diff --git a/bootstrap/helmfile.d/00-crds.yaml b/bootstrap/helmfile.d/00-crds.yaml
index 7f46524f6..c7f06c4c9 100644
--- a/bootstrap/helmfile.d/00-crds.yaml
+++ b/bootstrap/helmfile.d/00-crds.yaml
@@ -17,7 +17,7 @@ releases:
   - name: cloudflare-dns
     namespace: network
     chart: oci://ghcr.io/home-operations/charts-mirror/external-dns
-    version: 1.19.0
+    version: 1.20.0
 
   - name: external-secrets
     namespace: external-secrets
diff --git a/kubernetes/apps/network/cloudflare-dns/app/ocirepository.yaml b/kubernetes/apps/network/cloudflare-dns/app/ocirepository.yaml
index 789ab58be..44e6b6cfc 100644
--- a/kubernetes/apps/network/cloudflare-dns/app/ocirepository.yaml
+++ b/kubernetes/apps/network/cloudflare-dns/app/ocirepository.yaml
@@ -10,5 +10,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 1.19.0
+    tag: 1.20.0
   url: oci://ghcr.io/home-operations/charts-mirror/external-dns
diff --git a/kubernetes/apps/network/unifi-dns/app/ocirepository.yaml b/kubernetes/apps/network/unifi-dns/app/ocirepository.yaml
index 8d3410aa0..e2cacf5ac 100644
--- a/kubernetes/apps/network/unifi-dns/app/ocirepository.yaml
+++ b/kubernetes/apps/network/unifi-dns/app/ocirepository.yaml
@@ -10,5 +10,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 1.19.0
+    tag: 1.20.0
   url: oci://ghcr.io/home-operations/charts-mirror/external-dns