fix(deps): update module helm.sh/helm/v3 to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
helm.sh/helm/v3	v3.19.2 -> v4.0.2

---

Release Notes

helm/helm (helm.sh/helm/v3)

v4.0.2

Compare Source

v4.0.1: Helm v4.0.1

Compare Source

Helm v4.0.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.1. The common platform binaries are here:

• MacOS amd64 (checksum / a8d1ca46c3ff5484b2b635dfc25832add4f36fdd09cf2a36fb709829c05b4112)
• MacOS arm64 (checksum / 8e0b9615cf72a62faaa0cfc0e22115f05bcddfd3d7ee58406ef97bc1ba563ae8)
• Linux amd64 (checksum / e0365548f01ed52a58a1181ad310b604a3244f59257425bb1739499372bdff60)
• Linux arm (checksum / b946401f857de078c744990188f8f664ecb1c72cdafde1ed239020fa3bb2fc3c)
• Linux arm64 (checksum / 959fa52d34e2e1f0154e3220ed5f22263c8593447647a43af07890bba4b004d1)
• Linux i386 (checksum / 6a358de71c8dc2cf4a7946930ff9a70a7a3716531e64093a88182f64bdaea5a3)
• Linux ppc64le (checksum / 29ef01eed29b3ba676cf6db45dc90b50e07f2b5ec4b1ea40071326bff4922a4e)
• Linux s390x (checksum / ecf11996bd01a483eca01aa258a58f9e3b3d8e732cd5c84d6975d51ab2abf538)
• Linux riscv64 (checksum / e9a1ce6aa004027ba0349982279b0ecab847ddc51b961b963e64eb800de3ec6c)
• Windows amd64 (checksum / a976ee9f3016ae86d8948c0a6d3fc5ed7489cd264cffdbff4860bd97120bd256)
• Windows arm64 (checksum / 5ecbcd8e50577a325e22d365cd4c4de2e2bd014d81f73b356dbd4f7e6c2427fb)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.3 and 4.0.2 are the next patch releases and will be on December 10, 2025
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

• Copy adopted resource info 12500dd (George Jenkins)
• fixup test 1cf3841 (George Jenkins)
• logs 32e2d08 (George Jenkins)
• fix 4b6472f (George Jenkins)
• fix: Use server-side apply for object create during update 9dfe3b3 (George Jenkins)
• Fix kube client logging 861adc2 (Matt Farina)
• update tests b2f7872 (yxxhero)
• Refactor environment variable expansion in PrepareCommands and update tests 77f97a1 (yxxhero)
• Fix syntax errors in the document a156195 (Fish-pro)
• fix: correct LDFLAGS path for default Kubernetes version 2c0dcda (Benoit Tigeot)

v4.0.0: Helm v4.0.0

Compare Source

The Helm Team is proud to announce the first stable release of Helm 4.

New Features

Helm 4 has numerous new features, but a few deserve highlighting here:

• Redesigned plugin system that supports Web Assembly based plugins
• Post-renderers are now plugins
• Server side apply is now supported
• Improved resource watching, to support waiting, based on kstatus
• Local Content-based caching (e.g. for charts)
• Logging via slog enabling SDK logging to integrate with modern loggers
• Reproducible builds of chart archives
• Updated SDK API including support for multiple chart API versions (new experimental v3 chart API version coming soon)

For full release notes, please see: https://helm.sh/docs/overview/

Compatibility with Helm v3

Helm v4 is a major version with backward incompatible changes including to the flags and output of the Helm CLI and to the SDK.

Please evaluate the changes to your workflows. The changes are not as extensive as those from Helm v2 to v3, with the goal that the majority of workflows remain compatible between Helm v3 and v4.

Helm charts apiVersion v2 (majority of today's charts) will continue to be supported in Helm v4. Existing charts should continue to install, upgrade, and otherwise work. Please test the installation and upgrade of charts to ensure it works as expected. Changes (e.g., server side apply) may impact the experience.

