diff --git a/sealed-secrets/BRANCH b/sealed-secrets/BRANCH
index caa4836d8..e34629406 100644
--- a/sealed-secrets/BRANCH
+++ b/sealed-secrets/BRANCH
@@ -1 +1 @@
-0.19
+0.22
diff --git a/sealed-secrets/Dockerfile b/sealed-secrets/Dockerfile
index 6152b03c5..cbac767b2 100644
--- a/sealed-secrets/Dockerfile
+++ b/sealed-secrets/Dockerfile
@@ -1,7 +1,7 @@
 # Build stage
-FROM quay.io/cybozu/golang:1.19-focal AS build
+FROM quay.io/cybozu/golang:1.21-jammy AS build
 
-ARG SEALED_SECRETS_VERSION=0.19.5
+ARG SEALED_SECRETS_VERSION=0.22.0
 
 RUN curl -sLf -o sealed-secrets.tar.gz https://github.com/bitnami-labs/sealed-secrets/archive/v${SEALED_SECRETS_VERSION}.tar.gz \
     && tar --strip-components=1 -xzf sealed-secrets.tar.gz \
diff --git a/sealed-secrets/TAG b/sealed-secrets/TAG
index cd288251f..7fa048e44 100644
--- a/sealed-secrets/TAG
+++ b/sealed-secrets/TAG
@@ -1 +1 @@
-0.19.5.1
+0.22.0.1
diff --git a/serf/Dockerfile b/serf/Dockerfile
index 5d3d39cf8..a193ce1d6 100644
--- a/serf/Dockerfile
+++ b/serf/Dockerfile
@@ -1,7 +1,7 @@
 # serf container
 
 # Stage1: build from source
-FROM quay.io/cybozu/golang:1.19-focal AS build
+FROM quay.io/cybozu/golang:1.21-jammy AS build
 
 ARG SERF_VERSION=0.10.1
 
@@ -15,7 +15,7 @@ WORKDIR /go/src/github.com/hashicorp/serf
 RUN go install -ldflags="-w -s" ./...
 
 # Stage2: setup runtime container
-FROM quay.io/cybozu/ubuntu:20.04
+FROM quay.io/cybozu/ubuntu:22.04
 
 RUN apt-get update \
   && apt-get -y install --no-install-recommends \
diff --git a/serf/TAG b/serf/TAG
index 3cb4733e1..df6e8d025 100644
--- a/serf/TAG
+++ b/serf/TAG
@@ -1 +1 @@
-0.10.1.2
+0.10.1.3