diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 0dc2652d..49365c33 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -75,20 +75,20 @@ jobs:
            plugin-diff-version: 3.8.1
            extra-helmfile-flags:
            v1mode:
-         - helm-version: v3.12.1
+         - helm-version: v3.12.2
            kustomize-version: v4.4.1
            plugin-secrets-version: 3.15.0
            plugin-diff-version: 3.7.0
            extra-helmfile-flags:
            v1mode:
-         - helm-version: v3.12.1
+         - helm-version: v3.12.2
            kustomize-version: v4.5.7
            plugin-secrets-version: 4.0.0
            plugin-diff-version: 3.8.1
            extra-helmfile-flags:
            v1mode:
          # Helmfile v1
-         - helm-version: v3.12.1
+         - helm-version: v3.12.2
            kustomize-version: v4.5.7
            plugin-secrets-version: 4.0.0
            plugin-diff-version: 3.8.1
@@ -96,7 +96,7 @@ jobs:
            v1mode: "true"
          # In case you need to test some optional helmfile features,
          # enable it via extra-helmfile-flags below.
-         - helm-version: v3.12.1
+         - helm-version: v3.12.2
            kustomize-version: v4.5.7
            plugin-secrets-version: 4.0.0
            plugin-diff-version: 3.8.1
diff --git a/Dockerfile b/Dockerfile
index acce449c..bc8efb66 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -30,7 +30,7 @@ ENV HELM_CONFIG_HOME="${HELM_CONFIG_HOME}"
 ARG HELM_DATA_HOME="${HOME}/.local/share/helm"
 ENV HELM_DATA_HOME="${HELM_DATA_HOME}"
 
-ARG HELM_VERSION="v3.12.1"
+ARG HELM_VERSION="v3.12.2"
 ENV HELM_VERSION="${HELM_VERSION}"
 ARG HELM_LOCATION="https://get.helm.sh"
 ARG HELM_FILENAME="helm-${HELM_VERSION}-${TARGETOS}-${TARGETARCH}.tar.gz"
@@ -38,8 +38,8 @@ RUN set -x && \
     curl --retry 5 --retry-connrefused -LO "${HELM_LOCATION}/${HELM_FILENAME}" && \
     echo Verifying ${HELM_FILENAME}... && \
     case ${TARGETPLATFORM} in \
-         "linux/amd64")  HELM_SHA256="1a7074f58ef7190f74ce6db5db0b70e355a655e2013c4d5db2317e63fa9e3dea"  ;; \
-         "linux/arm64")  HELM_SHA256="50548d4fedef9d8d01d1ed5a2dd5c849271d1017127417dc4c7ef6777ae68f7e"  ;; \
+         "linux/amd64")  HELM_SHA256="2b6efaa009891d3703869f4be80ab86faa33fa83d9d5ff2f6492a8aebe97b219"  ;; \
+         "linux/arm64")  HELM_SHA256="cfafbae85c31afde88c69f0e5053610c8c455826081c1b2d665d9b44c31b3759"  ;; \
     esac && \
     echo "${HELM_SHA256}  ${HELM_FILENAME}" | sha256sum -c && \
     echo Extracting ${HELM_FILENAME}... && \
diff --git a/Dockerfile.debian-stable-slim b/Dockerfile.debian-stable-slim
index cc263734..c8143a53 100644
--- a/Dockerfile.debian-stable-slim
+++ b/Dockerfile.debian-stable-slim
@@ -35,7 +35,7 @@ ENV HELM_CONFIG_HOME="${HELM_CONFIG_HOME}"
 ARG HELM_DATA_HOME="${HOME}/.local/share/helm"
 ENV HELM_DATA_HOME="${HELM_DATA_HOME}"
 
