diff --git a/aqua.yaml b/aqua.yaml
index c61eaf6..bee5171 100644
--- a/aqua.yaml
+++ b/aqua.yaml
@@ -56,7 +56,7 @@ packages:
   - name: helm/helm@v4.2.3
   # kubectl tracks the controller's Kubernetes client minor (k8s.io/api v0.36 ->
   # 1.36), matching the kind node's Kubernetes minor (v1.36) — within skew policy.
-  - name: kubernetes/kubernetes/kubectl@v1.36.2
+  - name: kubernetes/kubernetes/kubectl@v1.36.3
   # --- Ephemeral EKS Auto Mode PoC tooling (test/e2e/eks-automode, issue #93) ---
   - name: hashicorp/terraform@v1.15.8
   # awscli authenticates to AWS, logs Docker in to ECR, and writes the cluster