diff --git a/site-cookbooks/kosmos_gitea/CHANGELOG.md b/site-cookbooks/kosmos_gitea/CHANGELOG.md
index fbcc177..865cc45 100644
--- a/site-cookbooks/kosmos_gitea/CHANGELOG.md
+++ b/site-cookbooks/kosmos_gitea/CHANGELOG.md
@@ -2,6 +2,17 @@
 
 This file is used to list changes made in each version of the kosmos_gitea cookbook.
 
+# 0.3.3
+
+- Upgrade the Gitea Actions runner from 4.0.0 to 5.0.0. No `config.yaml` changes
+  were required.
+- 5.0 requires Git 2.34.1 or newer on the runner host.
+- Workflow-side breaking changes to be aware of (no cookbook change):
+  `builtin:checkout` now cleans the checkout directory unless `clean: false` and
+  fails when a triggering tag was moved; jobs without a `runs-on` now fail
+  instead of falling back to `runner.default_image`. Unprivileged runners strip
+  `--log-driver`/`--log-opt`/OOM container options, and OTLP metric names changed.
+
 # 0.3.2
 
 - Upgrade Gitea from 28.0.0 to 28.1.0. This is a maintenance release fixing
diff --git a/site-cookbooks/kosmos_gitea/attributes/default.rb b/site-cookbooks/kosmos_gitea/attributes/default.rb
index 120f2ac..d838d09 100644
--- a/site-cookbooks/kosmos_gitea/attributes/default.rb
+++ b/site-cookbooks/kosmos_gitea/attributes/default.rb
@@ -24,8 +24,8 @@ node.default["gitea"]["config"] = {
   }
 }
 
-node.default["gitea"]["runner"]["version"] = "4.0.0"
-node.default["gitea"]["runner"]["checksum"] = "02a3f52a9c8f3bb2d60f12696afea95ab980cbe1a60ec6eaa575749836c85216"
+node.default["gitea"]["runner"]["version"] = "5.0.0"
+node.default["gitea"]["runner"]["checksum"] = "3201f520b48abd353261b723c1e6b9bb3a82a56cabd4063e58d1fa191bbc50b2"
 node.default["gitea"]["runner"]["cache_base_port"] = 8088
 node.default["gitea"]["runner"]["config"] = {
   "runner" => {
diff --git a/site-cookbooks/kosmos_gitea/metadata.rb b/site-cookbooks/kosmos_gitea/metadata.rb
index a138679..6d2d2cb 100644
--- a/site-cookbooks/kosmos_gitea/metadata.rb
+++ b/site-cookbooks/kosmos_gitea/metadata.rb
@@ -4,7 +4,7 @@ maintainer_email 'ops@kosmos.org'
 license 'MIT'
 description 'Installs/configures Gitea'
 long_description 'Installs/configures Gitea'
-version '0.3.2'
+version '0.3.3'
 chef_version '>= 14.0'
 
 depends "firewall"