From 9ab4108415fdd7d21101b7a5ff90a69d5e7654cd Mon Sep 17 00:00:00 2001
From: Renovate <renovate@whitesourcesoftware.com>
Date: Wed, 28 Oct 2026 16:06:23 +0000
Subject: [PATCH] :arrow_up: chore(deps): update helm to v3.22.1

---
 .github/actions/kind-e2e-setup/action.yml | 2 +-
 .github/workflows/ci.yaml                 | 4 ++--
 .github/workflows/release.yaml            | 2 +-
 Taskfile.yml                              | 2 +-
 hack/install-helm.sh                      | 4 ++--
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/actions/kind-e2e-setup/action.yml b/.github/actions/kind-e2e-setup/action.yml
index 6bfb5eeb0..0b0aaf0a7 100644
--- a/.github/actions/kind-e2e-setup/action.yml
+++ b/.github/actions/kind-e2e-setup/action.yml
@@ -78,7 +78,7 @@ runs:
     - name: Install kind and helm
       shell: bash
       env:
-        HELM_VERSION: v3.22.0
+        HELM_VERSION: v3.22.1
       run: |
         set -euo pipefail
         source "${GITHUB_WORKSPACE}/hack/lib/fetch.sh"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 096479d91..4507ee31f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -338,7 +338,7 @@ jobs:
         run: bash hack/test/ci_install_helm_hardening_test.sh
       - name: Install Helm
         env:
-          HELM_VERSION: v3.22.0
+          HELM_VERSION: v3.22.1
         run: bash hack/install-helm.sh
       - name: Ensure yq is available
         run: |
@@ -831,7 +831,7 @@ jobs:
           version: 3.52.0
       - name: Install Helm
         env:
-          HELM_VERSION: v3.22.0
+          HELM_VERSION: v3.22.1
         run: bash hack/install-helm.sh
       - name: Install helm-unittest plugin
         run: helm plugin install https://github.com/helm-unittest/helm-unittest --version v0.5.1
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index ee555c878..64291c621 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -157,7 +157,7 @@ jobs:
 
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.22.0
+          version: v3.22.1
 
       - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
 
diff --git a/Taskfile.yml b/Taskfile.yml
index f18ee7562..9ef6df114 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -32,7 +32,7 @@ vars:
   # renovate: datasource=go depName=github.com/go-gremlins/gremlins
   GREMLINS_VERSION: v0.6.0
   # renovate: datasource=github-releases depName=helm/helm
-  HELM_VERSION: v3.22.0
+  HELM_VERSION: v3.22.1
   # renovate: datasource=github-releases depName=norwoodj/helm-docs
   HELM_DOCS_VERSION: v1.14.2
   HELM_DOCS_BIN: "{{.BIN_DIR}}/helm-docs"
diff --git a/hack/install-helm.sh b/hack/install-helm.sh
index c649bbdcc..673cedd82 100755
--- a/hack/install-helm.sh
+++ b/hack/install-helm.sh
@@ -1,10 +1,10 @@
 #!/usr/bin/env bash
 # Install a pinned Helm 3 release with SHA256-verified tarball download.
 # Checksums from https://get.helm.sh/helm-${VERSION}-${OS}-${ARCH}.tar.gz.sha256
-# Usage: HELM_VERSION=v3.22.0 hack/install-helm.sh [install-dir]
+# Usage: HELM_VERSION=v3.22.1 hack/install-helm.sh [install-dir]
 set -euo pipefail
 
-VERSION="${HELM_VERSION:-v3.22.0}"
+VERSION="${HELM_VERSION:-v3.22.1}"
 INSTALL_DIR="${1:-/usr/local/bin}"
 
 # CI-HELMDL-01 / CI-FETCHLIB-01. Both fetches below used to be bare `curl -fsSL`. On 2026-09-01