c7faeb6f04f)
(Evans Mungai)
- Update CONTRIBUTING guide
[`af24101`](https://redirect.github.com/helm/helm/commit/af2410192d0854f1431efaa9858b2d830f3312c4)
(Evans Mungai)
- Prefer environment variables to CLI flags
[`c7dfa87`](https://redirect.github.com/helm/helm/commit/c7dfa87f9d5640ed07b76bfda24dd1e3db635690)
(Evans Mungai)
- Fix linter warning
[`b39411a`](https://redirect.github.com/helm/helm/commit/b39411a66829d711168de543fa823cbd5e749ca4)
(Evans Mungai)
- Move pprof paths to HELM_PPROF env variable
[`4c50f01`](https://redirect.github.com/helm/helm/commit/4c50f01046be19467eb99495cbce51319700b81a)
(Evans Mungai)
- Update CONTRIBUTING.md
[`3b43f7b`](https://redirect.github.com/helm/helm/commit/3b43f7be60c54edc3ea7d76d6253bb5d12eece32)
(Evans Mungai)
- Update CONTRIBUTING.md
[`a32e11b`](https://redirect.github.com/helm/helm/commit/a32e11bdc3af0250a10ce6bbb8a2dc566f66cd3d)
(Evans Mungai)
- Additional review fixes from PR
[`483ebf9`](https://redirect.github.com/helm/helm/commit/483ebf915da5ab2c2bbdb46644bca2fe22ae51f9)
(Evans Mungai)
- feat: Add flags to enable CPU and memory profiling
[`461197f`](https://redirect.github.com/helm/helm/commit/461197f9c62f4c37ad2b727962db95378c3f3073)
(Evans Mungai)
- build(deps): bump github.com/distribution/distribution/v3
[`e7fa545`](https://redirect.github.com/helm/helm/commit/e7fa545819dbb51c8f94a1936174ee48b52db694)
(dependabot\[bot])
- build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
[`d1687ba`](https://redirect.github.com/helm/helm/commit/d1687ba8d9c94c711215dc49ad88117585c9c765)
(dependabot\[bot])
- Moving to SetOut and SetErr for Cobra
[`4c2f88b`](https://redirect.github.com/helm/helm/commit/4c2f88b2abb53ee04d6003e67d6efa44b29eb832)
(Matt Farina)
- build(deps): bump the k8s-io group with 7 updates
[`a2413aa`](https://redirect.github.com/helm/helm/commit/a2413aa26dd873a782b8f96cac424991b223c3da)
(dependabot\[bot])
- build(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0
[`959d643`](https://redirect.github.com/helm/helm/commit/959d643b977b2b1571fe3ccd21d8e9cbfe1b4ea3)
(dependabot\[bot])
- build(deps): bump golang.org/x/term from 0.28.0 to 0.29.0
[`3a87c68`](https://redirect.github.com/helm/helm/commit/3a87c684e77eef5fcd5bb3b2c51f8e739b871a7c)
(dependabot\[bot])
- build(deps): bump golang.org/x/text from 0.21.0 to 0.22.0
[`711cef8`](https://redirect.github.com/helm/helm/commit/711cef8d1c0602a949b39be4c6eafe118e2fc30c)
(dependabot\[bot])
- build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
[`7680623`](https://redirect.github.com/helm/helm/commit/76806237ad36e527d2e6158f80ab84f237c52ec3)
(dependabot\[bot])
- build(deps): bump github.com/cyphar/filepath-securejoin
[`03747d9`](https://redirect.github.com/helm/helm/commit/03747d963f7e51e7fd1eac8a768f2791bf25a7e3)
(dependabot\[bot])
- build(deps): bump github.com/evanphx/json-patch
[`f1db83f`](https://redirect.github.com/helm/helm/commit/f1db83f78f06ee017492b471bb2c19ff2249aacd)
(dependabot\[bot])
- build(deps): bump the k8s-io group with 7 updates
[`3bc3751`](https://redirect.github.com/helm/helm/commit/3bc3751f7019d2a1f5b922421d398f9ddd880106)
(dependabot\[bot])
- fix: check group for resource info match
[`2ebce78`](https://redirect.github.com/helm/helm/commit/2ebce786ba295a3ca7a281c3ffd78086cf561f89)
(Jiasheng Zhu)
- Bump github.com/cyphar/filepath-securejoin from 0.3.6 to 0.4.0
[`8e86e76`](https://redirect.github.com/helm/helm/commit/8e86e76d50a9f365e79b6211100dd4308289da6c)
(dependabot\[bot])
- add test for nullifying nested global value
[`326c1e3`](https://redirect.github.com/helm/helm/commit/326c1e3f6782a7ed53980ac010c44689c0ae4fb6)
(Ryan Hockstad)
- Ensuring the file paths are clean prior to passing to securejoin
[`fba9d08`](https://redirect.github.com/helm/helm/commit/fba9d08dced3583ef88fc235b307995830173aa9)
(Matt Farina)
- Bump github.com/containerd/containerd from 1.7.24 to 1.7.25
[`a79be7d`](https://redirect.github.com/helm/helm/commit/a79be7d5d348525257ea3be3305f7343522bb083)
(dependabot\[bot])
- Bump golang.org/x/crypto from 0.31.0 to 0.32.0
[`b029d74`](https://redirect.github.com/helm/helm/commit/b029d74a52009d4e14d406bcc952d2191e0200f0)
(dependabot\[bot])
- Bump golang.org/x/term from 0.27.0 to 0.28.0
[`a1c0ae8`](https://redirect.github.com/helm/helm/commit/a1c0ae88a7ccbda9b5915bac196db54e677fd1d2)
(dependabot\[bot])
- bump version to v3.17.0
[`d6db69e`](https://redirect.github.com/helm/helm/commit/d6db69ed66a3b127a96e3339a00ea84586310868)
(Matt Farina)
- Bump github.com/moby/term from 0.5.0 to 0.5.2
[`54ffefb`](https://redirect.github.com/helm/helm/commit/54ffefbcf79b5d835c29a730ea7aef6afd9109ee)
(dependabot\[bot])
- Add test case for removing an entire object
[`ef2eb55`](https://redirect.github.com/helm/helm/commit/ef2eb552837446fe8a5a91bc68abf4d9eab685a8)
(Ryan Hockstad)
- Tests for bugfix: Override subcharts with null values
[#&#8203;12879](https://redirect.github.com/helm/helm/issues/12879)
[`60fcce1`](https://redirect.github.com/helm/helm/commit/60fcce18d1646e266dfe8191e25a85dcdb7b0038)
(Scott Rigby)
- feat: Added multi-platform plugin hook support to v3 Signed-off-by:
Steve Hipwell <[email protected]>
[`83dddb1`](https://redirect.github.com/helm/helm/commit/83dddb183946266289e55eb3c3d8c8a35b24b34a)
(Andrew Block)
- This commit fixes the issue where the yaml.Unmarshaller converts all
int values into float64, this passes in option to decoder, which enables
conversion of int into .
[`0a6834f`](https://redirect.github.com/helm/helm/commit/0a6834fdf060b4fbc4e1ea4bcb85908891539d48)
(Althaf M)
- merge null child chart objects
[`5a58751`](https://redirect.github.com/helm/helm/commit/5a58751a053ea59b88399487a5f0f8f5c27b9461)
(Ryan Hockstad)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - "every weekday"
(UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

