Helm 4 is here: 6 years of innovation in One release

After six years since Helm 3, the Kubernetes ecosystem just got a major upgrade. Helm 4 is now available, and it's addressing real-world challenges that platform engineers face today.

Here's what changed:

🔒 Smarter Deployments
Helm 4 moves to Server-Side Apply (SSA), replacing Helm 3's three-way merge. When conflicts occur, you get explicit errors instead of silent overrides. No more wondering what went wrong.

⚡ Fine-Grained Control
New annotations (helm.sh/readiness-success and helm.sh/readiness-failure) let you orchestrate multi-component deployments with precision. Databases launch before apps. No more race conditions.

🔐 Supply Chain Security
Install charts by SHA256 digest. Example: helm install myapp oci://registry.example.com/charts/app@sha256:abc123... This guarantees the exact chart you expect gets deployed.

📦 Smarter Caching
Helm 3's cache collided when charts shared names/versions. Helm 4 uses content-based hashing. Different charts, different cache entries. Problem solved.

🧩 WebAssembly Plugins
Plugin system redesigned around WebAssembly for sandboxed security and extensibility. Existing plugins still work—new ones get better protection.

💡 Developer Experience
Multi-document values, JSON arguments, better error messages, and kstatus integration for real-time deployment monitoring.

The Bottom Line:
Helm 3 remains stable and widely deployed. Helm 4 is for teams managing complexity at scale - multi-cluster operations, security-conscious environments, and demanding CI/CD pipelines.