Fix SECVULN-42899: Upgrade Helm and Kubernetes dependencies

[Angel-4903]

Rollback Plan

If a change needs to be reverted, we will publish an updated version of the library.

Changes to Security Controls

Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.

Description

This PR addresses security vulnerability SECVULN-42899 by upgrading Helm and Kubernetes dependencies to their latest secure versions.

• Upgraded helm.sh/helm/v3 from v3.18.5 to v3.20.2
• Upgraded Kubernetes dependencies from v0.33.3 to v0.35.1
• Updated structured-merge-diff from v4 to v6 for compatibility
• Updated test fixture to match new Kubernetes API serialization format

Acceptance tests

• Have you added an acceptance test for the functionality being added?

Release Note

Release note for CHANGELOG:

...

References

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

[hashicorp-cla-app]

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes

---

Angel Raphael seems not to be a GitHub user.
You need a GitHub account to be able to sign the CLA.
If you have already a GitHub account, please add the email address used for this commit to your account.

_{Have you signed the CLA already but the status is still pending? Recheck it.}

[hashicorp-cla-app]

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes

---

Angel Raphael seems not to be a GitHub user.
You need a GitHub account to be able to sign the CLA.
If you have already a GitHub account, please add the email address used for this commit to your account.

_{Have you signed the CLA already but the status is still pending? Recheck it.}

[Copilot]

Pull request overview

This PR addresses SECVULN-42899 by upgrading Helm and Kubernetes-related dependencies and adjusting code/tests/fixtures for compatibility with the newer APIs and CLI behaviors.

Changes:

• Upgrade helm.sh/helm/v3 and Kubernetes libraries to newer versions (plus related indirect dependency updates).
• Update code to use sigs.k8s.io/structured-merge-diff/v6 and adjust OCI registry test commands for updated Helm behavior.
• Refresh a rendered-manifest JSON fixture to match updated Kubernetes serialization output.

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
go.mod	Bumps Helm/Kubernetes deps; needs follow-up cleanup for structured-merge-diff v6 vs v4 alignment.
go.sum	Records checksums for upgraded dependencies.
helm/kube_resources.go	Switches structured-merge-diff import from v4 to v6.
helm/resource_helm_release_test.go	Adds --plain-http to Helm OCI login/push in tests for local registry usage.
helm/testdata/manifest_json/rendered_manifest.json	Updates fixture output (removes creationTimestamp: null).
.changelog/1807.txt	Adds release note entry, but formatting/fences are currently malformed.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.