diff --git a/.github/workflows/buf.yaml b/.github/workflows/buf.yaml
index c070080b7..edd10dc7f 100644
--- a/.github/workflows/buf.yaml
+++ b/.github/workflows/buf.yaml
@@ -14,7 +14,7 @@ env:
   # renovate: datasource=docker depName=golang versioning=docker
   GO_VERSION: '1.23'
   # renovate: datasource=github-releases depName=bufbuild/buf
-  BUF_CLI_VERSION: '1.48.0'
+  BUF_CLI_VERSION: '1.50.0'
   # renovate: datasource=github-releases depName=favadi/protoc-go-inject-tag
   PROTOC_GO_INJECT_TAG_VERSION: '1.4.0'
 
diff --git a/.github/workflows/fly-deploy.yaml b/.github/workflows/fly-deploy.yaml
index c0e974f2c..e90478f42 100644
--- a/.github/workflows/fly-deploy.yaml
+++ b/.github/workflows/fly-deploy.yaml
@@ -5,7 +5,7 @@ name: 'Deploy to Fly'
 
 env:
   # renovate: datasource=github-releases depName=superfly/flyctl versioning=semver
-  FLY_CLI_VERSION: '0.3.57'
+  FLY_CLI_VERSION: '0.3.71'
 
 on:
   workflow_call:
diff --git a/.github/workflows/migrations.yaml b/.github/workflows/migrations.yaml
index e6712c0b8..b69a31ad7 100644
--- a/.github/workflows/migrations.yaml
+++ b/.github/workflows/migrations.yaml
@@ -9,11 +9,11 @@ permissions:
 
 env:
   # renovate: datasource=github-releases depName=golang-migrate/migrate
-  MIGRATE_VERSION: '4.18.1'
+  MIGRATE_VERSION: '4.18.2'
   # renovate: datasource=github-releases depName=superfly/flyctl versioning=semver
-  FLY_CLI_VERSION: '0.3.57'
+  FLY_CLI_VERSION: '0.3.71'
   # renovate: datasource=github-releases depName=sqlc-dev/sqlc
-  SQLC_VERSION: '1.27.0'
+  SQLC_VERSION: '1.28.0'
 
 jobs:
   detect-changes:
diff --git a/.github/workflows/publish-bufs.yaml b/.github/workflows/publish-bufs.yaml
index 2b76fda09..87ad45a88 100644
--- a/.github/workflows/publish-bufs.yaml
+++ b/.github/workflows/publish-bufs.yaml
@@ -9,10 +9,10 @@ on:
 
 env:
   # renovate: datasource=github-releases depName=bufbuild/buf
-  BUF_CLI_VERSION: '1.48.0'
+  BUF_CLI_VERSION: '1.50.0'
   NODE_VERSION: '18.x'
   # renovate: datasource=dart-version depName=dart
-  DART_VERSION: '3.6.0'
+  DART_VERSION: '3.6.1'
 
 jobs:
   check-preconditions:
diff --git a/.github/workflows/spicedb.yaml b/.github/workflows/spicedb.yaml
index 4c9b17205..d680d1521 100644
--- a/.github/workflows/spicedb.yaml
+++ b/.github/workflows/spicedb.yaml
@@ -2,7 +2,7 @@ name: spicedb
 
 env:
   # renovate: datasource=github-releases depName=authzed/zed
-  ZED_VERSION: '0.23.0'
+  ZED_VERSION: '0.26.0'
 
 on:
   pull_request:
diff --git a/Dockerfile.standalone b/Dockerfile.standalone
index 4264ae330..876ffd967 100644
--- a/Dockerfile.standalone
+++ b/Dockerfile.standalone
@@ -47,7 +47,7 @@ FROM debian:12.8 AS deps
 # renovate: datasource=github-releases depName=DarthSim/hivemind
 ARG HIVEMIND_VERSION=1.1.0
 # renovate: datasource=github-releases depName=golang-migrate/migrate
-ARG MIGRATE_VERSION=4.18.1
+ARG MIGRATE_VERSION=4.18.2
 # renovate: datasource=github-releases depName=dapr/dapr
 ARG DAPR_VERSION=1.14.4
 
diff --git a/images/dev-go/Dockerfile b/images/dev-go/Dockerfile
index c85f15c48..648d9ac01 100644
--- a/images/dev-go/Dockerfile
+++ b/images/dev-go/Dockerfile
@@ -33,7 +33,7 @@ RUN curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add - \
 # install buf
 #  https://buf.build/
 # renovate: datasource=github-releases depName=bufbuild/buf
-ENV BUF_VERSION=1.48.0
+ENV BUF_VERSION=1.50.0
 RUN wget https://github.com/bufbuild/buf/releases/download/v${BUF_VERSION}/buf-Linux-x86_64 -O /usr/local/bin/buf \
     && chmod +x /usr/local/bin/buf
 
@@ -48,7 +48,7 @@ RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | d
 # install zed, CLI for SpiceDB
 #  https://github.com/authzed/zed
 # renovate: datasource=github-releases depName=authzed/zed
-ENV ZED_VERSION=0.23.0
+ENV ZED_VERSION=0.26.0
 RUN wget https://github.com/authzed/zed/releases/download/v${ZED_VERSION}/zed_${ZED_VERSION}_linux_amd64.deb -O zed.deb \
     && apt install -y ./zed.deb \
     && rm zed.deb
@@ -74,7 +74,7 @@ ENV HOME="/home/${UNAME}"
 # install air
 #  https://github.com/air-verse/air
 # renovate: datasource=github-releases depName=air-verse/air
-ENV AIR_VERSION=1.61.5
+ENV AIR_VERSION=1.61.7
 RUN curl -sSfL https://raw.githubusercontent.com/air-verse/air/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v${AIR_VERSION}
 
 # install dapr-cli
@@ -98,7 +98,7 @@ ENV PATH="$PATH:$HOME/.fly/bin"
 # install go-migrate
 #  https://github.com/golang-migrate/migrate
 # renovate: datasource=github-releases depName=golang-migrate/migrate
-ENV MIGRATE_VERSION=4.18.1
+ENV MIGRATE_VERSION=4.18.2
 RUN go install -tags 'postgres' github.com/golang-migrate/migrate/v4/cmd/migrate@v${MIGRATE_VERSION} \
 	&& go clean -modcache
 
@@ -112,7 +112,7 @@ RUN go install github.com/fullstorydev/grpcurl/cmd/grpcurl@v${GRPCURL_VERSION} \
 # install sqlc
 #  https://sqlc.dev/
 # renovate: datasource=github-releases depName=sqlc-dev/sqlc
-ENV SQLC_VERSION=1.27.0
+ENV SQLC_VERSION=1.28.0
 RUN go install github.com/sqlc-dev/sqlc/cmd/sqlc@v${SQLC_VERSION}\
 	&& go clean -modcache