diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 3df528f9..fe06f16f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -33,7 +33,7 @@ jobs:
       labels: ${{ steps.retrieve-pr-labels.outputs.result }}
     services:
       buildkitd:
-        image: moby/buildkit:v0.17.2
+        image: moby/buildkit:v0.18.1
         options: --privileged
         ports:
           - 1234:1234
@@ -143,7 +143,7 @@ jobs:
       - default
     services:
       buildkitd:
-        image: moby/buildkit:v0.17.2
+        image: moby/buildkit:v0.18.1
         options: --privileged
         ports:
           - 1234:1234
diff --git a/.github/workflows/weekly.yaml b/.github/workflows/weekly.yaml
index 1b52fbc4..f93dc3c9 100644
--- a/.github/workflows/weekly.yaml
+++ b/.github/workflows/weekly.yaml
@@ -16,7 +16,7 @@ jobs:
       - pkgs
     services:
       buildkitd:
-        image: moby/buildkit:v0.17.2
+        image: moby/buildkit:v0.18.1
         options: --privileged
         ports:
           - 1234:1234
diff --git a/misc/glibc/vars.yaml b/misc/glibc/vars.yaml
index 0cf804e9..8a942a4c 100644
--- a/misc/glibc/vars.yaml
+++ b/misc/glibc/vars.yaml
@@ -1,4 +1,4 @@
 # renovate: datasource=docker versioning=docker depName=cgr.dev/chainguard/wolfi-base
-WOLFI_BASE_REF: sha256:8dd9ceace8b1574e550374e9c07c2baafa60cc96223c1314fac61bd2edb48c70
+WOLFI_BASE_REF: sha256:a9547b680d3d322b14c2e46963b04d7afe71d927a3fa701a839559041989debe
 
 VERSION: {{ .GLIBC_VERSION }}
diff --git a/nvidia-gpu/vars.yaml b/nvidia-gpu/vars.yaml
index 137de369..d7707bb1 100644
--- a/nvidia-gpu/vars.yaml
+++ b/nvidia-gpu/vars.yaml
@@ -10,7 +10,7 @@ CONTAINER_TOOLKIT_REF: fa66e4cd562804509055e44a88f666673e6d27c0
 LIBNVIDIA_CONTAINER_VERSION: v1.17.2
 LIBNVIDIA_CONTAINER_REF: 63d366ee3b4183513c310ac557bf31b05b83328f
 # renovate: datasource=docker versioning=docker depName=cgr.dev/chainguard/wolfi-base
-WOLFI_BASE_REF: sha256:8dd9ceace8b1574e550374e9c07c2baafa60cc96223c1314fac61bd2edb48c70
+WOLFI_BASE_REF: sha256:a9547b680d3d322b14c2e46963b04d7afe71d927a3fa701a839559041989debe
 # renovate: datasource=github-tags extractVersion=^v(?<version>.*)$ depName=seccomp/libseccomp
 LIBSECCOMP_VERSION: 2.5.5
 # renovate: datasource=git-tags extractVersion=^libcap-(?<version>.*)$ depName=git://git.kernel.org/pub/scm/libs/libcap/libcap.git