diff --git a/platform/cert-manager/helmrelease.yaml b/platform/cert-manager/helmrelease.yaml
index e2b2bb3..0855afc 100644
--- a/platform/cert-manager/helmrelease.yaml
+++ b/platform/cert-manager/helmrelease.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: ">=1.20.0 <1.21.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
+      version: ">=1.21.0 <1.22.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
       sourceRef:
         kind: HelmRepository
         name: jetstack