diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 2a8665f2..be118520 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -66,7 +66,7 @@ jobs:
             # Once it turned out to be not practically true,
             # we will mark this combination as failable,
             # and instruct users to upgrade helm and helm-secrets at once.
-            plugin-secrets-version: 4.6.3
+            plugin-secrets-version: 4.6.5
             plugin-diff-version: 3.11.0
             extra-helmfile-flags: ''
           - helm-version: v3.18.0
@@ -76,14 +76,14 @@ jobs:
             extra-helmfile-flags: ''
           - helm-version: v3.18.0
             kustomize-version: v5.4.3
-            plugin-secrets-version: 4.6.3
+            plugin-secrets-version: 4.6.5
             plugin-diff-version: 3.11.0
             extra-helmfile-flags: ''
           # In case you need to test some optional helmfile features,
           # enable it via extra-helmfile-flags below.
           - helm-version: v3.18.0
             kustomize-version: v5.4.3
-            plugin-secrets-version: 4.6.3
+            plugin-secrets-version: 4.6.5
             plugin-diff-version: 3.11.0
             extra-helmfile-flags: '--enable-live-output'
     steps:
diff --git a/Dockerfile b/Dockerfile
index b2c66527..3ade50f7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -94,7 +94,7 @@ RUN set -x && \
     [ "$(age-keygen --version)" = "${AGE_VERSION}" ]
 
 RUN helm plugin install https://github.com/databus23/helm-diff --version v3.11.0 && \
-    helm plugin install https://github.com/jkroepke/helm-secrets --version v4.6.3 && \
+    helm plugin install https://github.com/jkroepke/helm-secrets --version v4.6.5 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.16.3 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v1.3.0 && \
     rm -rf ${HELM_CACHE_HOME}/plugins
diff --git a/Dockerfile.debian-stable-slim b/Dockerfile.debian-stable-slim
index 84e7b12f..c17cb7eb 100644
--- a/Dockerfile.debian-stable-slim
+++ b/Dockerfile.debian-stable-slim
@@ -100,7 +100,7 @@ RUN set -x && \
     [ "$(age-keygen --version)" = "${AGE_VERSION}" ]
 
 RUN helm plugin install https://github.com/databus23/helm-diff --version v3.11.0 && \
-    helm plugin install https://github.com/jkroepke/helm-secrets --version v4.6.3 && \
+    helm plugin install https://github.com/jkroepke/helm-secrets --version v4.6.5 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.16.3 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v1.3.0 && \
     rm -rf ${HELM_CACHE_HOME}/plugins
diff --git a/Dockerfile.ubuntu b/Dockerfile.ubuntu
index fe3055cc..b8374e9e 100644
--- a/Dockerfile.ubuntu
+++ b/Dockerfile.ubuntu
@@ -100,7 +100,7 @@ RUN set -x && \
     [ "$(age-keygen --version)" = "${AGE_VERSION}" ]
 
 RUN helm plugin install https://github.com/databus23/helm-diff --version v3.11.0 && \
-    helm plugin install https://github.com/jkroepke/helm-secrets --version v4.6.3 && \
+    helm plugin install https://github.com/jkroepke/helm-secrets --version v4.6.5 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.16.3 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v1.3.0 && \
     rm -rf ${HELM_CACHE_HOME}/plugins
diff --git a/pkg/app/init.go b/pkg/app/init.go
index d9d3451e..14c00dac 100644
--- a/pkg/app/init.go
+++ b/pkg/app/init.go
@@ -20,7 +20,7 @@ const (
 	HelmRequiredVersion           = "v3.17.3"
 	HelmRecommendedVersion        = "v3.18.0"
 	HelmDiffRecommendedVersion    = "v3.11.0"
-	HelmSecretsRecommendedVersion = "v4.6.3"
+	HelmSecretsRecommendedVersion = "v4.6.5"
 	HelmGitRecommendedVersion     = "v1.3.0"
 	HelmS3RecommendedVersion      = "v0.16.3"
 	HelmInstallCommand            = "https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3"