diff --git a/.github/workflows/build-and-push-image.yml b/.github/workflows/build-and-push-image.yml
index acb32177..7dcf1530 100644
--- a/.github/workflows/build-and-push-image.yml
+++ b/.github/workflows/build-and-push-image.yml
@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
diff --git a/.github/workflows/make-check.yml b/.github/workflows/make-check.yml
index 56a72fca..468fdc89 100644
--- a/.github/workflows/make-check.yml
+++ b/.github/workflows/make-check.yml
@@ -18,9 +18,9 @@ jobs:
           - '1.20'
     steps:
       - name: Check out repository code
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
       - name: Set up Go
-        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+        uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
           go-version: ${{ matrix.go }}
       - name: Run lint checks
diff --git a/oci/Containerfile b/oci/Containerfile
index edc98f02..52a57b0b 100644
--- a/oci/Containerfile
+++ b/oci/Containerfile
@@ -12,7 +12,7 @@ RUN make build \
     && curl -LO ${PULUMI_URL} \
     && tar -xzvf pulumi-${PULUMI_VERSION}-linux-x64.tar.gz
 
-FROM quay.io/centos/centos:stream9@sha256:3b68f482785306a9aa02726ed7f256cea6bd681162ca5996090e2f797fceaabb
+FROM quay.io/centos/centos:stream9@sha256:dfc7bf605a627d555f10b01b1198c424a437a5e0ac02b25ba3e59376e29e2ada
 
 LABEL MAINTAINER "CRC <devtools-cdk@redhat.com>"
 
@@ -28,7 +28,7 @@ USER root
 ARG PULUMI_COMMAND_VERSION=v0.9.2
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-tls
-ARG PULUMI_TLS_VERSION=v5.0.1
+ARG PULUMI_TLS_VERSION=v5.0.3
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-random
 ARG PULUMI_RANDOM_VERSION=v4.15.1
@@ -43,7 +43,7 @@ ARG PULUMI_GCP_VERSION=v7.11.0
 ARG PULUMI_AZURE_NATIVE_VERSION=v2.30.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-openstack
-ARG PULUMI_OPENSTACK_VERSION=v3.15.1
+ARG PULUMI_OPENSTACK_VERSION=v3.15.2
 
 RUN dnf install -y python3 python3-pip zstd qemu-img && \
     pip install -r requirements.txt && \
diff --git a/requirements.txt b/requirements.txt
index 0e15c8b9..83b7b8de 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,2 @@
-awscli==1.32.49
+awscli==1.32.98
 gcloud==0.18.3