diff --git a/hack/make/deps.mk b/hack/make/deps.mk
index 51fa4be..7636795 100644
--- a/hack/make/deps.mk
+++ b/hack/make/deps.mk
@@ -1,13 +1,13 @@
-HELM_VERSION := v3.20.2
-HELM_SUM_arm64 := 5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691
-HELM_SUM_amd64 := 258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea
+HELM_VERSION := v4.2.0
+HELM_SUM_arm64 := 1f8de130dfbd04de64978e7b852a7a547be1404956a366608276d2520b678670
+HELM_SUM_amd64 := 97dbeb971be4ac4b27e3839976d9564c0fb35c6f3b1da89dd1e292d236af4096
 
 # renovate-local: kubectl-amd64
-KUBECTL_VERSION := v1.35.2
-# renovate-local: kubectl-arm64=v1.35.2
-KUBECTL_SUM_arm64 := cd859449f54ad2cb05b491c490c13bb836cdd0886ae013c0aed3dd67ff747467
-# renovate-local: kubectl-amd64=v1.35.2
-KUBECTL_SUM_amd64 := 924eb50779153f20cb668117d141440b95df2f325a64452d78dff9469145e277
+KUBECTL_VERSION := v1.36.0
+# renovate-local: kubectl-arm64=v1.36.0
+KUBECTL_SUM_arm64 := 9f9d9c44a7b5264515ac9da5991584e2395bd50662e651132337e7b4d0c56f8f
+# renovate-local: kubectl-amd64=v1.36.0
+KUBECTL_SUM_amd64 := 123d8c8844f46b1244c547fffb3c17180c0c26dac9890589fe7e67763298748e
 
 # renovate-local: kustomize-amd64
 KUSTOMIZE_VERSION := v5.7.1
diff --git a/scripts/update-kubectl.sh b/scripts/update-kubectl.sh
index a4483da..c028607 100755
--- a/scripts/update-kubectl.sh
+++ b/scripts/update-kubectl.sh
@@ -3,7 +3,7 @@
 # checksums in hack/make/deps.mk.
 #
 # Usage:
-#   ./scripts/update-kubectl.sh v1.35.3
+#   ./scripts/update-kubectl.sh v1.36.0
 #   ./scripts/update-kubectl.sh          # re-hashes whatever KUBECTL_VERSION is already set to
 
 set -euo pipefail
@@ -13,7 +13,7 @@ DEPS_MK="${SCRIPT_DIR}/../hack/make/deps.mk"
 
 usage() {
   echo "Usage: $0 [VERSION]"
-  echo "  VERSION  kubectl version to set, e.g. v1.35.3 (optional; defaults to current KUBECTL_VERSION)"
+  echo "  VERSION  kubectl version to set, e.g. v1.36.0 (optional; defaults to current KUBECTL_VERSION)"
   exit 1
 }