diff --git a/k8s-tools/Dockerfile b/k8s-tools/Dockerfile
index adf3a065..4072cbe5 100644
--- a/k8s-tools/Dockerfile
+++ b/k8s-tools/Dockerfile
@@ -58,7 +58,7 @@ RUN echo "Computed sha256sum: $(sha256sum ${KUBECTL_FILENAME})" \
     && echo "${KUBECTL_SUM}  ${KUBECTL_FILENAME}" | sha256sum -c -
 
 # renovate: datasource=github-releases depName=helm/helm
-ENV HELM_VERSION 3.12.0
+ENV HELM_VERSION 3.12.3
 ENV HELM_SUM da36e117d6dbc57c8ec5bab2283222fbd108db86c83389eebe045ad1ef3e2c3b
 ENV HELM_FILENAME helm-v${HELM_VERSION}-linux-amd64.tar.gz
 ADD https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz .
diff --git a/k8s-tools/k8s-tools_spec.rb b/k8s-tools/k8s-tools_spec.rb
index 6e0c9d82..8d576866 100644
--- a/k8s-tools/k8s-tools_spec.rb
+++ b/k8s-tools/k8s-tools_spec.rb
@@ -8,7 +8,7 @@
 KUSTOMIZE_VERSION="4.5.4" # renovate: datasource=github-releases depName=kubernetes-sigs/kustomize
 KAPP_VERSION="0.58.0" # renovate: datasource=github-releases depName=k14s/kapp
 KUBECTL_VERSION="1.24.17" # renovate: datasource=github-tags depName=kubernetes/kubectl
-HELM_VERSION="3.12.0" # renovate: datasource=github-releases depName=helm/helm
+HELM_VERSION="3.12.3" # renovate: datasource=github-releases depName=helm/helm
 KUTTL_VERSION="0.15.0" # renovate: datasource=github-releases depName=kudobuilder/kuttl
 RUBY_VERSION = "3.1"