This release is marked as a security release due to a nuance with the Go module proxy. During the last release, a Git tag was accidentally created, then deleted, and then re-created correctly. In that time, the Go proxy cached the wrong version. Even now, a month later, the Google-run proxy has an invalid SHA. Thus, when a build from source occurs, in some rare cases the user may get a security error directly from the Go toolchain.
There is no actual security vulnerability here. Both SHAs (the real one and the one in Go proxy) pull safe-to-build versions of the source code. However, only the tag's current SHA is the correct SHA for Helm. See issue 8246. And thanks to Scott Gregory for bringing this to our attention.
Helm v3.2.2 is the second patch release for Helm 3.2 and it includes several bug fixes. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
- Join the discussion in Kubernetes Slack:
- for questions and just to hang out
- for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
- Test, debug, and contribute charts: GitHub/helm/charts
Installation and Upgrading
Download Helm v3.2.2. The common platform binaries are here:
- MacOS amd64 (checksum / 8815169407011ef989a4b1b95d83f58353ae3dbe17f39d3b927ec95b57fc4aa3)
- Linux amd64 (checksum / 305cc92bc21c902a5337a9e1a63316ef67f6e06000d878cf22eb504c6750745c)
- Linux arm (checksum / 5ea04e597ee786747b22df951ed8894ebb3e1f90d5da48703452d7a766b0f09a)
- Linux arm64 (checksum / 72ed5d860972a6ee52f3777baf96229dd218dae92c342cbe159333051ee30e81)
- Linux i386 (checksum / 50afdeae6cf309993ffd3e36e771179803646123eb697fab4919e74efe255fe9)
- Linux ppc64le (checksum / 6b1e5377c5665c6908f014523f622d8db365f639274bfcea30f674de531dc286)
- Linux s390x (checksum / 8815169407011ef989a4b1b95d83f58353ae3dbe17f39d3b927ec95b57fc4aa3)
- Windows amd64 (checksum / 8b28feea08d6b480419b088ba38242ce2dbc23e9a880d012ab32371e256fdd00)
This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.
The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.
What's Next
- 3.2.3 will contain only bug fixes.
- 3.3.0 is the next feature release. This release will focus on linting, OCI updates, and more
Changelog
- Fixing per gofmt a6ea663 (Matt Farina)
- Fix issue with unhandled error on Stat 1da74ed (Matt Farina)
- chore(helm): Avoid confusion in command usage 120c253 (Marc Khouzam)
- Fix unit test 564044c (Martin Hickey)
- Fix repo cache setting 4cdc982 (Martin Hickey)
- Fixing PAX Header handling (#8086) cd29dd3 (Matt Farina)
- fix: upgrade using --force shoud not run patch logic (#8000) 4b91e16 (小明同学)
- Set DisableCompression to true to disable unwanted httpclient transformation a8f6ae5 (Idan Elhalwani)