Helm 3 Reaches End of Life in 2027: Key Breaking Changes to Fix Before Migrating

·1 views

Helm 4 was released in November 2025, but most engineering teams continue to run Helm 3 in production pipelines. Helm 3 will receive its final feature release on September 9, 2026, with all security patches ending on February 10, 2027. Teams migrating to Helm 4 do not need to rewrite existing Chart API v2 charts, as these remain fully compatible. However, four areas of automation break silently: post-renderers must now be registered as named plugins, OCI registry login commands no longer accept protocol prefixes, the flags --atomic and --force have been renamed, and Go library imports must be updated from v3 to v4. Experts recommend migrating before September 2026 to avoid last-minute pressure and to stay current with Kubernetes client library updates.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

China-Linked Hackers Target Indian Tax Filers With Fake ITR Tools to Deploy Malware

Cybersecurity firm Seqrite Labs has uncovered a campaign, dubbed Operation DragonReturn, in which a China-nexus threat group distributes DcRAT — a remote access trojan — by impersonating India's Income Tax Department. Attackers use phishing emails and malicious links disguised as legitimate tax filing utilities, timed to coincide with India's March 31 fiscal deadline to maximise success rates. Once installed, DcRAT establishes persistence on infected systems and harvests sensitive data including credentials, browser history, and keystrokes, relaying it to attacker-controlled servers. The campaign specifically targets Indian tax professionals and corporate finance teams, who typically hold elevated access to financial records, making them valuable entry points for deeper network infiltration. The use of commodity malware-as-a-service infrastructure suggests the attackers sourced DcRAT from Chinese underground forums, where such tools are actively maintained and updated.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Supracorona Login Gate Plugin Offers Simple Site-Wide Access Control for WordPress

A developer has released Supracorona Login Gate, a lightweight WordPress plugin designed to restrict entire websites to logged-in users only. The plugin targets use cases such as staging environments, client portals, internal tools, and private documentation sites that do not require full membership systems. When enabled, logged-out visitors are redirected either to the standard WordPress login page or a custom page chosen by the site administrator. Unlike bloated membership plugins, it focuses solely on one question: whether the current visitor is authenticated. The plugin is now publicly available on WordPress.org.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Performance Test RAG Apps for Speed and Answer Quality in CI/CD

A technical guide published on DEV Community outlines a dual-gate approach to performance testing Retrieval-Augmented Generation (RAG) applications. Traditional load testing tools like k6 can measure response times but fail to detect hallucinations, where a model returns fast yet factually incorrect answers. The guide recommends pairing k6 for latency metrics — including Time to First Token and inter-token latency — with DeepEval, which uses an LLM-as-judge method to score faithfulness and answer relevancy. Both testing layers are integrated into a GitHub Actions CI/CD pipeline, enabling automatic regression detection on every pull request before code reaches production. The approach addresses a core weakness in conventional API testing: a RAG system can appear performant while silently generating unreliable, fabricated responses.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Study: AI writes Ruby well but struggles to navigate large, complex codebases

A developer tested AI agents across 13 real Ruby codebases to assess whether Ruby and Rails are truly the most AI-friendly stack. The research distinguished between two skills: reading code locally versus navigating structural dependencies across files. In small, well-organized Rails repos, AI agents performed strongly even without extra tooling, supporting the stack's AI-friendly reputation. However, in larger, more complex codebases with scattered dependencies and polymorphic patterns, baseline AI recall dropped as low as 0.24 without a structural map to assist navigation. The findings suggest the claim holds for writing and reading Ruby, but breaks down for dependency navigation at scale.

0 comments Read more at DEV Community