发布日期: 2025-09-11
版本号: v3.19.0

Helm v3.19.0是功能发布版，用户应升级以获得最佳体验。该版本修复了3.18版本中OCI图表拉取、JSON Schema $ref URL校验等回归问题，修正了go模块整理、Kubernetes版本解析、重定向注册表支持以及OCI传输调试日志缺失等问题，并修复了迁移到ORAS v2后出现的错误、遗留Docker登录支持以及故障时Hook删除处理。新功能方面，helm create命令新增了基于gateway-api的httproute模板。用户可从官方渠道下载各平台安装包进行安装或升级，未来3.19.1版将专注于错误修复，而3.20.0将是下一个功能版本。

更新内容 （中文）

Helm v3.19.0 是一个功能发布版本。建议用户升级以获得最佳体验。

社区持续壮大，我们期待您的加入！

  • 加入 Kubernetes Slack 的讨论：
    • 用于提问和交流
    • 用于讨论 PR、代码和 Bug
  • 参与公开开发者会议：太平洋时间每周四 9:30，通过 Zoom
  • 测试、调试和贡献 charts：ArtifactHub/packages

主要变更

  • 修复了 helm pull 从 3.18 版本开始的回归问题 - 使用 –password 拉取 OCI charts 时报错 #31230
  • 修复了 helm lint 从 Helm 3.18 版本开始的回归问题 - 拒绝了在 3.17.x 版本中可工作的 JSON Schema $ref URL #31166
  • 修复了 go mod tidy #31154
  • 修复了 k8s 版本解析与原始版本不匹配的问题 #31091
  • 修复了使用重定向 registry 时 charts 失败的问题 #31087
  • 修复了 OCI transport 缺少调试日志的问题
  • 修复了登录时旧版 docker 支持失效的问题 #30941
  • 修复了迁移到 ORAS v2 引入的 bug
  • 修复了失败时处理所有 hook 删除的问题 #30673
  • 为 helm create 添加功能，从 gateway-api 引入 httproute 以创建 chart 模板 #30658

安装和升级

下载 Helm v3.19.0。通用平台二进制文件位于：

此版本使用 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 签名，可在 @scottrigby keybase 账户 找到。请使用附带的签名，通过 gpg 验证此版本。

