diff --git a/Dockerfile b/Dockerfile
index 8821316..cf93ef3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,7 +8,7 @@ FROM alpine:3.18.4
 # renovate: datasource=github-tags depName=twistedpair/google-cloud-sdk
 ARG CLOUD_SDK_VERSION=455.0.0
 # renovate: datasource=github-releases depName=docker/buildx
-ARG BUILDX_VERSION=v0.12.0
+ARG BUILDX_VERSION=v0.12.1
 
 # janky janky janky
 ENV PATH /google-cloud-sdk/bin:$PATH
diff --git a/Dockerfile.actions-runner-ubuntu-22.04 b/Dockerfile.actions-runner-ubuntu-22.04
index ec4a3ab..36fc50b 100644
--- a/Dockerfile.actions-runner-ubuntu-22.04
+++ b/Dockerfile.actions-runner-ubuntu-22.04
@@ -1,6 +1,6 @@
 FROM summerwind/actions-runner-dind:ubuntu-22.04
 # renovate: datasource=github-releases depName=google/go-containerregistry
-ARG CRANE_VERSION=v0.16.1
+ARG CRANE_VERSION=v0.17.0
 # renovate: datasource=github-releases depName=mikefarah/yq
 ARG YQ_VERSION=v4.40.5
 USER root
diff --git a/hack/scripts/setup-buildx-amd64-arm64 b/hack/scripts/setup-buildx-amd64-arm64
index b1228ec..b6635b8 100755
--- a/hack/scripts/setup-buildx-amd64-arm64
+++ b/hack/scripts/setup-buildx-amd64-arm64
@@ -3,7 +3,7 @@
 set -eou pipefail
 
 # renovate: datasource=github-releases depName=moby/buildkit
-BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.12.3"
+BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.12.4"
 
 docker buildx create --driver docker-container --platform linux/amd64 --name xbuild --use --driver-opt image=${BUILDKIT_IMAGE} --config /usr/local/bin/buildkit.toml
 docker buildx create --append --name xbuild --platform linux/arm64 tcp://docker-arm64.ci.svc:2376 --driver-opt image=${BUILDKIT_IMAGE} --config /usr/local/bin/buildkit.toml
diff --git a/hack/scripts/setup-ci b/hack/scripts/setup-ci
index 7aef496..057206a 100755
--- a/hack/scripts/setup-ci
+++ b/hack/scripts/setup-ci
@@ -5,7 +5,7 @@ set -ex
 export TAG=$(git log --oneline --format=%B -n 1 HEAD | head -n 1 | sed -r "/^release\(/ s/^release\((.*)\):.*$/\\1/; t; Q")
 
 # renovate: datasource=github-releases depName=moby/buildkit
-BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.12.3"
+BUILDKIT_IMAGE="docker.io/moby/buildkit:v0.12.4"
 
 # setup buildkit across amd64/arm64 workers
 function setup_buildkit() {