diff --git a/.github/workflows/bump-version.yml b/.github/workflows/bump-version.yml
index ea388a6..ac7f0d2 100644
--- a/.github/workflows/bump-version.yml
+++ b/.github/workflows/bump-version.yml
@@ -61,7 +61,7 @@ jobs:
       - name: Get version
         if: steps.command.outputs.command-name
         id: get_version
-        uses: mikefarah/yq@1cf9ecc79df9cabe69ae75a0bbfa7df7f9fe8a2f # v4.40.2
+        uses: mikefarah/yq@c11a53322bce866fbfa3032e326f58c89e8c0759 # v4.40.3
         with:
           cmd: yq ".version" charts/backstage/Chart.yaml
 
@@ -74,7 +74,7 @@ jobs:
 
       - name: Bump the version
         if: steps.command.outputs.command-name
-        uses: mikefarah/yq@1cf9ecc79df9cabe69ae75a0bbfa7df7f9fe8a2f # v4.40.2
+        uses: mikefarah/yq@c11a53322bce866fbfa3032e326f58c89e8c0759 # v4.40.3
         with:
           cmd: yq -i '.version = "${{ steps.semver.outputs.new_version }}"' charts/backstage/Chart.yaml