diff --git a/.github/workflows/pr_aqua_update_checksum.yaml b/.github/workflows/pr_aqua_update_checksum.yaml
index 3a4b4c54..0df0e290 100644
--- a/.github/workflows/pr_aqua_update_checksum.yaml
+++ b/.github/workflows/pr_aqua_update_checksum.yaml
@@ -11,7 +11,7 @@ jobs:
     permissions:
       contents: read
     with:
-      aqua_version: v2.37.2 # renovate: depName=aquaproj/aqua
+      aqua_version: v2.38.0 # renovate: depName=aquaproj/aqua
       prune: true
     secrets:
       gh_app_id: ${{secrets.APP_ID}}
diff --git a/aqua/aqua.yaml b/aqua/aqua.yaml
index 7ff6fc35..a02a18e5 100644
--- a/aqua/aqua.yaml
+++ b/aqua/aqua.yaml
@@ -7,7 +7,7 @@ checksum: # https://aquaproj.github.io/docs/reference/checksum/
   supported_envs:
     - linux
 registries:
-  - ref: v4.254.0 # renovate: depName=aquaproj/aqua-registry
+  - ref: v4.257.0 # renovate: depName=aquaproj/aqua-registry
     type: standard
   - name: dots
     path: aqua-registry.yaml
@@ -22,7 +22,7 @@ packages:
   - name: marcosnils/bin@v0.19.0
   - name: tofuutils/tenv@v3.2.10
   - name: twpayne/chezmoi@v2.54.0
-  - name: zellij-org/zellij@v0.41.1
+  - name: zellij-org/zellij@v0.41.2
   - name: weaveworks/eksctl@v0.194.0
   - name: keilerkonzept/terraform-module-versions@3.1.14
   - name: magefile/mage@v1.15.0
@@ -48,7 +48,7 @@ packages:
   - name: junegunn/fzf@v0.56.3
   - name: hadolint/hadolint@v2.12.0
   - name: jesseduffield/lazygit@v0.44.1
-  - name: derailed/k9s@v0.32.6
+  - name: derailed/k9s@v0.32.7
   - name: awslabs/amazon-ecr-credential-helper@v0.9.0
   - name: 99designs/aws-vault@v7.2.0
   - name: koalaman/shellcheck@v0.10.0
@@ -57,8 +57,8 @@ packages:
   - name: instrumenta/kubeval@v0.16.1
   - name: kubernetes/minikube@v1.34.0
   - name: GoogleContainerTools/skaffold@v2.13.2
-  - name: smallstep/certificates@v0.28.0
-  - name: smallstep/cli@v0.28.0
+  - name: smallstep/certificates@v0.28.1
+  - name: smallstep/cli@v0.28.2
   - name: terraform-linters/tflint@v0.54.0
   - name: dwisiswant0/tlder@v0.1.1
   - name: itchyny/json2yaml@v0.1.4
@@ -66,9 +66,9 @@ packages:
   - name: mikefarah/yq@v4.44.5
   - name: sigstore/cosign@v2.4.1
   - name: nektos/act@v0.2.69
-  - name: casey/just@1.36.0
+  - name: casey/just@1.37.0
   - name: tomnomnom/gron@v0.7.1
-  - name: kevincobain2000/gobrew@v1.10.11
+  - name: kevincobain2000/gobrew@v1.10.12
   - name: antonmedv/fx@35.0.0
   - name: wagoodman/dive@v0.12.0
   - name: dkaslovsky/nav@v1.1.0
@@ -80,14 +80,14 @@ packages:
   - name: PaulJuliusMartinez/jless@v0.9.0
   - name: konradsz/igrep@v1.3.0
   - name: rhysd/hgrep@v0.3.7
-  - name: eza-community/eza@v0.20.8
+  - name: eza-community/eza@v0.20.9
   - name: kisielk/errcheck@v1.8.0
     registry: dots
   - name: mvdan/sh@v3.10.0
-  - name: cue-lang/cue@v0.10.1
+  - name: cue-lang/cue@v0.11.0
   - name: dprint/dprint@0.47.5
   - name: hashicorp/packer@v1.11.2
-  - name: snyk/cli@v1.1294.0
+  - name: snyk/cli@v1.1294.1
   - name: aquasecurity/tfsec@v1.28.11
   - name: int128/ghcp@v1.13.5
   - name: dagger/dagger@v0.14.0
@@ -102,5 +102,5 @@ packages:
   - name: withgraphite/gt
     version: v1.4.8 # renovate: depName=withgraphite/homebrew-tap
     registry: dots
-  - name: fastfetch-cli/fastfetch@2.29.0
+  - name: fastfetch-cli/fastfetch@2.30.1
   - name: bloznelis/typioca@3.1.0
diff --git a/home/.chezmoiscripts/run_once_after_10_aqua.sh.tmpl b/home/.chezmoiscripts/run_once_after_10_aqua.sh.tmpl
index ad11c7b3..27948dc0 100644
--- a/home/.chezmoiscripts/run_once_after_10_aqua.sh.tmpl
+++ b/home/.chezmoiscripts/run_once_after_10_aqua.sh.tmpl
@@ -16,7 +16,7 @@ cyan='\033[0;36m'
 clear='\033[0m'
 
 # renovate: datasource=github-releases depName=aquaproj/aqua
-_aqua_latest_version=v2.37.2
+_aqua_latest_version=v2.38.0
 
 # renovate: datasource=github-releases depName=aquaproj/aqua-installer
 _aqua_installer_version=v3.0.1