diff --git a/.ko.yaml b/.ko.yaml
index 4e0402839..3076434e3 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1,7 +1,7 @@
 ---
 defaultBaseImage: gcr.io/distroless/static-debian12:nonroot
 baseImageOverrides:
-  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.7.0-alpine
+  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.7.1-alpine
 
 builds:
   - id: ctlog-createctconfig
diff --git a/Dockerfile.deps b/Dockerfile.deps
index abc225118..c297a81c3 100644
--- a/Dockerfile.deps
+++ b/Dockerfile.deps
@@ -1,4 +1,4 @@
 # This Dockerfile simply serves as a trigger for dependabot to notify when a new upstream release of a component is available
+# If dependabot proposes an update to the container listed below, you should also update the value listed in '.ko.yaml' and cut a new release of scaffolding
 FROM gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.7.1-alpine as cloud-sql-proxy
-# update references in '.ko.yaml'
 ENV FOO=BAR