diff --git a/docker/toolchain/versions.sh b/docker/toolchain/versions.sh
index 7998f40d..e4225588 100755
--- a/docker/toolchain/versions.sh
+++ b/docker/toolchain/versions.sh
@@ -2,13 +2,13 @@
 AGE_VERSION=v1.1.1
 
 # renovate: datasource=github-releases depName=cilium/cilium-cli
-CILIUM_CLI_VERSION=v0.15.7
+CILIUM_CLI_VERSION=v0.15.8
 
 # renovate: datasource=github-releases depName=cloudflare/cfssl
 CFSSL_TOOLKIT_VERSION=v1.6.4
 
 # renovate: datasource=github-releases depName=kubernetes-sigs/cluster-api
-CLUSTERCTL_VERSION=v1.5.1
+CLUSTERCTL_VERSION=v1.5.2
 
 # renovate: datasource=github-releases depName=kubernetes-sigs/cri-tools
 CRICTL_VERSION=v1.28.0
@@ -17,10 +17,10 @@ CRICTL_VERSION=v1.28.0
 CRITEST_VERSION=v1.28.0
 
 # renovate: datasource=github-releases depName=fluxcd/flux2
-FLUX_VERSION=v2.1.0
+FLUX_VERSION=v2.1.1
 
 # renovate: datasource=github-releases depName=cli/cli
-GITHUB_CLI_VERSION=v2.34.0
+GITHUB_CLI_VERSION=v2.35.0
 
 # renovate: datasource=github-releases depName=google/go-containerregistry
 GO_CONTAINER_REGISTRY_VERSION=v0.16.1
@@ -32,19 +32,19 @@ HELM_VERSION=v3.12.3
 HUBBLE_VERSION=v0.12.0
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
-KUBEADM_VERSION=v1.28.1
+KUBEADM_VERSION=v1.28.2
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
-KUBECTL_VERSION=v1.28.1
+KUBECTL_VERSION=v1.28.2
 
 # renovate: datasource=github-releases depName=mozilla/sops
-SOPS_VERSION=v3.7.3
+SOPS_VERSION=v3.8.0
 
 # renovate: datasource=github-releases depName=siderolabs/talos
-TALOSCTL_VERSION=v1.5.2
+TALOSCTL_VERSION=v1.5.3
 
 # renovate: datasource=github-releases depName=go-task/task
-TASK_VERSION=v3.29.1
+TASK_VERSION=v3.30.1
 
 # renovate: datasource=github-releases depName=hashicorp/terraform
 TERRAFORM_VERSION=v1.5.7
@@ -53,4 +53,4 @@ TERRAFORM_VERSION=v1.5.7
 TETRAGON_VERSION=v0.11.0
 
 # renovate: datasource=github-releases depName=mikefarah/yq
-YQ_VERSION=v4.35.1
+YQ_VERSION=v4.35.2