diff --git a/platform/cert-manager/helmrelease.yaml b/platform/cert-manager/helmrelease.yaml
index 72f0a20..e0ae6d6 100644
--- a/platform/cert-manager/helmrelease.yaml
+++ b/platform/cert-manager/helmrelease.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: ">=1.16.0 <1.17.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
+      version: ">=1.17.0 <1.18.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
       sourceRef:
         kind: HelmRepository
         name: jetstack