Helm v4.2.1: Concurrency and Version Range Fixes

Helm v4.2.1 was released on June 12, 2026, delivering several critical stability fixes for data races and version range detection in the Helm 4 branch. This patch release focuses on concurrency safety during parallel operations and ensures that success messages are correctly routed to standard output.

The full release notes and downloads are on the GitHub release page.

This release fixes a significant data race in the FailingKubeClient instance. The race occurred when concurrent goroutines for different operations, such as an upgrade paired with a rollback or an install paired with an uninstall, both attempted to call GetWaiterWithOptions. This issue was identified via the Go race detector and impacted users running high frequency automated deployments.

Further improvements were made to the WaitForDelete logic in the Kubernetes package. A race condition in the status observer previously caused the watch to cancel prematurely, leading to intermittent failures during large test suites or busy cluster operations. The fix ensures that context.Canceled is correctly propagated and prevents spurious early exits during informer synchronization.

Helm v4.2.1 corrects a regression in how command success messages are handled. Previously, these messages were incorrectly written to standard error. They are now correctly routed to standard output, which restores expected behavior for shell scripts and automation pipelines that parse output streams.

The versioning logic has been refined to handle complex constraints more reliably. Users reported that Helm 4 emitted errors when using version range constraints, specifically failing to find exact versions. This release resolves those false range detections and adds the ability to report the selected version in debug output when a version range argument is provided. It also fixes a parsing issue where the OR operator in range constraints failed if no space was present.

The project has bumped several core dependencies to align with the latest Kubernetes SDK standards. Key updates include cli-utils 1.2.1, controller-runtime 0.24.1, and the k8s.io libraries to 1.36.1. These updates address underlying SDK errors and improve compatibility with modern cluster environments.

A security related update for golang.org/x/net to version v0.55.0 is included to address the GO-2026-5026 advisory. Other maintenance updates include bumps to oras-go, wazero, and various Go standard library extensions for cryptography and terminal handling.

The release is available via the project repository and official download mirrors:

Binaries for common platforms including Linux, MacOS, and Windows are provided in the release assets along with SHA256 checksums and GPG signatures.