diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
index bb46620..782740e 100644
--- a/.github/workflows/cleanup.yml
+++ b/.github/workflows/cleanup.yml
@@ -48,7 +48,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
+      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
       - id: list
         run: |
diff --git a/buildargs.conf b/buildargs.conf
index 61efa2a..bc70425 100644
--- a/buildargs.conf
+++ b/buildargs.conf
@@ -25,7 +25,7 @@ DEBIAN_RELEASE=trixie
 BUN_VERSION=1.4.0
 
 # renovate: datasource=custom.anthropic-claude depName=claude
-CLAUDE_VERSION=2.1.227
+CLAUDE_VERSION=2.1.241
 
 # renovate: datasource=github-releases depName=go-delve/delve
 DELVE_VERSION=1.27.1
@@ -34,10 +34,10 @@ DELVE_VERSION=1.27.1
 FLUTTER_VERSION=3.38.1
 
 # renovate: datasource=github-releases depName=superfly/flyctl
-FLYCTL_VERSION=0.4.80
+FLYCTL_VERSION=0.4.87
 
 # renovate: datasource=github-releases depName=cli/cli
-GHCLI_VERSION=2.97.0
+GHCLI_VERSION=2.98.0
 
 # renovate: datasource=golang-version depName=golang
 GOLANG_VERSION=1.27.0
@@ -46,16 +46,16 @@ GOLANG_VERSION=1.27.0
 GOARCHLINT_VERSION=1.17.0
 
 # renovate: datasource=github-releases depName=golangci/golangci-lint
-GOLANGCILINT_VERSION=2.12.2
+GOLANGCILINT_VERSION=2.13.1
 
 # renovate: datasource=github-releases depName=gotestyourself/gotestsum
 GOTESTSUM_VERSION=1.13.0
 
 # renovate: datasource=github-releases depName=helm/helm
-HELM_VERSION=4.2.3
+HELM_VERSION=4.2.4
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
-KUBECTL_VERSION=1.36.3
+KUBECTL_VERSION=1.36.4
 
 # renovate: datasource=github-releases depName=kubernetes-sigs/kustomize extractVersion=^kustomize/v(?<version>.+)$
 KUSTOMIZE_VERSION=5.8.1
@@ -64,25 +64,25 @@ KUSTOMIZE_VERSION=5.8.1
 NGINX_VERSION=1.29
 
 # renovate: datasource=github-releases depName=anomalyco/opencode
-OPENCODE_VERSION=1.18.15
+OPENCODE_VERSION=1.18.21
 
 # renovate: datasource=npm depName=@earendil-works/pi-coding-agent
-PI_VERSION=0.84.1
+PI_VERSION=0.84.2
 
 # renovate: datasource=docker depName=python versioning=regex:^(?<major>\d+)\.(?<minor>\d+)$
 PYTHON_VERSION=3.14
 
 # renovate: datasource=github-releases depName=astral-sh/ruff
-RUFF_VERSION=0.16.2
+RUFF_VERSION=0.16.4
 
 # renovate: datasource=github-releases depName=astral-sh/uv
-UV_VERSION=0.12.3
+UV_VERSION=0.12.5
 
 # renovate: datasource=github-releases depName=apollographql/rover
 ROVER_VERSION=0.41.0
 
 # renovate: datasource=github-releases depName=go-task/task
-TASKFILE_VERSION=3.52.0
+TASKFILE_VERSION=3.53.1
 
 # renovate: datasource=github-releases depName=watchexec/watchexec
 WATCHEXEC_VERSION=2.5.1