diff --git a/kubernetes/bootstrap/helmfile.yaml b/kubernetes/bootstrap/helmfile.yaml
index 3530ab1f..16cb645f 100644
--- a/kubernetes/bootstrap/helmfile.yaml
+++ b/kubernetes/bootstrap/helmfile.yaml
@@ -49,7 +49,7 @@ releases:
   - name: external-secrets
     namespace: external-secrets
     chart: oci://ghcr.io/external-secrets/charts/external-secrets
-    version: 0.16.1
+    version: 0.20.4
     values:
       - ../apps/external-secrets/external-secrets/app/values.yaml
     needs: