Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: helm/helm
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v4.1.3
Choose a base ref
...
head repository: helm/helm
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v4.1.4
Choose a head ref
  • 5 commits
  • 40 files changed
  • 2 contributors

Commits on Apr 8, 2026

  1. fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 

    Pin the remaining unpinned GitHub Action reference to a full commit SHA,
matching the pinning convention already used across other workflows in
this repository. Aligns with the Kubernetes GitHub Actions security policy.

Signed-off-by: Terry Howe <thowe@nvidia.com>
    @TerryHowe @gjenkins8
    TerryHowe authored and gjenkins8 committed Apr 8, 2026
    Configuration menu
    Copy the full SHA
    c61e086 View commit details
    Browse the repository at this point in the history

Commits on Apr 9, 2026

  1. fix: Plugin version path traversal 

    Signed-off-by: George Jenkins <gvjenkins@gmail.com>
    @gjenkins8
    gjenkins8 committed Apr 9, 2026
    Configuration menu
    Copy the full SHA
    36c8539 View commit details
    Browse the repository at this point in the history

  2. ignore error plugin loads (cli, getter) 

    Signed-off-by: George Jenkins <gvjenkins@gmail.com>
    @gjenkins8
    gjenkins8 committed Apr 9, 2026
    Configuration menu
    Copy the full SHA
    2581943 View commit details
    Browse the repository at this point in the history

  3. fix: Chart dot-name path bug 

    Signed-off-by: George Jenkins <gvjenkins@gmail.com>
    @gjenkins8
    gjenkins8 committed Apr 9, 2026
    Configuration menu
    Copy the full SHA
    4e7994d View commit details
    Browse the repository at this point in the history

  4. fix: Plugin missing provenance bypass 

    Signed-off-by: George Jenkins <gvjenkins@gmail.com>
    @gjenkins8
    gjenkins8 committed Apr 9, 2026
    Configuration menu
    Copy the full SHA
    05fa379 View commit details
    Browse the repository at this point in the history
Loading