diff --git a/.github/workflows/diff-rendered-charts.yml b/.github/workflows/diff-rendered-charts.yml
index eb60e46..d0beea1 100644
--- a/.github/workflows/diff-rendered-charts.yml
+++ b/.github/workflows/diff-rendered-charts.yml
@@ -50,7 +50,7 @@ jobs:
           ref: ${{ matrix.ref.sha }}
 
       - name: setup helm
-        uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f #v4.0.0
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 #v4.3.1
 
       - name: render ${{ matrix.chart }} from ${{ matrix.ref.name }} ref
         id: render
@@ -103,7 +103,7 @@ jobs:
       - render_charts
     steps:
       - name: setup helm
-        uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f #v4.0.0
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 #v4.3.1
 
       - name: download artifacts
         uses: actions/download-artifact@v4
diff --git a/.github/workflows/validate-k8s-manifests.yml b/.github/workflows/validate-k8s-manifests.yml
index db544bb..7a493ba 100644
--- a/.github/workflows/validate-k8s-manifests.yml
+++ b/.github/workflows/validate-k8s-manifests.yml
@@ -52,7 +52,7 @@ jobs:
          persist-credentials: true # We are using these credentials in later steps
 
       - name: setup helm
-        uses: azure/setup-helm@29960d0f5f19214b88e1d9ba750a9914ab0f1a2f #v4.0.0
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 #v4.3.1
 
       - name: render ${{ matrix.chart }} from head ref
         id: render_head