What happened?

Helm releases went out with older patch versions of Go being used. If there are vulnerabilities in the older minors, Helm will be released with known vulnerabities.

What did you expect to happen?

I expect Helm releases to be built with the latest Go patch releases.

How can we reproduce it (as minimally and precisely as possible)?

Check the latest releases of Helm and compare the version of Go used along with the release dates.

Helm version

N/A

Kubernetes version

N/A