diff --git a/Dockerfile b/Dockerfile
index 7410ebf..4f25189 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG DOCKER=docker:27.0.2-dind
+ARG DOCKER=docker:27.0.3-dind
 
 FROM $DOCKER as docker
 
@@ -6,9 +6,9 @@ FROM alpine:3.20.1 as build-container-drone
 
 # https://github.com/twistedpair/google-cloud-sdk/ is a mirror that replicates the gcloud sdk versions
 # renovate: datasource=github-tags depName=twistedpair/google-cloud-sdk
-ARG CLOUD_SDK_VERSION=482.0.0
+ARG CLOUD_SDK_VERSION=484.0.0
 # renovate: datasource=github-releases depName=docker/buildx
-ARG BUILDX_VERSION=v0.15.1
+ARG BUILDX_VERSION=v0.16.0
 # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=hashicorp/terraform
 ARG TERRAFORM_VERSION=1.7.3
 
@@ -93,13 +93,13 @@ COPY --from=docker /usr/local/bin/docker /usr/local/bin/dockerd /usr/local/bin/
 
 FROM summerwind/actions-runner-dind:ubuntu-22.04 as build-container-ghaction
 # renovate: datasource=github-releases depName=google/go-containerregistry
-ARG CRANE_VERSION=v0.19.2
+ARG CRANE_VERSION=v0.20.1
 # renovate: datasource=github-releases depName=mikefarah/yq
 ARG YQ_VERSION=v4.44.2
 # renovate: datasource=github-releases depName=getsops/sops
 ARG SOPS_VERSION=v3.9.0
 # renovate: datasource=github-tags depName=aws/aws-cli
-ARG AWSCLI_VERSION=2.17.5
+ARG AWSCLI_VERSION=2.17.13
 USER root
 RUN apt update && \
 	apt upgrade -y && \
diff --git a/hack/scripts/setup-ci b/hack/scripts/setup-ci
index 4dec1e5..1ac9bc8 100755
--- a/hack/scripts/setup-ci
+++ b/hack/scripts/setup-ci
@@ -5,7 +5,7 @@ set -ex
 export TAG=$(git log --oneline --format=%B -n 1 HEAD | head -n 1 | sed -r "/^release\(/ s/^release\((.*)\):.*$/\\1/; t; Q")
 
 # renovate: datasource=github-releases depName=moby/buildkit
-BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.14.1"
+BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.15.0"
 
 # setup buildkit across amd64/arm64 workers
 function setup_buildkit() {