From 868b33643dba1f95e36cbd9df8c701c15fc8ee1d Mon Sep 17 00:00:00 2001
From: camilabustos <camilabustos@google.com>
Date: Tue, 21 Apr 2026 23:16:25 +0000
Subject: [PATCH] chore: bump Helm to v3.20.2-gke.2

Fixes CVE-2026-33186
---
 Makefile                 | 2 +-
 pkg/hydrate/tool_util.go | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 9b896c61d3..5edc39a0a3 100644
--- a/Makefile
+++ b/Makefile
@@ -86,7 +86,7 @@ KUSTOMIZE_STAGING_DIR := $(OUTPUT_DIR)/third_party/kustomize
 
 # To automatically update, run this command:
 # UPDATE_TYPE=<latest-version|latest-build> make update-helm-image
-HELM_VERSION := v3.20.2-gke.1
+HELM_VERSION := v3.20.2-gke.2
 HELM := $(BIN_DIR)/helm
 HELM_STAGING_DIR := $(OUTPUT_DIR)/third_party/helm
 
diff --git a/pkg/hydrate/tool_util.go b/pkg/hydrate/tool_util.go
index 9038eac529..3169e9ea60 100644
--- a/pkg/hydrate/tool_util.go
+++ b/pkg/hydrate/tool_util.go
@@ -45,7 +45,7 @@ import (
 
 const (
 	// HelmVersion is the recommended version of Helm for hydration.
-	HelmVersion = "v3.20.2-gke.1"
+	HelmVersion = "v3.20.2-gke.2"
 	// KustomizeVersion is the recommended version of Kustomize for hydration.
 	KustomizeVersion = "v5.4.2-gke.6"
 	// Helm is the binary name of the installed Helm.