发布日期: 2026-06-12
版本号: v3.21.1

Helm v3.21.1 是一个补丁版本，建议用户升级以获得最佳体验。本次更新主要包括修复 helm template 在客户端模式下可能出现的空指针崩溃问题，将 golang.org/x/net 升级至 v0.55.0 以解决安全漏洞 GO-2026-5026，以及将 Go 版本从 1.25 升级至 1.26。同时更新了多项依赖版本。用户可从官方渠道下载适用于 macOS、Linux、Windows 多架构的安装包进行安装或升级。后续计划于 2026 年 7 月 8 日发布 3.21.2 和 4.2.2 补丁版本，于 2026 年 9 月 9 日发布 3.22.0 和 4.3.0 次版本。

更新内容 （中文）

Helm v3.21.1 是一个补丁版本。鼓励用户升级以获得最佳体验。

社区持续发展，我们期待您的加入！

  • 在 Kubernetes Slack 中加入讨论：
    • 用于提问和闲聊
    • 用于讨论 PR、代码和 bug
  • 参加公开开发者电话会议：每周四太平洋时间 9:30，通过 Zoom
  • 测试、调试并贡献图表：ArtifactHub/packages

重要更改

  • 修复了在 ClientOnly 流程中使用 helm template 时可能发生的空指针恐慌。现在正确返回模板错误 https://github.com/helm/helm/pull/31920
  • 将 golang.org/x/net 升级至 v0.55.0 以解决 GO-2026-5026 #32152
  • 将 Go 从 1.25 升级至 1.26 #32168
  • 依赖版本更新

安装和升级

下载 Helm v3.21.1。常见平台二进制文件在此：

此版本使用 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 签名，可在 @scottrigby keybase 账户 找到。请使用附带的签名通过 gpg 验证此版本。

快速入门指南 将帮助您开始。有关升级说明或详细安装说明，请查看安装指南。您也可以在任何有 bash 的系统上使用安装脚本。

下一步

  • 4.2.2 和 3.21.2 是计划于 2026 年 7 月 8 日发布的下一个补丁版本
  • 4.3.0 和 3.22.0 是计划于 2026 年 9 月 9 日发布的下一个次要版本

变更日志

  • fix(action): 避免在安装 CRD 时空 REST 客户端获取器恐慌 c56dd0095fd76da5d7b30ecdf506103e7f26745e (sergiochan)
  • fix(registry): 在使用 oras-go v2.6.1 的普通 HTTP 回退时保留凭证 702529f90a0021e4d9df4880d6589198ec0e05f7 (Terry Howe)
  • chore(deps): 将 oras.land/oras-go/v2 从 2.6.0 升级至 2.6.1 178e120e16f5d61f769ee2c56a0d2a45ab7303bd (dependabot[bot])
  • chore(deps): 将 golang.org/x/crypto 从 0.52.0 升级至 0.53.0 dcf35f86551322d93c1cb695f08435b3287e5ad0 (dependabot[bot])
  • chore(deps): 将 golang.org/x/term 从 0.43.0 升级至 0.44.0 44aff8bf51809ec9f8a906d050818776cd47b264 (dependabot[bot])
  • chore(deps): 将 golang.org/x/text 从 0.37.0 升级至 0.38.0 ae2f31f5a7d0cd789ca9fd83a6a2fe5fc7c3a1a3 (dependabot[bot])
  • 更新 .github/env 402225fffdc82a28a213af94ea269c4300f12700 (Terry Howe)
  • ci: 将 golangci-lint 升级至 v2.11.3 以支持 go 1.26 00eac21a89cd977868c0304917acd90220e07895 (Terry Howe)
  • chore: 将 go 升级至 1.26 bec346ac983fd0b860a13ef7750616e088143f01 (Terry Howe)
  • chore(deps): 将 github.com/lib/pq 从 1.11.2 升级至 1.12.3 58b6ccffd3e3ade58543c50e76e6fb6c39393be5 (dependabot[bot])
  • chore(deps): 将 github.com/distribution/distribution/v3 升级 30b9f51d80b5853ef4031af168dd02491bbef9ab (dependabot[bot])
  • chore(deps): 将 github.com/containerd/containerd 从 1.7.30 升级至 1.7.32 858aa47b455f08516a6d977f93d609c24f985853 (dependabot[bot])
  • chore(deps): 将 github.com/Masterminds/semver/v3 从 3.4.0 升级至 3.5.0 1af25d46939584205f0e3810fc547fcda727b1ec (dependabot[bot])
  • chore(deps): 将 github.com/mattn/go-shellwords 从 1.0.12 升级至 1.0.13 97e4bc30e57290d81b36972ce49f908d68fd9241 (dependabot[bot])
  • chore(deps): 将 golang.org/x/crypto 从 0.51.0 升级至 0.52.0 29bdd1bedd28bf816c7e26d356126489edf22945 (dependabot[bot])
  • fix(deps): 将 golang.org/x/net 升级至 v0.55.0 以解决 GO-2026-5026 bad6cd478f5b3f3c96b795f4d6a010f04a89624f (Terry Howe)
  • chore(deps): 将 k8s.io/klog/v2 从 2.130.1 升级至 2.140.0 75c2e9bf370eabf35a00e60cfceaee2b969ebe00 (dependabot[bot])
  • chore(deps): 将 golang.org/x/text 从 0.35.0 升级至 0.37.0 cd4dac334caf38105aaae00ee8d4a9cb03de0b2c (dependabot[bot])

