diff --git a/.github/actions/setup-helmfile/action.yaml b/.github/actions/setup-helmfile/action.yaml
index b988198198..10673ac7e3 100644
--- a/.github/actions/setup-helmfile/action.yaml
+++ b/.github/actions/setup-helmfile/action.yaml
@@ -5,7 +5,7 @@ runs:
   steps:
     - name: install helmfile
       run: |
-        curl -L https://github.com/helmfile/helmfile/releases/download/v1.1.3/helmfile_1.1.3_linux_amd64.tar.gz -o helmfile.tar.gz
+        curl -L https://github.com/helmfile/helmfile/releases/download/v1.2.2/helmfile_1.2.2_linux_amd64.tar.gz -o helmfile.tar.gz
         tar -xvf /tmp/helmfile.tar.gz
         mv helmfile /usr/local/bin
         chmod +x /usr/local/bin/helmfile
diff --git a/.github/workflows/deploy-ops-dashboard.yml b/.github/workflows/deploy-ops-dashboard.yml
index 66dd95334c..3120a73776 100644
--- a/.github/workflows/deploy-ops-dashboard.yml
+++ b/.github/workflows/deploy-ops-dashboard.yml
@@ -53,6 +53,19 @@ jobs:
           jq '.' env.yaml
         working-directory: .ops/ops-dashboard
 
+      - name: pin helm to correct version
+        run: |
+          helm version
+          
+          curl -o /tmp/helm.tar.gz -sL https://get.helm.sh/helm-v4.0.1-linux-amd64.tar.gz
+          echo "e0365548f01ed52a58a1181ad310b604a3244f59257425bb1739499372bdff60 /tmp/helm.tar.gz" | sha256sum --check
+          
+          tar -xzf /tmp/helm.tar.gz -C /tmp/
+          mv /tmp/linux-amd64/helm /usr/local/bin/helm
+          
+          chmod +x /usr/local/bin/helm
+          helm version
+
       - name: Setup helm
         run: |
           mkdir ~/.kube && echo '${{ secrets.KUBECONFIG }}' > ~/.kube/config && chmod go-r ~/.kube/config
diff --git a/.ops/ops-dashboard/Chart.lock b/.ops/ops-dashboard/Chart.lock
index d21e212180..6aa783b161 100644
--- a/.ops/ops-dashboard/Chart.lock
+++ b/.ops/ops-dashboard/Chart.lock
@@ -1,15 +1,15 @@
 dependencies:
 - name: oauth2-proxy
   repository: https://oauth2-proxy.github.io/manifests
-  version: 7.18.0
+  version: 9.0.0
 - name: kubernetes-dashboard
   repository: https://kubernetes.github.io/dashboard/
   version: 7.14.0
 - name: oauth2-proxy
   repository: https://oauth2-proxy.github.io/manifests
-  version: 7.18.0
+  version: 9.0.0
 - name: oauth2-proxy
   repository: https://oauth2-proxy.github.io/manifests
-  version: 7.18.0
-digest: sha256:7ec11af29604ef6739640a976d8276f6d83414bb27287815f0e0472d9bb9604a
-generated: "2025-11-06T17:09:52.775601394Z"
+  version: 9.0.0
+digest: sha256:0f623184084d3d5266b964a283da2a97b919c8d696c08f7e1c8360db4c7eac09
+generated: "2025-11-28T21:03:57.092441197Z"
diff --git a/.ops/ops-dashboard/Chart.yaml b/.ops/ops-dashboard/Chart.yaml
index d917638b82..2651fd3d22 100644
--- a/.ops/ops-dashboard/Chart.yaml
+++ b/.ops/ops-dashboard/Chart.yaml
@@ -26,16 +26,16 @@ appVersion: 0.1.0
 dependencies:
   - name: oauth2-proxy
     alias: grafana-proxy
-    version: 7.18.0
+    version: 9.0.0
     repository: https://oauth2-proxy.github.io/manifests
   - name: kubernetes-dashboard
     version: 7.14.0
     repository: https://kubernetes.github.io/dashboard/
   - name: oauth2-proxy
     alias: kubernetes-dashboard-proxy
-    version: 7.18.0
+    version: 9.0.0
     repository: https://oauth2-proxy.github.io/manifests
   - name: oauth2-proxy
     alias: logging-proxy
-    version: 7.18.0
+    version: 9.0.0
     repository: https://oauth2-proxy.github.io/manifests