diff --git a/docker-kubectl-helm/Dockerfile b/docker-kubectl-helm/Dockerfile
index 6eb992c5b..797d83932 100644
--- a/docker-kubectl-helm/Dockerfile
+++ b/docker-kubectl-helm/Dockerfile
@@ -17,7 +17,7 @@ RUN apk add --update --no-cache ca-certificates wget \
     && mv linux-amd64/helm /usr/bin/helm \
     && rm -Rf helm-${HELM_LATEST_VERSION}-linux-amd64.tar.gz linux-amd64
 
-FROM golang:1.25-alpine3.22 AS build
+FROM golang:1.26-alpine3.22 AS build
 
 FROM docker:dind as docker-kubectl-helm
 
diff --git a/go-build-1.21/Dockerfile b/go-build-1.21/Dockerfile
index 0e3eebcae..d0b8d4cca 100644
--- a/go-build-1.21/Dockerfile
+++ b/go-build-1.21/Dockerfile
@@ -1,18 +1,18 @@
 FROM hairyhenderson/gomplate:v3.11.7-slim AS gomplate
-FROM docker:29.0.4 AS docker
+FROM docker:29.9.0 AS docker
 FROM docker/compose:1.29.2 AS compose
 FROM vault:1.13.3 AS vault
-FROM hashicorp/terraform:1.14.0 AS terraform
-FROM hashicorp/packer:1.14.3 AS packer
-FROM prom/prometheus:v3.7.3 AS prometheus
-FROM prom/alertmanager:v0.29.0 AS alertmanager
-FROM mikefarah/yq:4.49.2 AS yq
+FROM hashicorp/terraform:1.16.5 AS terraform
+FROM hashicorp/packer:1.16.1 AS packer
+FROM prom/prometheus:v3.15.0 AS prometheus
+FROM prom/alertmanager:v0.34.1 AS alertmanager
+FROM mikefarah/yq:4.54.1 AS yq
 FROM lachlanevenson/k8s-kubectl:v1.25.4 AS kubectl
 FROM lachlanevenson/k8s-helm:v3.10.2 AS helm2
 FROM lachlanevenson/k8s-helm:v3.10.2 AS helm
-FROM golangci/golangci-lint:v2.6.2-alpine AS golangci-lint
+FROM golangci/golangci-lint:v2.14.0-alpine AS golangci-lint
 
-FROM alpine:3.22 AS packages
+FROM alpine:3.24 AS packages
 
 RUN apk add --no-cache \
     zip \
@@ -64,7 +64,7 @@ RUN wget https://github.com/sgerrand/alpine-pkg-glibc/releases/download/$GLIBC/g
   && ln -s /lib/libc.musl-x86_64.so.1 /usr/glibc-compat/lib \
   && ln -s /usr/lib/libgcc_s.so.1 /usr/glibc-compat/lib
 
-FROM golang:1.25.4-alpine AS build
+FROM golang:1.27.2-alpine AS build
 
 COPY --from=gomplate /gomplate /bin/gomplate
 COPY --from=docker /usr/local/bin/docker /bin/docker
diff --git a/go-build-1.21/awscli-requirements.txt b/go-build-1.21/awscli-requirements.txt
index b1781e253..6ccf302bb 100644
--- a/go-build-1.21/awscli-requirements.txt
+++ b/go-build-1.21/awscli-requirements.txt
@@ -1,13 +1,13 @@
 awscli==1.43.4
-botocore==1.41.4
+botocore==1.43.111
 colorama==0.4.6
-docutils==0.22.3
+docutils==0.23
 jmespath==0.10.0
 pyasn1==0.6.1
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 rsa==4.9.1
-s3transfer==0.15.0
+s3transfer==0.19.2
 six==1.17.0
 urllib3==2.5.0
 requests==2.32.5
\ No newline at end of file
diff --git a/go-build/Dockerfile b/go-build/Dockerfile
index 995bb76f5..a1e212bc0 100644
--- a/go-build/Dockerfile
+++ b/go-build/Dockerfile
@@ -1,15 +1,15 @@
 FROM hairyhenderson/gomplate:v3.11.7-slim AS gomplate
-FROM docker:29.0.4 AS docker
+FROM docker:29.9.0 AS docker
 FROM docker/compose:1.29.2 AS compose
-FROM hashicorp/vault:1.21.1 AS vault
-FROM hashicorp/terraform:1.14.0 AS terraform
-FROM hashicorp/packer:1.14.3 AS packer
-FROM prom/prometheus:v3.7.3 AS prometheus
-FROM prom/alertmanager:v0.29.0 AS alertmanager
-FROM mikefarah/yq:4.49.2 AS yq
-FROM golangci/golangci-lint:v2.6.2-alpine AS golangci-lint
+FROM hashicorp/vault:1.21.4 AS vault
+FROM hashicorp/terraform:1.16.5 AS terraform
+FROM hashicorp/packer:1.16.1 AS packer
+FROM prom/prometheus:v3.15.0 AS prometheus
+FROM prom/alertmanager:v0.34.1 AS alertmanager
+FROM mikefarah/yq:4.54.1 AS yq
+FROM golangci/golangci-lint:v2.14.0-alpine AS golangci-lint
 
