diff --git a/.github/workflows/build-artifacts.yml b/.github/workflows/build-artifacts.yml
index cd5b75151..cff6c93df 100644
--- a/.github/workflows/build-artifacts.yml
+++ b/.github/workflows/build-artifacts.yml
@@ -99,7 +99,7 @@ jobs:
 
       - name: Fetch Cached Binary Artifacts
         id: binary-cache
-        uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ${{ github.workspace }}/dist
           key: nginx-ingress-${{ inputs.go-md5 }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1f9f4c3ca..86cc37a88 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -251,7 +251,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.21.4 # renovate: datasource=github-releases depName=helm/helm
+          version: v4.2.4 # renovate: datasource=github-releases depName=helm/helm
         if: >-
           inputs.force ||
           needs.checks.outputs.run_tests == 'true' &&
@@ -526,7 +526,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.21.4 # renovate: datasource=github-releases depName=helm/helm
+          version: v4.2.4 # renovate: datasource=github-releases depName=helm/helm
 
       - name: Setup NIC secrets
         uses: nginx/ci-self-hosted/.github/actions/get-from-vault@5c3e1f8b51f66a851fdba80f70e19cf966199730
diff --git a/.github/workflows/lint-format.yml b/.github/workflows/lint-format.yml
index f9f201dbe..eb6a59cb9 100644
--- a/.github/workflows/lint-format.yml
+++ b/.github/workflows/lint-format.yml
@@ -88,7 +88,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.21.4 # renovate: datasource=github-releases depName=helm/helm
+          version: v4.2.4 # renovate: datasource=github-releases depName=helm/helm
 
       - name: Lint chart
         run: helm lint charts/nginx-ingress
diff --git a/.github/workflows/publish-helm.yml b/.github/workflows/publish-helm.yml
index 1ec19b4f5..fb64886a5 100644
--- a/.github/workflows/publish-helm.yml
+++ b/.github/workflows/publish-helm.yml
@@ -147,7 +147,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.21.4 # renovate: datasource=github-releases depName=helm/helm
+          version: v4.2.4 # renovate: datasource=github-releases depName=helm/helm
 
       - name: Package
         id: package
diff --git a/.github/workflows/regression.yml b/.github/workflows/regression.yml
index 1e3ba0930..98a39a848 100644
--- a/.github/workflows/regression.yml
+++ b/.github/workflows/regression.yml
@@ -103,7 +103,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.21.4 # renovate: datasource=github-releases depName=helm/helm
+          version: v4.2.4 # renovate: datasource=github-releases depName=helm/helm
 
       - name: Setup Golang Environment
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
@@ -148,7 +148,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.21.4 # renovate: datasource=github-releases depName=helm/helm
+          version: v4.2.4 # renovate: datasource=github-releases depName=helm/helm
 
       - name: Setup NIC secrets
         uses: nginx/ci-self-hosted/.github/actions/get-from-vault@5c3e1f8b51f66a851fdba80f70e19cf966199730
diff --git a/.github/workflows/renovate-build.yml b/.github/workflows/renovate-build.yml
index 00cc9e2a2..08c24ceb8 100644
--- a/.github/workflows/renovate-build.yml
+++ b/.github/workflows/renovate-build.yml
@@ -127,7 +127,7 @@ jobs:
       - name: Setup Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.21.4 # renovate: datasource=github-releases depName=helm/helm
+          version: v4.2.4 # renovate: datasource=github-releases depName=helm/helm
         if: steps.helm-diff.outputs.changed == 'true'
 
       - name: Update snapshots