From d5b41a4025a3a884ab1ef9263f61e1fcb7333aef Mon Sep 17 00:00:00 2001
From: Renovate <renovate@whitesourcesoftware.com>
Date: Fri, 13 Nov 2026 17:52:33 +0000
Subject: [PATCH] :arrow_up: chore(deps): update helm to v4.3.2

---
 .github/actions/kind-e2e-setup/action.yml | 2 +-
 .github/workflows/ci.yaml                 | 4 ++--
 .github/workflows/release.yaml            | 2 +-
 Taskfile.yml                              | 2 +-
 hack/install-helm.sh                      | 4 ++--
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/actions/kind-e2e-setup/action.yml b/.github/actions/kind-e2e-setup/action.yml
index c4cdeae9..4ada10ec 100644
--- a/.github/actions/kind-e2e-setup/action.yml
+++ b/.github/actions/kind-e2e-setup/action.yml
@@ -78,7 +78,7 @@ runs:
     - name: Install kind and helm
       shell: bash
       env:
-        HELM_VERSION: v4.3.1
+        HELM_VERSION: v4.3.2
       run: |
         set -euo pipefail
         source "${GITHUB_WORKSPACE}/hack/lib/fetch.sh"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 75ea39b5..ec3474db 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -345,7 +345,7 @@ jobs:
         run: bash hack/test/ci_install_helm_hardening_test.sh
       - name: Install Helm
         env:
-          HELM_VERSION: v4.3.1
+          HELM_VERSION: v4.3.2
         run: bash hack/install-helm.sh
       - name: Ensure yq is available
         run: |
@@ -838,7 +838,7 @@ jobs:
           version: 3.54.0
       - name: Install Helm
         env:
-          HELM_VERSION: v4.3.1
+          HELM_VERSION: v4.3.2
         run: bash hack/install-helm.sh
       - name: Install helm-unittest plugin
         run: task tools:helm-unittest
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index ea439b37..190030fa 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -157,7 +157,7 @@ jobs:
 
       - uses: azure/setup-helm@2f5e7bc67f1f9972ab16657bb795f36d8f04de0e # v5.1.0
         with:
-          version: v4.3.1
+          version: v4.3.2
 
       - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
 
diff --git a/Taskfile.yml b/Taskfile.yml
index 201c5afd..8cecdb21 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -32,7 +32,7 @@ vars:
   # renovate: datasource=go depName=github.com/go-gremlins/gremlins
   GREMLINS_VERSION: v0.6.0
   # renovate: datasource=github-releases depName=helm/helm
-  HELM_VERSION: v4.3.1
+  HELM_VERSION: v4.3.2
   # renovate: datasource=github-releases depName=norwoodj/helm-docs
   HELM_DOCS_VERSION: v1.14.2
   HELM_DOCS_BIN: "{{.BIN_DIR}}/helm-docs"
diff --git a/hack/install-helm.sh b/hack/install-helm.sh
index 90df1144..8ab0dbf4 100755
--- a/hack/install-helm.sh
+++ b/hack/install-helm.sh
@@ -1,10 +1,10 @@
 #!/usr/bin/env bash
 # Install a pinned Helm release with SHA256-verified tarball download.
 # Checksums from https://get.helm.sh/helm-${VERSION}-${OS}-${ARCH}.tar.gz.sha256
-# Usage: HELM_VERSION=v4.3.1 hack/install-helm.sh [install-dir]
+# Usage: HELM_VERSION=v4.3.2 hack/install-helm.sh [install-dir]
 set -euo pipefail
 
-VERSION="${HELM_VERSION:-v4.3.1}"
+VERSION="${HELM_VERSION:-v4.3.2}"
 INSTALL_DIR="${1:-/usr/local/bin}"
 
 # CI-HELMDL-01 / CI-FETCHLIB-01. Both fetches below used to be bare `curl -fsSL`. On 2026-09-01