快速入门指南将引导您入门。有关升级说明或详细安装说明，请查看安装指南。您也可以在任何有 bash 的系统上使用安装脚本。

后续计划

  • 3.19.1 将仅包含 bug 修复。
  • 3.20.0 是下一个功能发布版本。

完整变更日志

  • 版本升级至 v3.19.0 3d8990f0836691f0229297773f3524598f46bda6 (Scott Rigby)
  • 修复：如果提供了用户名和密码则使用 9a54bf1df6245232aff6235ebc5da7616f06afa7 (Evans Mungai)
  • 维护(依赖)：升级 k8s-io 组，包含 7 个更新 5af0f68365132bf40d6da38eac87cb94d113b5c3 (dependabot[bot])
  • 维护(依赖)：将 github.com/spf13/cobra 从 1.9.1 升级到 1.10.1 e485606fa6c637f9d33c85d449f5add15fa75f64 (dependabot[bot])
  • 维护(依赖)：将 github.com/stretchr/testify 从 1.11.0 升级到 1.11.1 6355c3de11a76acc934348b2b2365c795327517b (dependabot[bot])
  • 维护(依赖)：将 github.com/stretchr/testify 从 1.10.0 升级到 1.11.0 ec61f666994ca6572278ff05a45850606d18f12d (dependabot[bot])
  • 修复(helm-lint)：格式化 b27802031110bcfcaf0b685f7f3efda8a309ce8c (Isaiah Lewis)
  • 修复(helm-lint)：添加 TLSClientConfig d33ac5e44b4eb884d67141b00753817b091054ca (Isaiah Lewis)
  • 修复(helm-lint)：为 json schema 引用添加 HTTP/HTTPS URL 支持 854370978eb4664ed75e1918df733ecf1503e904 (Isaiah Lewis)
  • 维护(依赖)：升级 k8s-io 组，包含 7 个更新 89a3f90e7545857edbfbb7d46af1796f0fee7097 (dependabot[bot])
  • 修复：为 v3 执行 go mod tidy da4c583145cf4de6a291e81b499ba53785739c2b (Terry Howe)
  • 维护(依赖)：将 golang.org/x/crypto 从 0.40.0 升级到 0.41.0 e40b1b3b367cae275d823eadcfcef43729e16260 (dependabot[bot])
  • 维护(依赖)：将 golang.org/x/term 从 0.33.0 升级到 0.34.0 a27e9db724540bc53b066dff7d80d075a9fa86d8 (dependabot[bot])
  • 修复 Chart.yaml 处理 f13afaacd6f8f9dca4ad914d87fabbe129692eda (Matt Farina)
  • 处理混乱的索引文件 039b0b18d3c83c9aa3a80da67f3cf1c2d965a598 (Matt Farina)
  • 维护(依赖)：将 github.com/containerd/containerd 从 1.7.27 升级到 1.7.28 bec98a91aa1f810220f4fd2a7f06b155afe68970 (dependabot[bot])
  • json schema 修复 6d9509aadcfb44aaaa6fc6528443815343a551b4 (Robert Sirchia)
  • 修复：k8s 版本解析以匹配原始版本 807225ed62b2901fcbaf56923111d9d7f9204a59 (Borys Hulii)
  • 维护(依赖)：将 sigs.k8s.io/yaml 从 1.5.0 升级到 1.6.0 cbbd569aba384d6bf04328645d8befd8555c7879 (dependabot[bot])
  • 不在 HTTPGetter 中显式设置 SNI 5e8ff72b71fab9bda848bc2c980b2139401e1057 (Terry Howe)
  • 维护(依赖)：将 github.com/spf13/pflag 从 1.0.6 升级到 1.0.7 5b5fb5b6832fd210e6dfeda01ef91d6eea73abe4 (dependabot[bot])
  • 维护(依赖)：升级 k8s-io 组，包含 7 个更新 d12538a23df05acb027f319766dde19a90f0c78a (dependabot[bot])
  • 维护(依赖)：将 golang.org/x/crypto 从 0.39.0 升级到 0.40.0 303f8031bdfbd18fa8630def8199957fa4784a20 (dependabot[bot])
  • 维护(依赖)：将 golang.org/x/term 从 0.32.0 升级到 0.33.0 abcc2edc2722406928df731dfac8981032d7831a (dependabot[bot])
  • 维护(依赖)：将 golang.org/x/text 从 0.26.0 升级到 0.27.0 521c67b3588a37ccb1e19fc90130813587015291 (dependabot[bot])
  • 因未知问题禁用 linter 227c9cb6b6c4ba190fa4064c0dba91f8a3106b79 (Matt Farina)
  • 更新链接处理 4389fa639a4d8e6836fa8df9bb70dd69c2820c12 (Matt Farina)
  • 将 github.com/Masterminds/semver/v3 从 3.3.0 升级到 3.3.1 372e40376a15568ba1d9920beb9ab4fe91b90a55 (dependabot[bot])
  • 构建(依赖)：升级 k8s-io 组，包含 7 个更新 4fa5a64127532cb9e69986f584aef491f36a925b (dependabot[bot])
  • 构建(依赖)：将 sigs.k8s.io/yaml 从 1.4.0 升级到 1.5.0 6284ed853892c95b87d08a08d64199af63ed3e13 (dependabot[bot])
