A feature and maintenance release with new template and CLI capabilities, dependency updates, flag deprecations, and numerous correctness fixes. It also includes security fixes for plugin path traversal and GO-2026-4394.
Action needed (1)
securityhigh
go.update foropentelemetry. io/otel/sdk GO-2026-4394Helm v4.2.0 updates
go.to v1.40.0 foropentelemetry. io/otel/sdk GO-2026-4394.
Check if affected (1)
securityPlugin version path traversal fix
Applies if you use the
Pluginextension.Plugin version handling fixes a path traversal issue. The fix ships in Helm v4.2.0.
Plan ahead (1)
deprecatedThe
--hide-notesand--render-subchart-notesflags, deprecatedApplies if you use
--hide-notesor--render-subchart-notes.The
templatecommand deprecates both flags in Helm v4.2.0.