diff --git a/helm-set-status.yaml b/helm-set-status.yaml
index e3444a63631..9dc8090f9da 100644
--- a/helm-set-status.yaml
+++ b/helm-set-status.yaml
@@ -1,7 +1,7 @@
 package:
   name: helm-set-status
   version: 0.3.0
-  epoch: 1 # CVE-2025-47907
+  epoch: 2 # GHSA-f9f8-9pmf-xv68
   description: Helm plugin to set release status
   copyright:
     - license: Apache-2.0
@@ -20,7 +20,7 @@ pipeline:
         github.com/docker/docker@v26.1.5
         golang.org/x/net@v0.38.0
         golang.org/x/oauth2@v0.27.0
-        helm.sh/helm/v3@v3.17.4
+        helm.sh/helm/v3@v3.18.5
 
   # Dropping helm plugins in /usr/libexec since they are binaries and
   # configuration intended to be run by the helm command.