From 878d887fe326ab746385bf71c143e795ca310685 Mon Sep 17 00:00:00 2001
From: Nan Yu <nanyu@google.com>
Date: Fri, 8 Sep 2023 00:07:33 +0000
Subject: [PATCH] Update helm binary to fix CVE (#858) (#859)

CVE: https://github.com/advisories/GHSA-6xv5-86q9-7xr8
---
 Makefile                 | 2 +-
 pkg/hydrate/tool_util.go | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 483d67a48d..bb85b1447e 100644
--- a/Makefile
+++ b/Makefile
@@ -36,7 +36,7 @@ GO_DIR := $(OUTPUT_DIR)/go
 # Directory containing installed go binaries.
 BIN_DIR := $(GO_DIR)/bin
 KUSTOMIZE_VERSION := v5.1.1-gke.0
-HELM_VERSION := v3.12.3-gke.1
+HELM_VERSION := v3.12.3-gke.2
 # Keep KIND_VERSION in sync with the version defined in go.mod
 # When upgrading, update the node image versions at e2e/nomostest/clusters/kind.go
 KIND_VERSION := v0.14.0
diff --git a/pkg/hydrate/tool_util.go b/pkg/hydrate/tool_util.go
index 314adcf437..f6d5473058 100644
--- a/pkg/hydrate/tool_util.go
+++ b/pkg/hydrate/tool_util.go
@@ -43,7 +43,7 @@ import (
 
 const (
 	// HelmVersion is the recommended version of Helm for hydration.
-	HelmVersion = "v3.12.3-gke.1"
+	HelmVersion = "v3.12.3-gke.2"
 	// KustomizeVersion is the recommended version of Kustomize for hydration.
 	KustomizeVersion = "v5.1.1-gke.0"
 	// Helm is the binary name of the installed Helm.