Helm 4.3.0 - Concurrent Status And Reproducible Charts

Helm v4.3.0 was published on 9 September 2026. The project calls it a feature release. The change with the widest effect on running installs is concurrent status computation, which the notes say prevents delays of several minutes while Helm waits on resources.

The full release notes and downloads are on the GitHub release page.

Resource status is the runtime change in this tag. Pull request 32043 enables concurrent status computation. The subject says this prevents delays of several minutes. The notes publish no resource list, no wait condition, and no measured before and after.

Pull request 31944 lowers the resync period from one hour to 3 minutes and labels the edit a refactor. Helm then lists about twenty times as often. API servers see more list traffic, and cached objects refresh on the shorter interval. No flag is named to restore the one hour period.

The k8s-io group moves to 0.37.0 (#32598). The changelog also records a pass of seven updates (#32572) and a pass of six updates. No module list and no removed API are written down. Retest installs on each cluster version you still run.

Chart packaging is the other half of the release. Pull request 32162 makes chart archives honor SOURCE_DATE_EPOCH, the variable CI uses to pin timestamps so two builds of the same inputs hash the same.

Pull request 32485 normalizes StampModTimes to UTC, truncates the timestamp, and adds a Chart.lock reproducibility test. Chart tarballs and Chart.lock bytes can change when the chart content did not. Compare a package from the old binary with v4.3.0 before a checksum diff is treated as a content change.

Pull request 32525 stops the loader from dropping values files that end on a 4096 byte boundary. Those files were omitted. The fix is in the Helm binary, so helm template, helm lint, helm install, and helm upgrade need this tag.

Pull request 32281 (commit 67d54fd8808ab47e93dad40f4238d5fe28d1efd0) teaches provenance to read a GnuPG keybox at pubring.kbx.

Commit 11e2010aebedf9f495a5c295635df096de7252f7 (#31748) removes the per file decompression size limit and calls the edit a refactor. The old number is absent from the notes. Commit 37752b70b2f9c49dc6ac2f01e2a0aca1f32f0529 (#32579) is an internal refactor that builds the repo index from a byte buffer.

Templates, rollback text, and delete checks ¶

Template output and release history pick up smaller edits. Pull request 31695 adds duration functions. Names and examples are absent from the notes, so read the pull request before a chart calls one.

Pull request 32205 logs when lookup returns empty. The line is debug only, so a default install stays quiet.

Pull request 31580 adds --description on rollback. The flag stores a reason and is optional. The string shows up in release history.

Pull request 32217 (commit 9a3c040369361678aef1ab251e83a38b455f5159) sends registry messages to stderr for template and show. The subject calls it a regression fix. helm template stdout is the manifest again. Wrappers that read those messages on stdout, or that merged both streams into the YAML, need a retest.

Pull request 31584 verifies ownership before deleting resources. The release subject is cut off after “during uni”. Try a delete in a scratch namespace where another controller writes the same objects. A new gate can stop a delete that an older Helm completed.

Pull request 32134 removes zero width spaces from a plugin name comment in internal/plugin. Comment cleanup only.

No new required CLI flag ships in this tag. Commit 4dfbaa40c6cd67e1df345889113a7879ec66136c (#32365) removes deprecated internal/chart/v3. Forks that imported it fail to compile. The notes give no replacement path.

Retest the behavior the notes do name:

  • helm template and helm show stdout if a pipeline consumed registry messages.
  • API list rate after resync moves from one hour to 3 minutes.
  • Values files whose length is a multiple of 4096 bytes.
  • Chart archive and Chart.lock checksums after SOURCE_DATE_EPOCH and StampModTimes.
  • Rollback history if you pass --description.
  • Uninstall where another controller shares the objects.

Helm 3 gets no further minor releases. See the end of life note. Patches 4.3.1 and 3.22.1 are set for 14 October 2026. Minor 4.4.0 is set for 13 January 2027.

Go was updated in b5b498b77403f93de037cba383f424953e87eaaa and 6d1f67cf6a9918ebe6c41f05096b6fa3fdde1b5b, with no version number in the excerpt. google.golang.org/grpc moves from 1.82.1 to 1.83.1 and golang.org/x/crypto from 0.54.0 to 0.55.0 (#32545). Testify, GitHub Actions, a “doest not match” readiness log fix, and gofumpt fill the rest of the visible chores. The excerpt ends during the crypto bump.

Binaries are signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 on the keybase account for @scottrigby. Verify with gpg. Linux amd64 sums to 86584a54def73570558f66f5111cc53dfed56689637ae32c1201205d494f54fb. The bash script is scripts/get-helm-4 on main, not pinned to v4.3.0. Use the archives on the GitHub release page or the install guide.