diff --git a/.github/workflows/benchmark-action.yaml b/.github/workflows/benchmark-action.yaml
index f5269a1ff..d032fab1c 100644
--- a/.github/workflows/benchmark-action.yaml
+++ b/.github/workflows/benchmark-action.yaml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v4.1.2
       - uses: actions/setup-go@v5 # default version of go is 1.10
         with:
-          go-version: 1.21.9
+          go-version: 1.21.11
       - name: Install Carvel Tools
         run: ./hack/install-deps.sh
       # Run benchmark with `go test -bench` and stores the output to a file
diff --git a/.github/workflows/dependency-updater.yml b/.github/workflows/dependency-updater.yml
index 8355b04e0..4e21030f6 100644
--- a/.github/workflows/dependency-updater.yml
+++ b/.github/workflows/dependency-updater.yml
@@ -16,7 +16,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v5
         with:
-          go-version: 1.21.9
+          go-version: 1.21.11
       - name: Update Dependencies File
         run: go run ./hack/dependencies.go update
       - name: Create Pull Request
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index bed824205..ddb4bd0a7 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -21,7 +21,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v5
         with:
-          go-version: 1.21.9
+          go-version: 1.21.11
       - uses: actions/checkout@v4.1.2
         with:
           fetch-depth: '0'
diff --git a/.github/workflows/kind-action.yml b/.github/workflows/kind-action.yml
index a1d4b31ee..5170ad54a 100644
--- a/.github/workflows/kind-action.yml
+++ b/.github/workflows/kind-action.yml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-go@v5 # default version of go is 1.10
         with:
-          go-version: 1.21.9
+          go-version: 1.21.11
       - name: Install Carvel Tools
         run: ./hack/install-deps.sh
       # Run benchmark with `go test -bench` and stores the output to a file
diff --git a/.github/workflows/release-process.yml b/.github/workflows/release-process.yml
index 9a7eb9f6d..8ed2c154a 100644
--- a/.github/workflows/release-process.yml
+++ b/.github/workflows/release-process.yml
@@ -39,7 +39,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v5
         with:
-          go-version: 1.21.9
+          go-version: 1.21.11
 
       - name: Set up Cosign
         uses: sigstore/cosign-installer@v3.4.0
diff --git a/.github/workflows/test-gh.yml b/.github/workflows/test-gh.yml
index 71c612b86..af7345461 100644
--- a/.github/workflows/test-gh.yml
+++ b/.github/workflows/test-gh.yml
@@ -26,7 +26,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v5
       with:
-        go-version: 1.21.9
+        go-version: 1.21.11
     - name: Check out code
       uses: actions/checkout@v4.1.2
       with:
diff --git a/.github/workflows/test-kctrl-gh.yml b/.github/workflows/test-kctrl-gh.yml
index c2550bc48..04a7ab971 100644
--- a/.github/workflows/test-kctrl-gh.yml
+++ b/.github/workflows/test-kctrl-gh.yml
@@ -24,7 +24,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v5
       with:
-        go-version: 1.21.9
+        go-version: 1.21.11
     - name: Check out code
       uses: actions/checkout@v4.1.2
       with:
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 70aaab1cc..827e76092 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -70,7 +70,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v5
         with:
-          go-version: 1.21.9