  • 修复：为登录使用用户名密码 2c55a4e8ce483fe1a03d7afa46a89e26852bc3c5 (Terry Howe)
  • 更新 pkg/registry/transport.go a16e986d4e184b4e065968c5f5c30198a12d880e (Terry Howe)
  • 更新 pkg/registry/transport.go cea26d8bcac27f888ebb43a8ac8fe87f5851d380 (Terry Howe)
  • 修复：为 oci transport 添加调试日志 b52bb41484bca2eab616aed83aa922cbb5ef1e3b (Terry Howe)
  • 构建(依赖)：将 golang.org/x/crypto 从 0.38.0 升级到 0.39.0 45075cf9434456c8d1cd59a6355265e958b71b2f (dependabot[bot])
  • 构建(依赖)：将 golang.org/x/text 从 0.25.0 升级到 0.26.0 73a78263956bf738008e158afb8d641acbb8f3b9 (dependabot[bot])
  • 修复：登录时旧版 docker 支持失效 733f94c86a98f2fc4a12eba510e26615d4b8aa59 (Terry Howe)
  • 修复：无互联网时的插件安装器测试 fc360417024f4734e5b7356385512a08a31c743e (Terry Howe)
  • 处理空的 registry 配置文件。cfe8cef46f04f36ca33e8696573e243d14e17e79 (Matt Farina)
  • 防止在调用方法中再次获取 newReference c33215d765e291bc9321984d4f60a0182c738938 (Benoit Tigeot)
  • 防止在 oras 内存存储中解析版本标签时失败 f552b672305a420b54a725185f98e34e51fbd7ba (Benoit Tigeot)
  • 修复(client)：为 PreCopy 跳过节点利用率 a18a52e8982b399101f7f20e2473de8514e85226 (Brandt Keller)
  • 测试：跳过而不是提前返回。看起来更有意为之 fedf5024d60bcb4efce9cf7f6f1b7bca642a66eb (Jesse Simpson)
  • 测试：测试仓库剥离功能 fe512bae439b5271dd7d2cdb75fadf3c39abd800 (Jesse Simpson)
  • 测试：包含基于不同协议前缀的登录测试 099a9e18f30db9c90a3a5e52b2af6dd630a6d757 (Jesse Simpson)
  • 修复(client)：layers 现在返回 manifest - 从 descriptors 中移除重复项 b07ab77da3a2d20508b8e775981e233a81d4c753 (Brandt Keller)
  • 修复(client)：对非允许的媒体类型返回 nil c225c124ac76eedc3ca6e013df40da8d2c50650d (Brandt Keller)
  • 修复 3.18.0 回归问题：带 scheme 的 registry 登录 c0f3ace52d974b7465f33079bbf54ed961f875f1 (Scott Rigby)
  • 更新 pkg/plugin/plugin.go dce60adb5141695b9deab023dbfa25bba681d8fa (Benoit Tigeot)
  • 更新 pkg/plugin/plugin.go cda0865d64a4deec682fd044aa4412eb9ab643db (Benoit Tigeot)
  • 等到 Helm v4 再处理设置了 platformCommand 和 Command 的情况 5d9d9a0fb8c1700c5aa9051e3768dcdabfed642d (Benoit Tigeot)
  • 回退 “fix (helm) : toToml` 将 int 渲染为 float [回退至 v3 ]” c5249c1f8d83d44081afee41efeac3ee36d6e9bc (Matt Farina)
  • 构建(依赖)：升级 k8s-io 组，包含 7 个更新 5b0520d6b323b291546cb6fbc4dc0f76b570a6eb (dependabot[bot])
  • 维护：更新泛化警告消息 afefca8b2dcb3c220e24075e8dabf0cffd170daf (Feng Cao)
  • 构建(依赖)：将 oras.land/oras-go/v2 从 2.5.0 升级到 2.6.0 8d6d27c26aad581c3da61f7e67786949c9201fcd (dependabot[bot])
  • 构建(依赖)：升级 k8s-io 组，包含 7 个更新 502c0d5f5b8563be076de69be85f8e0add11b69c (dependabot[bot])
  • 构建(依赖)：将 golang.org/x/crypto 从 0.37.0 升级到 0.38.0 92be9ac0c8abab27efd740be6a671d6e8dd535fd (dependabot[bot])
  • 修复：将警告移至块顶部 eb5b6d50474842db17330b11e0db70077e1c4510 (Feng Cao)
  • 修复：govulncheck 工作流 6b15f26bd45c2856b36bdf3e8c32b44595e4580f (Matthieu MOREL)
  • 修复：用 slog 替换 fmt 警告 6b5c94475db950a981523344029f0a7c620a2e32 (Feng Cao)
  • 修复：添加忽略 repo 标志时的警告 247bf7c2e0c591554b6cfd4c2f62cb2700b034ee (Feng Cao)
  • 版本升级至 v3.18.0 94044595c79ddf1311a4cd3df0353fe62a7ed633 (Robert Sirchia)
  • 将 #30673 回退至 dev-v3 0a800e84b033ae03fc31a46215378ac7761cb9c5 (Gerard Nguyen)
  • 功能：添加从 gateway-api 引入的 httproute 以创建 chart 模板 bd1b67b082122ad1264d07c5d28bbc4c4171b826 (Henrik Gerdes)

