diff --git a/platform/externaldns/helmrelease.yaml b/platform/externaldns/helmrelease.yaml
index 62c5475..908e2b0 100644
--- a/platform/externaldns/helmrelease.yaml
+++ b/platform/externaldns/helmrelease.yaml
@@ -11,7 +11,7 @@ spec:
   chart:
     spec:
       chart: external-dns
-      version: ">=1.21.0 <1.22.0"   # k8s-1.36 catch-up (app v0.21; policy already set). Renovate maintains
+      version: "<1.24.0"   # k8s-1.36 catch-up (app v0.21; policy already set). Renovate maintains
       sourceRef:
         kind: HelmRepository
         name: external-dns