+          go-version: 1.21.11
       - name: Build the kapp-controller artifacts
         run: |
           ./hack/install-deps.sh
diff --git a/.github/workflows/upgrade-testing.yml b/.github/workflows/upgrade-testing.yml
index a8a570013..f0574030e 100644
--- a/.github/workflows/upgrade-testing.yml
+++ b/.github/workflows/upgrade-testing.yml
@@ -26,7 +26,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v5
         with:
-          go-version: 1.21.9
+          go-version: 1.21.11
       - name: Check out code
         uses: actions/checkout@v4.1.2
       - name: Install Carvel Tools
diff --git a/Dockerfile b/Dockerfile
index 448d9af66..7f5c85497 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM golang:1.21.9 AS deps
+FROM --platform=$BUILDPLATFORM golang:1.21.11 AS deps
 
 ARG TARGETOS TARGETARCH KCTRL_VER=development
 WORKDIR /workspace
diff --git a/hack/dependencies.yml b/hack/dependencies.yml
index 044e45fce..dc3ee31d6 100644
--- a/hack/dependencies.yml
+++ b/hack/dependencies.yml
@@ -1,87 +1,87 @@
 - checksums:
     darwin:
-      amd64: 71b5ea38bfc7a9748c35ce0735fd6f806dce46bd5c9039d527050c7682e62a70
-      arm64: 0658db4af8263ca091ca31e4b599cb40c324b75934660a4c0ed98ad9b701f7e9
+      amd64: d79f0b4189403c4142f5c646989de0769a316896a6096dfd1719605d313e8d1e
+      arm64: f3ce72031d34f0a3d909b1c971017bb3788bb786d3bb5cba1bf6d699255be643
     linux:
-      amd64: 357ec754446b1eda29dd529e088f617e85809726c686598ab03cfc1c79f43b56
-      arm64: a2d195b058884c0e36a918936076965b8efb426f7e00f6b7d7b99b82737c7299
+      amd64: 61dec6e00131f990db853afc4b7531c318bd3af3ba18f2cfdbc0d5e83a45c445
+      arm64: f38290c2666ddcf6feb4907f91033c4f41022b3fb84893c42d1f48948597b82a
   dev: true
   name: ytt
   repo: vmware-tanzu/carvel-ytt
   urlTemplate: https://github.com/vmware-tanzu/carvel-{{.Name}}/releases/download/{{.Version}}/{{.Name}}-{{.OS}}-{{.Arch}}
-  version: v0.49.0
+  version: v0.50.0
 - checksums:
     darwin:
-      amd64: cfdfc5198b746b564ec81486e5d8e6aa944a7c326adf502091dbd75e5f5b4898
-      arm64: 0ef6dffa72656ff5e964306ab4833335be432e768916b9da12c08769dd1919c2
+      amd64: 2912583db28bc0caa88549ce142c6f30731e0580cd141e646673f4b733f52996
+      arm64: 31086a41bcfd012a7b9e2e7fac6f6615f8d8b633e00104c97ca7235b242915d2
     linux:
-      amd64: 119e7d11e66e512896ce42aba9cc7f783388da3cbb258b793e7419a3167af2a9
-      arm64: 562002e56ba13f6b148b2674b3ddd94b64dd53b73190fc1e84904232f5151627
+      amd64: 2b1550a7293963fec0a4d2b6fdbfa9fc24af4a43035d18ba8e6f9b4c67662ad0
+      arm64: 3a85316703a6c22d2d4d286a09993cd8d9c4955ca9e863f8fd7096a596070840
   dev: true
   name: kbld
   repo: vmware-tanzu/carvel-kbld
   urlTemplate: https://github.com/vmware-tanzu/carvel-{{.Name}}/releases/download/{{.Version}}/{{.Name}}-{{.OS}}-{{.Arch}}
-  version: v0.43.0
+  version: v0.44.0
 - checksums:
     darwin:
-      amd64: b4b980d4bc97508bec2416bc50888f55c7e4d96ada71a072003d2eee571db995
-      arm64: 88d6ed91f87571e892b60fc57b2e3526cb49db0c22531da392cd380c6b4a8ede
+      amd64: 65084088d51fa0a43a31c71da175e8158844f776e2d2731f89cc51787823ed2d
+      arm64: 7b747f0107481b3b9faf8d2cac29126fb1a2aeb028cf33a551c67d8e7a6f075f
     linux:
-      amd64: 6eb24733364213967c434ca77a7b3516f80c962e1da1ba57ce4c495556cf1585
-      arm64: 10e2e0b165202ae355501516f0b34de066523a384970f8423d8295ca79c16133
+      amd64: d760b51d8e9e3f5d0847e84fad05a51d1415fcfe309e10f885edd51d3e8c1301
