diff --git a/.github/workflows/docker-main.yaml b/.github/workflows/docker-main.yaml
index e7d020e210d..529e3067085 100644
--- a/.github/workflows/docker-main.yaml
+++ b/.github/workflows/docker-main.yaml
@@ -81,7 +81,7 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump psql environment
-        uses: mikefarah/yq@5ef537f3fd1a9437aa3ee44c32c6459a126efdc4
+        uses: mikefarah/yq@0b34c9a00de1c575a34eea05af1d956a525c4fc1
         with:
           cmd:
             yq eval '.pomerium.image.tag = "${{ needs.publish.outputs.sha-tag }}"' -i
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index ad52e1cf744..18058d2e6a9 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -127,7 +127,7 @@ jobs:
           token: ${{ secrets.APPARITOR_GITHUB_TOKEN }}
 
       - name: Bump test environment
-        uses: mikefarah/yq@5ef537f3fd1a9437aa3ee44c32c6459a126efdc4
+        uses: mikefarah/yq@0b34c9a00de1c575a34eea05af1d956a525c4fc1
         with:
           cmd: yq eval '.pomerium.image.tag = "${{ needs.goreleaser.outputs.tag }}"' -i projects/pomerium-demo/pomerium-demo/values.yaml