diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 2cb371ac..a2ff1a48 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -37,6 +37,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
+        uses: github/codeql-action/upload-sarif@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
         with:
           sarif_file: results.sarif
diff --git a/hack/distro/cert-manager/release.flux.yaml b/hack/distro/cert-manager/release.flux.yaml
index c480e9b0..e6630d25 100644
--- a/hack/distro/cert-manager/release.flux.yaml
+++ b/hack/distro/cert-manager/release.flux.yaml
@@ -13,7 +13,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: "1.19.2"
+      version: "v1.19.3"
       sourceRef:
         kind: HelmRepository
         name: cert-manager