Author: pulumi-renovate[bot]

provider/go.mod

@@ -7,7 +7,7 @@ toolchain go1.24.1
 replace github.com/pulumi/pulumi-kubernetes/sdk/v4 => ../sdk
 
 require (
-	github.com/evanphx/json-patch v5.9.0+incompatible
+	github.com/evanphx/json-patch v5.9.11+incompatible
 	github.com/fluxcd/pkg/ssa v0.46.0
 	github.com/golang/protobuf v1.5.4
 	github.com/google/gnostic-models v0.6.9
@@ -28,35 +28,37 @@ require (
 	golang.org/x/tools v0.33.0
 	google.golang.org/grpc v1.72.1
 	gopkg.in/yaml.v3 v3.0.1
-	helm.sh/helm/v3 v3.17.3
-	k8s.io/api v0.33.0
-	k8s.io/apimachinery v0.33.0
-	k8s.io/cli-runtime v0.33.0
-	k8s.io/client-go v0.33.0
+	helm.sh/helm/v3 v3.18.4
+	k8s.io/api v0.33.2
+	k8s.io/apimachinery v0.33.2
+	k8s.io/cli-runtime v0.33.2
+	k8s.io/client-go v0.33.2
 	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff
-	k8s.io/kubectl v0.33.0
+	k8s.io/kubectl v0.33.2
 	k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e
 	sigs.k8s.io/cli-utils v0.37.2
 	sigs.k8s.io/kustomize/api v0.19.0
 	sigs.k8s.io/kustomize/kyaml v0.19.0
 	sigs.k8s.io/yaml v1.4.0
 )
 