完整变更日志: https://github.com/helm/helm/compare/v3.18.6...v3.19.0

更新内容 （原始）

Helm v3.19.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we’d love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed a helm pull regression from 3.18 - error pulling OCI charts with –password #31230
  • Fixed a helm lint regression from Helm 3.18 - rejected JSON Schema $ref URLs that worked in 3.17.x #31166
  • Fixed go mod tidy #31154
  • Fixed k8s version parsing not matching original #31091
  • Fixed charts failing when using a redirect registry #31087
  • Fixed missing debug logging for OCI transport
  • Fixed broken legacy docker support for login #30941
  • Fixed bugs from the move to ORAS v2
  • Fixed processing all hook deletions on failure #30673
  • Feature for helm create added httproute from gateway-api to create chart template #30658

Installation and Upgrading

Download Helm v3.19.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What’s Next

  • 3.19.1 will contain only bug fixes.
  • 3.20.0 is the next feature release.

Changelog

  • bump version to v3.19.0 3d8990f0836691f0229297773f3524598f46bda6 (Scott Rigby)
  • fix: use username and password if provided 9a54bf1df6245232aff6235ebc5da7616f06afa7 (Evans Mungai)
  • chore(deps): bump the k8s-io group with 7 updates 5af0f68365132bf40d6da38eac87cb94d113b5c3 (dependabot[bot])
  • chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 e485606fa6c637f9d33c85d449f5add15fa75f64 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 6355c3de11a76acc934348b2b2365c795327517b (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 ec61f666994ca6572278ff05a45850606d18f12d (dependabot[bot])
  • fix(helm-lint): fmt b27802031110bcfcaf0b685f7f3efda8a309ce8c (Isaiah Lewis)
  • fix(helm-lint): Add TLSClientConfig d33ac5e44b4eb884d67141b00753817b091054ca (Isaiah Lewis)
  • fix(helm-lint): Add HTTP/HTTPS URL support for json schema references 854370978eb4664ed75e1918df733ecf1503e904 (Isaiah Lewis)
  • chore(deps): bump the k8s-io group with 7 updates 89a3f90e7545857edbfbb7d46af1796f0fee7097 (dependabot[bot])
  • fix: go mod tidy for v3 da4c583145cf4de6a291e81b499ba53785739c2b (Terry Howe)
  • chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 e40b1b3b367cae275d823eadcfcef43729e16260 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.33.0 to 0.34.0 a27e9db724540bc53b066dff7d80d075a9fa86d8 (dependabot[bot])
  • fix Chart.yaml handling f13afaacd6f8f9dca4ad914d87fabbe129692eda (Matt Farina)
  • Handle messy index files 039b0b18d3c83c9aa3a80da67f3cf1c2d965a598 (Matt Farina)
  • chore(deps): bump github.com/containerd/containerd from 1.7.27 to 1.7.28 bec98a91aa1f810220f4fd2a7f06b155afe68970 (dependabot[bot])
  • json schema fix 6d9509aadcfb44aaaa6fc6528443815343a551b4 (Robert Sirchia)
  • fix: k8s version parsing to match original 807225ed62b2901fcbaf56923111d9d7f9204a59 (Borys Hulii)
  • chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 cbbd569aba384d6bf04328645d8befd8555c7879 (dependabot[bot])
  • Do not explicitly set SNI in HTTPGetter 5e8ff72b71fab9bda848bc2c980b2139401e1057 (Terry Howe)
  • chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 5b5fb5b6832fd210e6dfeda01ef91d6eea73abe4 (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates d12538a23df05acb027f319766dde19a90f0c78a (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 303f8031bdfbd18fa8630def8199957fa4784a20 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 abcc2edc2722406928df731dfac8981032d7831a (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 521c67b3588a37ccb1e19fc90130813587015291 (dependabot[bot])
  • Disabling linter due to unknown issue 227c9cb6b6c4ba190fa4064c0dba91f8a3106b79 (Matt Farina)
  • Updating link handling 4389fa639a4d8e6836fa8df9bb70dd69c2820c12 (Matt Farina)
  • Bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 372e40376a15568ba1d9920beb9ab4fe91b90a55 (dependabot[bot])