+      arm64: f499fa48f42509e8e4e492c5f68126205319529e34b98249adbfb082a31b37db
   dev: true
   name: kapp
   repo: vmware-tanzu/carvel-kapp
   urlTemplate: https://github.com/vmware-tanzu/carvel-{{.Name}}/releases/download/{{.Version}}/{{.Name}}-{{.OS}}-{{.Arch}}
-  version: v0.62.0
+  version: v0.63.2
 - checksums:
     darwin:
-      amd64: 3941cf7b7ba1219d574b93ce1bd8b77928ad9ff9cdf8e2debf3ae11ae695792f
-      arm64: 34974c9a6a6e32eb21adac47ce72df6340d36886b5ebe8b5937444a0d7ecc529
+      amd64: 295714208c95c4a3602fc2308d098a7540a2b71fdc1e104f95b3816fa073852c
+      arm64: f9df00c3d35cf9d15767ea9b18a668ee9627eebefe0b6d4e1e4b648d5c992ceb
     linux:
-      amd64: d7c602d8882085be78cd02a575a6c3b437bb2fa1ff1067712f593d8cf05c94fa
-      arm64: 43e98922103ef30995a11bd4491b138b635c9b7bf17f98475fb5a06c87392e1d
+      amd64: 3b1094bf45a9ff5c2915a986f4d7cee8480c3cab31c060445f851c48f397ee31
+      arm64: f1456d6cbf11299eece2e87563caabe24309302c327c5e42a357ebeaba057a05
   dev: true
   name: vendir
   repo: carvel-dev/vendir
   urlTemplate: https://github.com/carvel-dev/{{.Name}}/releases/download/{{.Version}}/{{.Name}}-{{.OS}}-{{.Arch}}
-  version: v0.40.1
+  version: v0.41.0
 - checksums:
     linux:
-      amd64: a5844ef2c38ef6ddf3b5a8f7d91e7e0e8ebc39a38bb3fc8013d629c1ef29c259
-      arm64: 113ccc53b7c57c2aba0cd0aa560b5500841b18b5210d78641acfddc53dac8ab2
+      amd64: ad871aecb0c9fd96aa6702f6b79e87556c8998c2e714a4959bf71ee31282ac9c
+      arm64: bd57697305ba46fef3299b50168a34faa777dd2cf5b43b50df92cca7ed118cce
   dev: false
   name: helm
   repo: helm/helm
   tarballSubpath: '{{.OS}}-{{.Arch}}/helm'
   urlTemplate: https://get.helm.sh/helm-{{.Version}}-{{.OS}}-{{.Arch}}.tar.gz
-  version: v3.14.4
+  version: v3.15.3
 - checksums:
     linux:
-      amd64: d6bf07fb61972127c9e0d622523124c2d81caf9f7971fb123228961021811697
-      arm64: 15b8e90ca80dc23125cd2925731035fdef20c749ba259df477d1dd103a06d621
+      amd64: 0d65660fbe785647ff4f1764d7f69edf598f79d6d79ebbef4a501909b6ff6b82
+      arm64: 596f26de6d4f7d1cc44f9e27bfea3192ef77f810f31f3f4132a417860ab91ebc
   dev: false
   name: sops
   repo: mozilla/sops
   urlTemplate: https://github.com/mozilla/sops/releases/download/{{.Version}}/sops-{{.Version}}.{{.OS}}.{{.Arch}}
-  version: v3.8.1
+  version: v3.9.0
 - checksums:
     linux:
-      amd64: cf16cbb108fc56e2064b00ba2b65d9fb1b8d7002ca5e38260ee1cc34f6aaa8f9
-      arm64: f0dbf4364f5ba44e37ad85af9fdd3716bd410018ce344d317b174d206b03e6fc
+      amd64: 2ae71cb3ea761118937a944083f057cfd42f0ef11d197ce72fc2b8780d50c4ef
+      arm64: d25a81f3ac011884009d18362eeb8154ce1bca4d151834c35c718654bd6c6353
   dev: false
   name: age
   repo: FiloSottile/age
   tarballSubpath: age/age
   urlTemplate: https://github.com/FiloSottile/age/releases/download/{{.Version}}/age-{{.Version}}-{{.OS}}-{{.Arch}}.tar.gz
-  version: v1.1.1
+  version: v1.2.0
 - checksums:
     linux:
-      amd64: ff9349f3302a59b99fb84ad4c26f410296176b955c28bc902911eb21fd4de992
-      arm64: 91161d94482152960f574f93bf2b2999eafd78bb841d3e084f2074c2877b9a5c
+      amd64: 67c88f6c3bdf884301794c3ec91f9e6e3f660e7de3b7e10cd29fbbd291baac50
+      arm64: 3b90c49faaf3367338bd95db0bf76ec86bf4ca7d175d42a221e27bdc8d265256
   dev: false
   name: cue
   repo: cue-lang/cue
   tarballSubpath: cue
   urlTemplate: https://github.com/cue-lang/cue/releases/download/{{.Version}}/cue_{{.Version}}_{{.OS}}_{{.Arch}}.tar.gz
-  version: v0.8.1
+  version: v0.9.2