-require github.com/cenkalti/backoff/v5 v5.0.2 // indirect
+require (
+	github.com/cenkalti/backoff/v5 v5.0.2 // indirect
+	oras.land/oras-go/v2 v2.6.0 // indirect
+)
 
 require (
 	cel.dev/expr v0.20.0 // indirect
 	dario.cat/mergo v1.0.1 // indirect
 	github.com/AdaLogics/go-fuzz-headers v0.0.0-20240716105424-66b64c4bb379 // indirect
-	github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
-	github.com/BurntSushi/toml v1.4.0 // indirect
+	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
+	github.com/BurntSushi/toml v1.5.0 // indirect
 	github.com/MakeNowJust/heredoc v1.0.0 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
 	github.com/Masterminds/semver/v3 v3.3.0 // indirect
 	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
 	github.com/Masterminds/squirrel v1.5.4 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/Microsoft/hcsshim v0.12.5 // indirect
 	github.com/ProtonMail/go-crypto v1.1.3 // indirect
 	github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da // indirect
 	github.com/agext/levenshtein v1.2.3 // indirect
@@ -81,17 +83,10 @@ require (
 	github.com/containerd/errdefs v0.3.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/containerd/platforms v0.2.1 // indirect
-	github.com/cyphar/filepath-securejoin v0.3.6 // indirect
+	github.com/cyphar/filepath-securejoin v0.4.1 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/deckarep/golang-set/v2 v2.5.0 // indirect
-	github.com/distribution/reference v0.6.0 // indirect
 	github.com/djherbis/times v1.5.0 // indirect
-	github.com/docker/cli v27.1.1+incompatible // indirect
-	github.com/docker/distribution v2.8.3+incompatible // indirect
-	github.com/docker/docker v27.1.1+incompatible // indirect
-	github.com/docker/docker-credential-helpers v0.8.2 // indirect
-	github.com/docker/go-connections v0.5.0 // indirect
-	github.com/docker/go-metrics v0.0.1 // indirect
 	github.com/edsrzf/mmap-go v1.1.0 // indirect
 	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
@@ -123,7 +118,6 @@ require (
 	github.com/google/pprof v0.0.0-20250403155104-27863c87afa6 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/gorilla/mux v1.8.1 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gosuri/uitable v0.0.4 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
@@ -155,9 +149,8 @@ require (
 	github.com/mitchellh/go-ps v1.0.0 // indirect
 	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
-	github.com/moby/locker v1.0.1 // indirect
 	github.com/moby/spdystream v0.5.0 // indirect
-	github.com/moby/term v0.5.0 // indirect
+	github.com/moby/term v0.5.2 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
@@ -169,7 +162,7 @@ require (
 	github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
 	github.com/natefinch/atomic v1.0.1 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
-	github.com/opencontainers/image-spec v1.1.0 // indirect
+	github.com/opencontainers/image-spec v1.1.1 // indirect
 	github.com/opentracing/basictracer-go v1.1.0 // indirect
 	github.com/opentracing/opentracing-go v1.2.0 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
@@ -187,10 +180,10 @@ require (
 	github.com/pulumi/inflector v0.1.1 // indirect
 	github.com/rivo/uniseg v0.4.4 // indirect
 	github.com/rogpeppe/go-internal v1.13.1 // indirect
-	github.com/rubenv/sql-migrate v1.7.1 // indirect
+	github.com/rubenv/sql-migrate v1.8.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06 // indirect
-	github.com/santhosh-tekuri/jsonschema/v5 v5.0.0 // indirect
+	github.com/santhosh-tekuri/jsonschema/v5 v5.3.1 // indirect
 	github.com/segmentio/asm v1.1.3 // indirect
 	github.com/segmentio/encoding v0.3.5 // indirect
 	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
@@ -238,12 +231,11 @@ require (
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v2 v2.4.0
-	k8s.io/apiextensions-apiserver v0.33.0
-	k8s.io/apiserver v0.33.0
-	k8s.io/component-base v0.33.0 // indirect
+	k8s.io/apiextensions-apiserver v0.33.2
+	k8s.io/apiserver v0.33.2
+	k8s.io/component-base v0.33.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	lukechampine.com/frand v1.4.2 // indirect
-	oras.land/oras-go v1.2.5 // indirect
 	sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 // indirect
 	sigs.k8s.io/controller-runtime v0.20.4 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect