diff --git a/Dockerfile b/Dockerfile
index 86dbfec..e7ed934 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -99,7 +99,7 @@ ARG YQ_VERSION=v4.44.3
 # renovate: datasource=github-releases depName=getsops/sops
 ARG SOPS_VERSION=v3.9.0
 # renovate: datasource=github-tags depName=aws/aws-cli
-ARG AWSCLI_VERSION=2.17.24
+ARG AWSCLI_VERSION=2.17.41
 USER root
 RUN apt update && \
 	apt upgrade -y && \
diff --git a/hack/scripts/setup-ci b/hack/scripts/setup-ci
index eff9983..20b4a70 100755
--- a/hack/scripts/setup-ci
+++ b/hack/scripts/setup-ci
@@ -5,7 +5,7 @@ set -ex
 export TAG=$(git log --oneline --format=%B -n 1 HEAD | head -n 1 | sed -r "/^release\(/ s/^release\((.*)\):.*$/\\1/; t; Q")
 
 # renovate: datasource=github-releases depName=moby/buildkit
-BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.15.1"
+BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.15.2"
 
 # setup buildkit across amd64/arm64 workers
 function setup_buildkit() {