完整变更日志：https://github.com/helm/helm/compare/v3.21.0…v3.21.1

更新内容 （原始）

Helm v3.21.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we’d love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Fixed nil pointer panic that could happen with helm template in ClientOnly flows. Now correctly returns a template error https://github.com/helm/helm/pull/31920
  • Bumped golang.org/x/net to v0.55.0 to address GO-2026-5026 #32152
  • Bumped Go from 1.25 to 1.26 #32168
  • Dependency version updates

Installation and Upgrading

Download Helm v3.21.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What’s Next

  • 4.2.2 and 3.21.2 are the next patch releases scheduled for July 8, 2026
  • 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026

Changelog

  • fix(action): avoid nil REST client getter panic when installing CRDs c56dd0095fd76da5d7b30ecdf506103e7f26745e (sergiochan)
  • fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 702529f90a0021e4d9df4880d6589198ec0e05f7 (Terry Howe)
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 178e120e16f5d61f769ee2c56a0d2a45ab7303bd (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dcf35f86551322d93c1cb695f08435b3287e5ad0 (dependabot[bot])
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 44aff8bf51809ec9f8a906d050818776cd47b264 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 ae2f31f5a7d0cd789ca9fd83a6a2fe5fc7c3a1a3 (dependabot[bot])
  • Update .github/env 402225fffdc82a28a213af94ea269c4300f12700 (Terry Howe)
  • ci: bump golangci-lint to v2.11.3 for go 1.26 00eac21a89cd977868c0304917acd90220e07895 (Terry Howe)
  • chore: bump go to 1.26 bec346ac983fd0b860a13ef7750616e088143f01 (Terry Howe)
  • chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 58b6ccffd3e3ade58543c50e76e6fb6c39393be5 (dependabot[bot])
  • chore(deps): bump github.com/distribution/distribution/v3 30b9f51d80b5853ef4031af168dd02491bbef9ab (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 858aa47b455f08516a6d977f93d609c24f985853 (dependabot[bot])
  • chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 1af25d46939584205f0e3810fc547fcda727b1ec (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 97e4bc30e57290d81b36972ce49f908d68fd9241 (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 29bdd1bedd28bf816c7e26d356126489edf22945 (dependabot[bot])
  • fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 bad6cd478f5b3f3c96b795f4d6a010f04a89624f (Terry Howe)
  • chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 75c2e9bf370eabf35a00e60cfceaee2b969ebe00 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 cd4dac334caf38105aaae00ee8d4a9cb03de0b2c (dependabot[bot])

Full Changelog: https://github.com/helm/helm/compare/v3.21.0...v3.21.1

下载链接