Community

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • for questions and just to hang out
  • for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v4.0.0. The common platform binaries are here:

• MacOS amd64 (checksum / 125233cf943e6def2abc727560c5584e9083308d672d38094bae1cc3e0bfeaa2)
• MacOS arm64 (checksum / 4f5d367af9e2141b047710539d22b7e5872cdaef788333396077236feb422419)
• Linux amd64 (checksum / c77e9e7c1cc96e066bd240d190d1beed9a6b08060b2043ef0862c4f865eca08f)
• Linux arm (checksum / 23498ff8f5fb358ad2576269cd41fa9a54b9469332806dff0d689470323180be)
• Linux arm64 (checksum / 8c5c77e20cc29509d640e208a6a7d2b7e9f99bb04e5b5fbe22707b72a5235245)
• Linux i386 (checksum / eda0b6508def454ba07e2f938c55f73be795e7f99552078ccc8af2c2bbd58a45)
• Linux ppc64le (checksum / 73ae83e9888aafa0e9c57a1d4d77dcb6c97c253ef175a4983a8bb4bcc771d2eb)
• Linux s390x (checksum / 9c7368b18c76fcae9e0281e1ee875ea0d9b5970ac3a00c4eb963205948594bad)
• Linux riscv64 (checksum / a688c2559c57d6a858c49b9237b7d6bbce5c634aa5204c4342bdc8a06818b9f1)
• Windows amd64 (checksum / 0f9a8c891b8d908a37fbb68f12dea92b633eb29e49070bd650f5760a1a99aa8d)
• Windows arm64 (checksum / f3ff262427547cc1b1dc3356d587ed8ffaa23f2abf24bc06660a350b9b7925f9)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
• 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Thank You!

The Helm project has enjoyed code contributions from many community members. Many more community members have assisted by filing issues and working with us to identify and eliminate bugs while adding new features. The #helm-users slack channel has long been a friendly and open forum for getting help and learning more about Helm. We cannot thank you enough for making this a helpful, friendly, and welcoming community for all.

❤️ The Helm Team

v3.19.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go mod tidy
go: downloading helm.sh/helm/v4 v4.0.2
go: downloading github.com/fluxcd/cli-utils v0.36.0-flux.14
go: downloading github.com/ProtonMail/go-crypto v1.3.0
go: downloading github.com/extism/go-sdk v1.7.1
go: downloading github.com/tetratelabs/wazero v1.9.0
go: downloading github.com/dylibso/observe-sdk/go v0.0.0-20240819160327-2d926c5d788a
go: downloading github.com/cloudflare/circl v1.6.1
go: downloading github.com/ianlancetaylor/demangle v0.0.0-20240805132620-81f5be970eca
go: downloading github.com/tetratelabs/wabin v0.0.0-20230304001439-f6f874872834
go: downloading github.com/onsi/ginkgo/v2 v2.23.4
go: downloading github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5
go: downloading go.uber.org/automaxprocs v1.6.0
go: finding module for package helm.sh/helm/v4/pkg/chartutil
go: finding module for package helm.sh/helm/v4/pkg/releaseutil
go: github.com/cert-manager/cmctl/v2/pkg/install imports
	helm.sh/helm/v4/pkg/chartutil: module helm.sh/helm/v4@latest found (v4.0.2), but does not contain package helm.sh/helm/v4/pkg/chartutil
go: github.com/cert-manager/cmctl/v2/pkg/uninstall imports
	helm.sh/helm/v4/pkg/releaseutil: module helm.sh/helm/v4@latest found (v4.0.2), but does not contain package helm.sh/helm/v4/pkg/releaseutil

[cert-manager-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign maelvls for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[cert-manager-prow]

Hi @renovate[bot]. Thanks for your PR.

I'm waiting for a cert-manager member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[cert-manager-prow]

@renovate[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-cert-manager-cmctl-verify	7f56bbd	link	true	/test pull-cert-manager-cmctl-verify
pull-cert-manager-cmctl-test	7f56bbd	link	true	/test pull-cert-manager-cmctl-test
pull-cert-manager-cmctl-integration	7f56bbd	link	true	/test pull-cert-manager-cmctl-integration

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.