diff --git a/.github/workflows/docker-main.yaml b/.github/workflows/docker-main.yaml
index 66a0ab5ac..bb5f032c4 100644
--- a/.github/workflows/docker-main.yaml
+++ b/.github/workflows/docker-main.yaml
@@ -81,7 +81,7 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump psql environment
-        uses: mikefarah/yq@0b34c9a00de1c575a34eea05af1d956a525c4fc1
+        uses: mikefarah/yq@6609ed76ecb69f9d8254345292d90ea72f641715
         with:
           cmd:
             yq eval '.pomerium.image.tag = "${{ needs.publish.outputs.sha-tag }}"' -i
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index df19ecba4..7418ccfdd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -127,7 +127,7 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump test environment
-        uses: mikefarah/yq@0b34c9a00de1c575a34eea05af1d956a525c4fc1
+        uses: mikefarah/yq@6609ed76ecb69f9d8254345292d90ea72f641715
         with:
           cmd: yq eval '.pomerium.image.tag = "${{ needs.goreleaser.outputs.tag }}"' -i projects/pomerium-demo/pomerium-demo/values.yaml