diff --git a/mise.lock b/mise.lock
index 92fe834df50..71c8611efea 100644
--- a/mise.lock
+++ b/mise.lock
@@ -1,4 +1,4 @@
-# @generated - this file is auto-generated by `mise lock` https://mise.en.dev/dev-tools/mise-lock.html
+# @generated - this file is auto-generated by `mise lock` https://mise.jdx.dev/dev-tools/mise-lock.html
 
 [[tools."aqua:ahmetb/kubectx/kubens"]]
 version = "0.9.4"
@@ -481,9 +481,13 @@ checksum = "sha256:54c2ed3a6b4f2f5da1056fb6e83d6b73b592e06684b65a5999174fabbb251
 url = "https://github.com/golangci/golangci-lint/releases/download/v1.64.8/golangci-lint-1.64.8-windows-amd64.zip"
 
 [[tools."http:helm"]]
-version = "3.12.0"
+version = "3.21.0"
 backend = "http:helm"
 
+[tools."http:helm"."platforms.linux-x64"]
+checksum = "blake3:c21872f94494e4f245140c5d274d212c68cf7db89d3ecfe1f080a1cd8585377f"
+url = "https://get.helm.sh/helm-v3.21.0-linux-amd64.tar.gz"
+
 [[tools.kubectx]]
 version = "0.9.4"
 backend = "aqua:ahmetb/kubectx"
diff --git a/mise.toml b/mise.toml
index 4febc3f2631..efaeb31a79b 100644
--- a/mise.toml
+++ b/mise.toml
@@ -60,7 +60,7 @@ lazygit = "0.61.1"
 # the dogfood image is linux/amd64-only and nobody on the team runs
 # helm via mise on Windows.
 [tools."http:helm"]
-version = "3.12.0"
+version = "3.21.0"
 url = 'https://get.helm.sh/helm-v{{version}}-{{os(macos="darwin")}}-{{arch(x64="amd64")}}.tar.gz'
 
 # sqlc (coder fork) bundles sqlite via cgo, so the `go install` build