diff --git a/.github/workflows/build-and-push-image.yml b/.github/workflows/build-and-push-image.yml
index acb32177..7dcf1530 100644
--- a/.github/workflows/build-and-push-image.yml
+++ b/.github/workflows/build-and-push-image.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
diff --git a/.github/workflows/make-check.yml b/.github/workflows/make-check.yml
index 56a72fca..50a7baed 100644
--- a/.github/workflows/make-check.yml
+++ b/.github/workflows/make-check.yml
@@ -18,7 +18,7 @@ jobs:
           - '1.20'
     steps:
       - name: Check out repository code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       - name: Set up Go
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
diff --git a/oci/Containerfile b/oci/Containerfile
index edc98f02..6bf26cd5 100644
--- a/oci/Containerfile
+++ b/oci/Containerfile
@@ -12,7 +12,7 @@ RUN make build \
     && curl -LO ${PULUMI_URL} \
     && tar -xzvf pulumi-${PULUMI_VERSION}-linux-x64.tar.gz
 
-FROM quay.io/centos/centos:stream9@sha256:3b68f482785306a9aa02726ed7f256cea6bd681162ca5996090e2f797fceaabb
+FROM quay.io/centos/centos:stream9@sha256:9aff9c6de7b4eb3618a73f7b4fc203318d512538d7b7f25966c855d46225bd23
 
 LABEL MAINTAINER "CRC <devtools-cdk@redhat.com>"
 
@@ -28,7 +28,7 @@ USER root
 ARG PULUMI_COMMAND_VERSION=v0.9.2
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-tls
-ARG PULUMI_TLS_VERSION=v5.0.1
+ARG PULUMI_TLS_VERSION=v5.0.2
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-random
 ARG PULUMI_RANDOM_VERSION=v4.15.1
@@ -43,7 +43,7 @@ ARG PULUMI_GCP_VERSION=v7.11.0
 ARG PULUMI_AZURE_NATIVE_VERSION=v2.30.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-openstack
-ARG PULUMI_OPENSTACK_VERSION=v3.15.1
+ARG PULUMI_OPENSTACK_VERSION=v3.15.2
 
 RUN dnf install -y python3 python3-pip zstd qemu-img && \
     pip install -r requirements.txt && \
diff --git a/requirements.txt b/requirements.txt
index 0e15c8b9..4cc7621f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,2 @@
-awscli==1.32.49
+awscli==1.32.94
 gcloud==0.18.3