-ARG HELM_VERSION="v3.12.1"
+ARG HELM_VERSION="v3.12.2"
 ENV HELM_VERSION="${HELM_VERSION}"
 ARG HELM_LOCATION="https://get.helm.sh"
 ARG HELM_FILENAME="helm-${HELM_VERSION}-${TARGETOS}-${TARGETARCH}.tar.gz"
@@ -43,8 +43,8 @@ RUN set -x && \
     curl --retry 5 --retry-connrefused -LO "${HELM_LOCATION}/${HELM_FILENAME}" && \
     echo Verifying ${HELM_FILENAME}... && \
     case ${TARGETPLATFORM} in \
-         "linux/amd64")  HELM_SHA256="1a7074f58ef7190f74ce6db5db0b70e355a655e2013c4d5db2317e63fa9e3dea"  ;; \
-         "linux/arm64")  HELM_SHA256="50548d4fedef9d8d01d1ed5a2dd5c849271d1017127417dc4c7ef6777ae68f7e"  ;; \
+         "linux/amd64")  HELM_SHA256="2b6efaa009891d3703869f4be80ab86faa33fa83d9d5ff2f6492a8aebe97b219"  ;; \
+         "linux/arm64")  HELM_SHA256="cfafbae85c31afde88c69f0e5053610c8c455826081c1b2d665d9b44c31b3759"  ;; \
     esac && \
     echo "${HELM_SHA256}  ${HELM_FILENAME}" | sha256sum -c && \
     echo Extracting ${HELM_FILENAME}... && \
diff --git a/Dockerfile.ubuntu b/Dockerfile.ubuntu
index 27cd6a44..f99d517c 100644
--- a/Dockerfile.ubuntu
+++ b/Dockerfile.ubuntu
@@ -35,7 +35,7 @@ ENV HELM_CONFIG_HOME="${HELM_CONFIG_HOME}"
 ARG HELM_DATA_HOME="${HOME}/.local/share/helm"
 ENV HELM_DATA_HOME="${HELM_DATA_HOME}"
 
-ARG HELM_VERSION="v3.12.1"
+ARG HELM_VERSION="v3.12.2"
 ENV HELM_VERSION="${HELM_VERSION}"
 ARG HELM_LOCATION="https://get.helm.sh"
 ARG HELM_FILENAME="helm-${HELM_VERSION}-${TARGETOS}-${TARGETARCH}.tar.gz"
@@ -43,8 +43,8 @@ RUN set -x && \
     curl --retry 5 --retry-connrefused -LO "${HELM_LOCATION}/${HELM_FILENAME}" && \
     echo Verifying ${HELM_FILENAME}... && \
     case ${TARGETPLATFORM} in \
-         "linux/amd64")  HELM_SHA256="1a7074f58ef7190f74ce6db5db0b70e355a655e2013c4d5db2317e63fa9e3dea"  ;; \
-         "linux/arm64")  HELM_SHA256="50548d4fedef9d8d01d1ed5a2dd5c849271d1017127417dc4c7ef6777ae68f7e"  ;; \
+         "linux/amd64")  HELM_SHA256="2b6efaa009891d3703869f4be80ab86faa33fa83d9d5ff2f6492a8aebe97b219"  ;; \
+         "linux/arm64")  HELM_SHA256="cfafbae85c31afde88c69f0e5053610c8c455826081c1b2d665d9b44c31b3759"  ;; \
     esac && \
     echo "${HELM_SHA256}  ${HELM_FILENAME}" | sha256sum -c && \
     echo Extracting ${HELM_FILENAME}... && \
diff --git a/pkg/app/init.go b/pkg/app/init.go
index e0dc709c..90043f58 100644
--- a/pkg/app/init.go
+++ b/pkg/app/init.go
@@ -18,7 +18,7 @@ import (
 
 const (
 	HelmRequiredVersion           = "v3.10.3"
-	HelmRecommendedVersion        = "v3.12.1"
+	HelmRecommendedVersion        = "v3.12.2"
 	HelmDiffRecommendedVersion    = "v3.8.1"
 	HelmSecretsRecommendedVersion = "v4.1.1"
 	HelmGitRecommendedVersion     = "v0.12.0"