diff --git a/cluster-api-helm-controller.yaml b/cluster-api-helm-controller.yaml
index 51893bd713aa..009a84ce512a 100644
--- a/cluster-api-helm-controller.yaml
+++ b/cluster-api-helm-controller.yaml
@@ -1,7 +1,7 @@
 package:
   name: cluster-api-helm-controller
   version: "0.3.2"
-  epoch: 4 # GHSA-4vq8-7jfc-9cvp
+  epoch: 5 # GHSA-f9f8-9pmf-xv68
   description: CAAPH uses Helm charts to manage the installation and lifecycle of Cluster API add-ons.
   copyright:
     - license: Apache-2.0
@@ -22,7 +22,10 @@ pipeline:
         github.com/containerd/containerd@v1.7.27
         golang.org/x/net@v0.38.0
         golang.org/x/oauth2@v0.27.0
+        helm.sh/helm/v3@v3.18.5
         github.com/docker/docker@v28.0.0
+      replaces: |-
+        k8s.io/apiserver=k8s.io/apiserver@v0.31.12
 
   - uses: go/bump
     with: