diff --git a/.github/workflows/build-and-push-image.yml b/.github/workflows/build-and-push-image.yml
index acb32177..5b0b5d50 100644
--- a/.github/workflows/build-and-push-image.yml
+++ b/.github/workflows/build-and-push-image.yml
@@ -39,7 +39,7 @@ jobs:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Build and push Docker image (post merge)
-        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+        uses: docker/build-push-action@af5a7ed5ba88268d5278f7203fb52cd833f66d6e # v5.2.0
         with:
           context: .
           file: ./oci/Containerfile
diff --git a/oci/Containerfile b/oci/Containerfile
index 2fc16680..35f4baf9 100644
--- a/oci/Containerfile
+++ b/oci/Containerfile
@@ -5,7 +5,7 @@ WORKDIR /workspace
 COPY . .
 
 # renovate: datasource=github-releases depName=pulumi/pulumi
-ENV PULUMI_VERSION=v3.107.0
+ENV PULUMI_VERSION=v3.109.0
 ENV PULUMI_URL https://github.com/pulumi/pulumi/releases/download/${PULUMI_VERSION}/pulumi-${PULUMI_VERSION}-linux-x64.tar.gz
 
 RUN make build \
@@ -31,13 +31,13 @@ ARG PULUMI_COMMAND_VERSION=v0.9.2
 ARG PULUMI_TLS_VERSION=v5.0.1
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-random
-ARG PULUMI_RANDOM_VERSION=v4.15.1
+ARG PULUMI_RANDOM_VERSION=v4.16.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-aws
-ARG PULUMI_AWS_VERSION=v6.23.0
+ARG PULUMI_AWS_VERSION=v6.25.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-gcp
-ARG PULUMI_GCP_VERSION=v7.11.0
+ARG PULUMI_GCP_VERSION=v7.13.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-azure-native
 ARG PULUMI_AZURE_NATIVE_VERSION=v2.30.0