diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ccad66b6..2cb371ac 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -37,6 +37,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
+        uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
         with:
           sarif_file: results.sarif
diff --git a/hack/distro/argocd/release.flux.yaml b/hack/distro/argocd/release.flux.yaml
index b28eff85..c96c4558 100644
--- a/hack/distro/argocd/release.flux.yaml
+++ b/hack/distro/argocd/release.flux.yaml
@@ -13,7 +13,7 @@ spec:
   chart:
     spec:
       chart: argo-cd
-      version: "9.3.6"
+      version: "9.3.7"
       sourceRef:
         kind: HelmRepository
         name: argocd