diff --git a/.github/workflows/publish-chart.yaml b/.github/workflows/publish-chart.yaml
index 5e244bb..2aeaaa5 100644
--- a/.github/workflows/publish-chart.yaml
+++ b/.github/workflows/publish-chart.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
+        uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/semgrep.yaml b/.github/workflows/semgrep.yaml
index c099f01..4b9a5a6 100644
--- a/.github/workflows/semgrep.yaml
+++ b/.github/workflows/semgrep.yaml
@@ -29,7 +29,7 @@ jobs:
 
       # Upload findings to GitHub Advanced Security Dashboard [step 2/2]
       - name: Upload SARIF file for GitHub Advanced Security Dashboard
-        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           sarif_file: semgrep.sarif
         if: always()
diff --git a/go.mod b/go.mod
index d4f615d..a3bf04c 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ replace sigs.k8s.io/structured-merge-diff/v4 => sigs.k8s.io/structured-merge-dif
 require (
 	github.com/cert-manager/cert-manager v1.20.2
 	github.com/stackitcloud/stackit-sdk-go/core v0.25.0
-	github.com/stackitcloud/stackit-sdk-go/services/dns v0.20.0
+	github.com/stackitcloud/stackit-sdk-go/services/dns v0.20.1
 	github.com/stretchr/testify v1.11.1
 	go.uber.org/mock v0.6.0
 	go.uber.org/zap v1.27.1
diff --git a/go.sum b/go.sum
index 13a0114..1894517 100644
--- a/go.sum
+++ b/go.sum
@@ -151,8 +151,8 @@ github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/stackitcloud/stackit-sdk-go/core v0.25.0 h1:ra3VEk684MNoq741g+xbZrKjZzhyztq5liUAwwew4DY=
 github.com/stackitcloud/stackit-sdk-go/core v0.25.0/go.mod h1:WU1hhxnjXw2EV7CYa1nlEvNpMiRY6CvmIOaHuL3pOaA=
-github.com/stackitcloud/stackit-sdk-go/services/dns v0.20.0 h1:q/KWOTd1tVYkQruJwIU5N8OPkRvBIAmJxafSu3TuXiU=
-github.com/stackitcloud/stackit-sdk-go/services/dns v0.20.0/go.mod h1:yRdrlrVmg96cssNajhzJk0eVm0nXYJC3Vz9SuVtq8nI=
+github.com/stackitcloud/stackit-sdk-go/services/dns v0.20.1 h1:yR/JpPG6fC0UrYVdaFeM7QqUKQUQnIrcnRV1d1vCLgc=
+github.com/stackitcloud/stackit-sdk-go/services/dns v0.20.1/go.mod h1:XU/AX9T71L9BmaPxi6UAySrCSlvUzH1zpktpwtyNexk=
 github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs=
 github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=