diff --git a/gitops/base-install/argocd/overlays/argo-cd-repo-server-ksops-patch.yaml b/gitops/base-install/argocd/overlays/argo-cd-repo-server-ksops-patch.yaml
index 48973b02..85a7eaad 100644
--- a/gitops/base-install/argocd/overlays/argo-cd-repo-server-ksops-patch.yaml
+++ b/gitops/base-install/argocd/overlays/argo-cd-repo-server-ksops-patch.yaml
@@ -20,7 +20,7 @@ spec:
           # below and adds a helm binary so helm-secrets can be installed the way
           # upstream documents it. Track ArgoCD's bundled Helm major version
           # (hack/tool-versions.sh in argoproj/argo-cd) — Helm 4 here, Helm 4 there.
-          image: alpine/helm:4.2.3@sha256:b97ba4f9b27fe7af16ee3d37e6815783c9d4a51289b6240a9024ec471611ae9b
+          image: alpine/helm:4.2.4@sha256:76c375eed56144c68d6197c55bc5a4552fb42002190b796729901cbab3ae6e51
           imagePullPolicy: IfNotPresent
           command: [sh, -ec]
           env: