diff --git a/bootstrap/helmfile.d/00-crds.yaml b/bootstrap/helmfile.d/00-crds.yaml
index 7a58775d0..138806e39 100644
--- a/bootstrap/helmfile.d/00-crds.yaml
+++ b/bootstrap/helmfile.d/00-crds.yaml
@@ -22,7 +22,7 @@ releases:
   - name: external-secrets
     namespace: external-secrets
     chart: oci://ghcr.io/external-secrets/charts/external-secrets
-    version: 0.19.2
+    version: 0.20.1
 
   - name: kube-prometheus-stack
     namespace: observability
diff --git a/kubernetes/apps/external-secrets/external-secrets/app/ocirepository.yaml b/kubernetes/apps/external-secrets/external-secrets/app/ocirepository.yaml
index 5d3a9c5b4..dd9b08d88 100644
--- a/kubernetes/apps/external-secrets/external-secrets/app/ocirepository.yaml
+++ b/kubernetes/apps/external-secrets/external-secrets/app/ocirepository.yaml
@@ -10,5 +10,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 0.19.2
+    tag: 0.20.1
   url: oci://ghcr.io/external-secrets/charts/external-secrets