diff --git a/docker/toolchain/Dockerfile b/docker/toolchain/Dockerfile
index 7a85cc49..d6a70efb 100644
--- a/docker/toolchain/Dockerfile
+++ b/docker/toolchain/Dockerfile
@@ -3,7 +3,7 @@ ARG BUILDKIT_SBOM_SCAN_CONTEXT=true
 ARG BUILDKIT_SBOM_SCAN_STAGE=upgraded-alpine,release-binary-fetcher,final
 
 # Alpine image with update and upgrade performed
-FROM alpine:3.18.3 as upgraded-alpine
+FROM alpine:3.18.4 as upgraded-alpine
 RUN set -ex \
     && apk update \
     && apk upgrade
diff --git a/docker/toolchain/versions.sh b/docker/toolchain/versions.sh
index 7998f40d..5fe954fd 100755
--- a/docker/toolchain/versions.sh
+++ b/docker/toolchain/versions.sh
@@ -2,13 +2,13 @@
 AGE_VERSION=v1.1.1
 
 # renovate: datasource=github-releases depName=cilium/cilium-cli
-CILIUM_CLI_VERSION=v0.15.7
+CILIUM_CLI_VERSION=v0.15.11
 
 # renovate: datasource=github-releases depName=cloudflare/cfssl
 CFSSL_TOOLKIT_VERSION=v1.6.4
 
 # renovate: datasource=github-releases depName=kubernetes-sigs/cluster-api
-CLUSTERCTL_VERSION=v1.5.1
+CLUSTERCTL_VERSION=v1.5.2
 
 # renovate: datasource=github-releases depName=kubernetes-sigs/cri-tools
 CRICTL_VERSION=v1.28.0
@@ -17,40 +17,40 @@ CRICTL_VERSION=v1.28.0
 CRITEST_VERSION=v1.28.0
 
 # renovate: datasource=github-releases depName=fluxcd/flux2
-FLUX_VERSION=v2.1.0
+FLUX_VERSION=v2.1.2
 
 # renovate: datasource=github-releases depName=cli/cli
-GITHUB_CLI_VERSION=v2.34.0
+GITHUB_CLI_VERSION=v2.37.0
 
 # renovate: datasource=github-releases depName=google/go-containerregistry
 GO_CONTAINER_REGISTRY_VERSION=v0.16.1
 
 # renovate: datasource=github-releases depName=helm/helm
-HELM_VERSION=v3.12.3
+HELM_VERSION=v3.13.1
 
 # renovate: datasource=github-releases depName=cilium/hubble
-HUBBLE_VERSION=v0.12.0
+HUBBLE_VERSION=v0.12.2
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
-KUBEADM_VERSION=v1.28.1
+KUBEADM_VERSION=v1.28.3
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
-KUBECTL_VERSION=v1.28.1
+KUBECTL_VERSION=v1.28.3
 
 # renovate: datasource=github-releases depName=mozilla/sops
-SOPS_VERSION=v3.7.3
+SOPS_VERSION=v3.8.1
 
 # renovate: datasource=github-releases depName=siderolabs/talos
-TALOSCTL_VERSION=v1.5.2
+TALOSCTL_VERSION=v1.5.4
 
 # renovate: datasource=github-releases depName=go-task/task
-TASK_VERSION=v3.29.1
+TASK_VERSION=v3.31.0
 
 # renovate: datasource=github-releases depName=hashicorp/terraform
-TERRAFORM_VERSION=v1.5.7
+TERRAFORM_VERSION=v1.6.2
 
 # renovate: datasource=github-releases depName=cilium/tetragon
 TETRAGON_VERSION=v0.11.0
 
 # renovate: datasource=github-releases depName=mikefarah/yq
-YQ_VERSION=v4.35.1
+YQ_VERSION=v4.35.2