Bump helm to v4.3.1 / v3.22.1

.github/copilot-instructions.md

@@ -7,7 +7,7 @@ Chartify is a Go library and CLI tool that converts Kubernetes resource YAMLs, K
 ## Working Effectively
 
 ### Bootstrap and Build
-- **Prerequisites**: Go 1.26.0+, Helm v4.3.0, Kustomize v5.8.0+ are required
+- **Prerequisites**: Go 1.26.0+, Helm v4.3.1, Kustomize v5.8.0+ are required
 - Build the CLI: `go build -o chartify ./cmd/chartify` -- takes 25 seconds. **NEVER CANCEL**. Set timeout to 60+ seconds.
 - Build dependencies: `go mod download` -- takes 15 seconds. **NEVER CANCEL**. Set timeout to 120+ seconds.
 - Alternative build with chart repo server: `go build -o chartreposerver ./cmd/chartreposerver`
@@ -72,7 +72,7 @@ Chartify is a Go library and CLI tool that converts Kubernetes resource YAMLs, K
 - The CLI expects exactly 2 positional arguments: RELEASE_NAME and CHART_PATH, with -o flag for output directory.
 
 ## CI/CD Integration
-- GitHub Actions run on Go 1.26.0+ with Helm v4.3.0 and Kustomize v5.8.0
+- GitHub Actions run on Go 1.26.0+ with Helm v4.3.1 and Kustomize v5.8.0
 - CI runs `CGO_ENABLED=0 go test ./...` after attempting to add helm stable repo
 - Linting workflow uses golangci-lint v2.1.6 but has configuration compatibility issues
 

.github/workflows/go.yml

@@ -11,8 +11,8 @@ jobs:
     strategy:
       matrix:
         helm-version:
-          - v3.22.0
-          - v4.3.0
+          - v3.22.1
+          - v4.3.1
     steps:
       - name: Check out code into the Go module directory
         uses: actions/checkout@v7

AGENTS.md

@@ -127,7 +127,7 @@ CGO_ENABLED=0 go test ./...
 
 ### Prerequisites
 - Go 1.26.0+
-- Helm v4.3.0 (helm command)
+- Helm v4.3.1 (helm command)
 - Kustomize v5.8.0+ (kustomize command)
 
 ### External Dependencies

README.md

@@ -37,7 +37,7 @@ go build -o chartreposerver ./cmd/chartreposerver
 ### Prerequisites
 
 - Go 1.26.0+
-- Helm v4.3.0 (helm command)
+- Helm v4.3.1 (helm command)
 - Kustomize v5.8.0+ (kustomize command, optional, for kustomize integration)
 
 ## CLI

go.mod

@@ -9,8 +9,8 @@ require (
 	github.com/otiai10/copy v1.14.1
 	github.com/stretchr/testify v1.12.1
 	gopkg.in/yaml.v3 v3.0.1
-	helm.sh/helm/v3 v3.22.0
-	helm.sh/helm/v4 v4.3.0
+	helm.sh/helm/v3 v3.22.1
+	helm.sh/helm/v4 v4.3.1
 )
 
 require (
@@ -27,7 +27,7 @@ require (
 	github.com/extism/go-sdk v1.7.1 // indirect
 	github.com/fxamacker/cbor/v2 v2.9.1 // indirect
 	github.com/go-errors/errors v1.5.1 // indirect
-	github.com/go-logr/logr v1.4.3 // indirect
+	github.com/go-logr/logr v1.4.4 // indirect
 	github.com/go-openapi/jsonpointer v1.0.0 // indirect
 	github.com/go-openapi/jsonreference v1.0.0 // indirect
 	github.com/go-openapi/swag v0.27.1 // indirect
@@ -45,7 +45,7 @@ require (
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/gofrs/flock v0.13.0 // indirect
 	github.com/google/btree v1.1.3 // indirect
-	github.com/google/gnostic-models v0.7.0 // indirect
+	github.com/google/gnostic-models v0.7.1 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
@@ -72,34 +72,34 @@ require (
 	github.com/tetratelabs/wazero v1.12.0 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xlab/treeprint v1.2.0 // indirect
-	go.opentelemetry.io/proto/otlp v1.10.0 // indirect
+	go.opentelemetry.io/proto/otlp v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
 	go.yaml.in/yaml/v3 v3.0.5 // indirect
-	golang.org/x/crypto v0.55.0 // indirect
-	golang.org/x/net v0.57.0 // indirect
+	golang.org/x/crypto v0.58.0 // indirect
+	golang.org/x/net v0.60.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
-	golang.org/x/sync v0.22.0 // indirect
-	golang.org/x/sys v0.47.0 // indirect
-	golang.org/x/term v0.45.0 // indirect
-	golang.org/x/text v0.41.0 // indirect
+	golang.org/x/sync v0.24.0 // indirect
+	golang.org/x/sys v0.49.0 // indirect
+	golang.org/x/term v0.47.0 // indirect
+	golang.org/x/text v0.43.0 // indirect
 	golang.org/x/time v0.15.0 // indirect
-	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
+	google.golang.org/protobuf v1.36.12 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
-	k8s.io/api v0.37.0 // indirect
-	k8s.io/apiextensions-apiserver v0.37.0 // indirect
-	k8s.io/apimachinery v0.37.0 // indirect
-	k8s.io/cli-runtime v0.37.0 // indirect
-	k8s.io/client-go v0.37.0 // indirect
-	k8s.io/component-base v0.37.0 // indirect
+	k8s.io/api v0.37.1 // indirect
+	k8s.io/apiextensions-apiserver v0.37.1 // indirect
+	k8s.io/apimachinery v0.37.1 // indirect
+	k8s.io/cli-runtime v0.37.1 // indirect
+	k8s.io/client-go v0.37.1 // indirect
+	k8s.io/component-base v0.37.1 // indirect
 	k8s.io/klog/v2 v2.140.0 // indirect
 	k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad // indirect
-	k8s.io/kubectl v0.37.0 // indirect
+	k8s.io/kubectl v0.37.1 // indirect
 	k8s.io/utils v0.0.0-20260626114624-be93311217bd // indirect
 	oras.land/oras-go/v2 v2.6.2 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/kustomize/api v0.21.1 // indirect
-	sigs.k8s.io/kustomize/kyaml v0.21.1 // indirect
+	sigs.k8s.io/kustomize/kyaml v0.21.2 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
 	sigs.k8s.io/structured-merge-diff/v6 v6.4.2 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect