bump kubectl v1.34.8; helm 4.2.0; helmfile 1.5.2

Author: avbit

CHANGELOG.md

@@ -1,8 +1,48 @@
-# v1.0.0
+# Changelog
 
-Released 2025-08-20 (initial release)
+All notable changes to this project will be documented in this file.
 
+The format is based on Keep a Changelog (https://keepachangelog.com/en/1.1.0/)
+and this project adheres to Semantic Versioning (https://semver.org/).
+---
+
+## [1.3.0] - 2026-05-26
+### Changed
+- Supported Kubernetes Versions 1.35.x - 1.33.x
+- kubectl v1.34.8; helm 4.2.0; helmfile 1.5.2
+
+## [1.2.0] - 2026-01-08
+### Changed
+- Supported Kubernetes Versions 1.34.x - 1.32.x
+- kubectl v1.33.4; helm v3.19.4; helmfile 1.1.9
+
+## [1.1.1] - 2025-11-05
+### Changed
+- Supported Kubernetes Versions 1.34.x - 1.32.x
+- kubectl v1.33.4; helm v3.18.6; helmfile 1.1.9
+
+## [1.1.0] - 2025-09-02
+### Changed
+- Supported Kubernetes Versions 1.34.x - 1.32.x
+- kubectl v1.33.4; helm v3.18.6; helmfile 1.1.5
+
+## [v1.0.0] - Released 2025-08-20 (initial release)
+### Changed
 - Supported Kubernetes Versions 1.32.x - 1.31.x
 - kubectl v1.32.8; helm v3.17.4; helmfile v1.1.5 
+- GitHub Actions workflow
+### Removed
 - Helm2 support removed.
-- GitHub Actions workflow
+
+
+---
+
+## Legend
+
+### Types of changes
+- **Added** – new features
+- **Changed** – changes in existing functionality
+- **Deprecated** – soon-to-be removed features
+- **Removed** – removed features
+- **Fixed** – bug fixes
+- **Security** – vulnerability fixes

docker/Dockerfile

@@ -1,4 +1,4 @@
-ARG BASE_IMAGE=debian:12
+ARG BASE_IMAGE=debian:13
 
 FROM $BASE_IMAGE
 
@@ -30,33 +30,33 @@ RUN groupadd -g $ARGOCD_USER_ID argocd && \
 
 # Binary versions
 # https://github.com/helm/helm/releases
-# Supported Kubernetes Versions 1.33.x - 1.30.x (https://helm.sh/docs/topics/version_skew/)
-ARG HELM3_VERSION="v3.19.4"
+# Supported Kubernetes Versions 1.35.x - 1.32.x (https://helm.sh/docs/topics/version_skew/)
+ARG HELM_VERSION="v4.2.0"
 # https://github.com/helmfile/helmfile/releases
-ARG HELMFILE_VERSION="1.1.9"
+ARG HELMFILE_VERSION="1.5.2"
 
 # https://github.com/getsops/sops/releases
-ARG SOPS_VERSION="v3.10.2"
+ARG SOPS_VERSION="v3.13.1"
 # https://github.com/FiloSottile/age/releases
-ARG AGE_VERSION="v1.2.1"
+ARG AGE_VERSION="v1.3.1"
 
 # https://github.com/kubernetes-sigs/kustomize/releases
-ARG KUSTOMIZE5_VERSION="5.7.1"
+ARG KUSTOMIZE5_VERSION="5.8.1"
 # https://github.com/mikefarah/yq/releases
-ARG YQ_VERSION="v4.47.1"
+ARG YQ_VERSION="v4.53.2"
 
 # https://github.com/kubernetes/kubectl/tags
 # Compatible with Kubernetes versions ±1 from its version.
-ARG KUBECTL_VERSION="v1.33.4"
+ARG KUBECTL_VERSION="v1.34.8"
 # https://github.com/kubernetes-sigs/krew/releases/
-ARG KREW_VERSION="v0.4.5"
+ARG KREW_VERSION="v0.5.0"
 # https://github.com/bitnami-labs/sealed-secrets/releases
-ARG KUBESEAL_VERSION="0.31.0"
+ARG KUBESEAL_VERSION="0.37.0"
 
 
 RUN \
   GO_ARCH=$(uname -m | sed -e 's/x86_64/amd64/' -e 's/\(arm\)\(64\)\?.*/\1\2/' -e 's/aarch64$/arm64/') && \
-  wget -qO-                          "https://get.helm.sh/helm-${HELM3_VERSION}-linux-${GO_ARCH}.tar.gz" | tar zxv --strip-components=1 -C /tmp linux-${GO_ARCH}/helm && mv /tmp/helm /usr/local/bin/helm && \
+  wget -qO-                          "https://get.helm.sh/helm-${HELM_VERSION}-linux-${GO_ARCH}.tar.gz" | tar zxv --strip-components=1 -C /tmp linux-${GO_ARCH}/helm && mv /tmp/helm /usr/local/bin/helm && \
   wget -qO "/usr/local/bin/sops"     "https://github.com/mozilla/sops/releases/download/${SOPS_VERSION}/sops-${SOPS_VERSION}.linux.${GO_ARCH}" && \
   wget -qO-                          "https://github.com/FiloSottile/age/releases/download/${AGE_VERSION}/age-${AGE_VERSION}-linux-${GO_ARCH}.tar.gz" | tar zxv --strip-components=1 -C /usr/local/bin age/age age/age-keygen && \
   wget -qO-                          "https://github.com/helmfile/helmfile/releases/download/v${HELMFILE_VERSION}/helmfile_${HELMFILE_VERSION}_linux_${GO_ARCH}.tar.gz" | tar zxv -C /usr/local/bin helmfile && \
@@ -88,16 +88,17 @@ ENV PATH="${KREW_ROOT}/bin:$PATH"
 
 # plugin versions
 # https://github.com/databus23/helm-diff/releases
-ARG HELM_DIFF_VERSION="3.13.1"
+ARG HELM_DIFF_VERSION="3.15.7"
 # https://github.com/aslafy-z/helm-git/releases
-ARG HELM_GIT_VERSION="1.4.0"
+ARG HELM_GIT_VERSION="1.5.2"
 # https://github.com/jkroepke/helm-secrets/releases
-ARG HELM_SECRETS_VERSION="4.6.9"
+ARG HELM_SECRETS_VERSION="4.7.6"
 
+# TODO... HELM 4+ WARNING: plugin source does not support verification. Use --verify=false to skip verification
 RUN \
-  helm plugin install https://github.com/databus23/helm-diff   --version ${HELM_DIFF_VERSION} && \
-  helm plugin install https://github.com/aslafy-z/helm-git     --version ${HELM_GIT_VERSION} && \
-  helm plugin install https://github.com/jkroepke/helm-secrets --version ${HELM_SECRETS_VERSION} && \
+  helm plugin install https://github.com/databus23/helm-diff   --version ${HELM_DIFF_VERSION} --verify=false && \
+  helm plugin install https://github.com/aslafy-z/helm-git     --version ${HELM_GIT_VERSION} --verify=false && \
+  helm plugin install https://github.com/jkroepke/helm-secrets --version ${HELM_SECRETS_VERSION} --verify=false && \
   kubectl krew update && \
   mkdir -p ${KREW_ROOT}/bin && \
   true