diff --git a/.github/workflows/docker-master.yaml b/.github/workflows/docker-master.yaml
index 762590e16..9df9f6e27 100644
--- a/.github/workflows/docker-master.yaml
+++ b/.github/workflows/docker-master.yaml
@@ -80,12 +80,12 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump psql environment
-        uses: mikefarah/yq@v4.16.2
+        uses: mikefarah/yq@v4.17.2
         with:
           cmd: yq eval '.image.tag = "${{ needs.publish.outputs.sha-tag }}"' -i environments/internal-prd/pomerium-master-postgres/values/pomerium.yaml
 
       - name: Bump mysql environment
-        uses: mikefarah/yq@v4.16.2
+        uses: mikefarah/yq@v4.17.2
         with:
           cmd: yq eval '.image.tag = "${{ needs.publish.outputs.sha-tag }}"' -i environments/internal-prd/pomerium-master-mysql/values/pomerium.yaml
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index de1e7f270..711ed9857 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -102,7 +102,7 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump test environment
-        uses: mikefarah/yq@v4.16.2
+        uses: mikefarah/yq@v4.17.2
         with:
           cmd: yq eval '.image.tag = "${{ needs.goreleaser.outputs.tag }}"' -i environments/internal-prd/values/pomerium-demo.yaml