  • build(deps): bump the k8s-io group with 7 updates 4fa5a64127532cb9e69986f584aef491f36a925b (dependabot[bot])
  • build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 6284ed853892c95b87d08a08d64199af63ed3e13 (dependabot[bot])
  • fix: user username password for login 2c55a4e8ce483fe1a03d7afa46a89e26852bc3c5 (Terry Howe)
  • Update pkg/registry/transport.go a16e986d4e184b4e065968c5f5c30198a12d880e (Terry Howe)
  • Update pkg/registry/transport.go cea26d8bcac27f888ebb43a8ac8fe87f5851d380 (Terry Howe)
  • fix: add debug logging to oci transport b52bb41484bca2eab616aed83aa922cbb5ef1e3b (Terry Howe)
  • build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 45075cf9434456c8d1cd59a6355265e958b71b2f (dependabot[bot])
  • build(deps): bump golang.org/x/text from 0.25.0 to 0.26.0 73a78263956bf738008e158afb8d641acbb8f3b9 (dependabot[bot])
  • fix: legacy docker support broken for login 733f94c86a98f2fc4a12eba510e26615d4b8aa59 (Terry Howe)
  • fix: plugin installer test with no Internet fc360417024f4734e5b7356385512a08a31c743e (Terry Howe)
  • Handle an empty registry config file. cfe8cef46f04f36ca33e8696573e243d14e17e79 (Matt Farina)
  • Prevent fetching newReference again as we have in calling method c33215d765e291bc9321984d4f60a0182c738938 (Benoit Tigeot)
  • Prevent failure when resolving version tags in oras memory store f552b672305a420b54a725185f98e34e51fbd7ba (Benoit Tigeot)
  • fix(client): skipnode utilization for PreCopy a18a52e8982b399101f7f20e2473de8514e85226 (Brandt Keller)
  • test: Skip instead of returning early. looks more intentional fedf5024d60bcb4efce9cf7f6f1b7bca642a66eb (Jesse Simpson)
  • test: tests repo stripping functionality fe512bae439b5271dd7d2cdb75fadf3c39abd800 (Jesse Simpson)
  • test: include tests for Login based on different protocol prefixes 099a9e18f30db9c90a3a5e52b2af6dd630a6d757 (Jesse Simpson)
  • fix(client): layers now returns manifest - remove duplicate from descriptors b07ab77da3a2d20508b8e775981e233a81d4c753 (Brandt Keller)
  • fix(client): return nil on non-allowed media types c225c124ac76eedc3ca6e013df40da8d2c50650d (Brandt Keller)
  • Fix 3.18.0 regression: registry login with scheme c0f3ace52d974b7465f33079bbf54ed961f875f1 (Scott Rigby)
  • Update pkg/plugin/plugin.go dce60adb5141695b9deab023dbfa25bba681d8fa (Benoit Tigeot)
  • Update pkg/plugin/plugin.go cda0865d64a4deec682fd044aa4412eb9ab643db (Benoit Tigeot)
  • Wait for Helm v4 before raising when platformCommand and Command are set 5d9d9a0fb8c1700c5aa9051e3768dcdabfed642d (Benoit Tigeot)
  • Revert “fix (helm) : toToml` renders int as float [ backport to v3 ]” c5249c1f8d83d44081afee41efeac3ee36d6e9bc (Matt Farina)
  • build(deps): bump the k8s-io group with 7 updates 5b0520d6b323b291546cb6fbc4dc0f76b570a6eb (dependabot[bot])
  • chore: update generalization warning message afefca8b2dcb3c220e24075e8dabf0cffd170daf (Feng Cao)
  • build(deps): bump oras.land/oras-go/v2 from 2.5.0 to 2.6.0 8d6d27c26aad581c3da61f7e67786949c9201fcd (dependabot[bot])
  • build(deps): bump the k8s-io group with 7 updates 502c0d5f5b8563be076de69be85f8e0add11b69c (dependabot[bot])
  • build(deps): bump golang.org/x/crypto from 0.37.0 to 0.38.0 92be9ac0c8abab27efd740be6a671d6e8dd535fd (dependabot[bot])
  • fix: move warning to top of block eb5b6d50474842db17330b11e0db70077e1c4510 (Feng Cao)
  • fix: govulncheck workflow 6b15f26bd45c2856b36bdf3e8c32b44595e4580f (Matthieu MOREL)
  • fix: replace fmt warning with slog 6b5c94475db950a981523344029f0a7c620a2e32 (Feng Cao)
  • fix: add warning when ignore repo flag 247bf7c2e0c591554b6cfd4c2f62cb2700b034ee (Feng Cao)
  • bump version to v3.18.0 94044595c79ddf1311a4cd3df0353fe62a7ed633 (Robert Sirchia)
  • backport #30673 to dev-v3 0a800e84b033ae03fc31a46215378ac7761cb9c5 (Gerard Nguyen)
  • feat: add httproute from gateway-api to create chart template bd1b67b082122ad1264d07c5d28bbc4c4171b826 (Henrik Gerdes)

Full Changelog: https://github.com/helm/helm/compare/v3.18.6...v3.19.0

下载链接