-FROM alpine:3.22 AS packages
+FROM alpine:3.24 AS packages
 
 RUN apk add --no-cache \
     zip \
@@ -77,7 +77,7 @@ RUN apk add --update --no-cache ca-certificates wget \
     && mv linux-amd64/helm /usr/bin/helm \
     && rm -Rf helm-${HELM_LATEST_VERSION}-linux-amd64.tar.gz linux-amd64
 
-FROM golang:1.25-alpine3.22 AS build
+FROM golang:1.26-alpine3.22 AS build
 
 COPY --from=gomplate /gomplate /bin/gomplate
 COPY --from=docker /usr/local/bin/docker /bin/docker
diff --git a/go-build/awscli-requirements.txt b/go-build/awscli-requirements.txt
index 90608942d..fc6f58dd6 100644
--- a/go-build/awscli-requirements.txt
+++ b/go-build/awscli-requirements.txt
@@ -1,15 +1,15 @@
 ## awscli will be installed using the official AWS CLI v2 bundled installer
 ## so we don't install awscli/botocore via pip. Keep other helper packages.
 colorama==0.4.6
-docutils==0.22.3
-jmespath==1.0.1
+docutils==0.23
+jmespath==1.1.0
 pyasn1==0.6.1
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 rsa==4.9.1
-s3transfer==0.15.0
+s3transfer==0.19.2
 six==1.17.0
 ## allow urllib3 2.x per request
 urllib3==2.5.0
-yamllint==1.37.1
+yamllint==1.38.0
 requests==2.32.5
diff --git a/metrics-build/Dockerfile b/metrics-build/Dockerfile
index b24bd601b..0ac377d09 100644
--- a/metrics-build/Dockerfile
+++ b/metrics-build/Dockerfile
@@ -1,12 +1,12 @@
 FROM hairyhenderson/gomplate:v3.11.7-slim AS gomplate
-FROM docker:29.0.4 AS docker
-FROM hashicorp/vault:1.21.1 AS vault
-FROM hashicorp/terraform:1.14.0 AS terraform
-FROM prom/prometheus:v3.7.3 AS prometheus
-FROM prom/alertmanager:v0.29.0 AS alertmanager
-FROM grafana/mimirtool:3.0.0 AS mimirtool
+FROM docker:29.9.0 AS docker
+FROM hashicorp/vault:1.21.4 AS vault
+FROM hashicorp/terraform:1.16.5 AS terraform
+FROM prom/prometheus:v3.15.0 AS prometheus
+FROM prom/alertmanager:v0.34.1 AS alertmanager
+FROM grafana/mimirtool:3.2.2 AS mimirtool
 
-FROM alpine:3.22 AS packages
+FROM alpine:3.24 AS packages
 
 RUN apk add --no-cache \
     make \
@@ -19,7 +19,7 @@ RUN apk add --no-cache \
     openssh \
     github-cli
 
-FROM alpine:3.22 AS build
+FROM alpine:3.24 AS build
 
 COPY --from=gomplate /gomplate /bin/gomplate
 COPY --from=docker /usr/local/bin/docker /bin/docker
diff --git a/node-build/Dockerfile b/node-build/Dockerfile
index ef38cc3e2..c78174b0a 100644
--- a/node-build/Dockerfile
+++ b/node-build/Dockerfile
@@ -1,14 +1,14 @@
 FROM hairyhenderson/gomplate:v3.11.7-slim AS gomplate
-FROM docker:29.0.4 AS docker
+FROM docker:29.9.0 AS docker
 FROM docker/compose:1.29.2 AS compose
-FROM hashicorp/vault:1.21.1 AS vault
-FROM hashicorp/terraform:1.14.0 AS terraform
-FROM hashicorp/packer:1.14.3 AS packer
-FROM prom/prometheus:v3.7.3 AS prometheus
-FROM prom/alertmanager:v0.29.0 AS alertmanager
-FROM mikefarah/yq:4.49.2 AS yq
+FROM hashicorp/vault:1.21.4 AS vault
+FROM hashicorp/terraform:1.16.5 AS terraform
+FROM hashicorp/packer:1.16.1 AS packer
+FROM prom/prometheus:v3.15.0 AS prometheus
+FROM prom/alertmanager:v0.34.1 AS alertmanager
+FROM mikefarah/yq:4.54.1 AS yq
 
-FROM alpine:3.22 AS packages
+FROM alpine:3.24 AS packages
 
 RUN apk add --no-cache \
     zip \
@@ -64,14 +64,14 @@ RUN apk add --update --no-cache ca-certificates wget \
     && mv linux-amd64/helm /usr/bin/helm \
     && rm -Rf helm-${HELM_LATEST_VERSION}-linux-amd64.tar.gz linux-amd64
 
-FROM node:25.2-alpine3.22 AS nodepackages
+FROM node:25.9-alpine3.22 AS nodepackages
 
 #RUN npm config set unsafe-perm true
 RUN npm install -g \
   mocha \
   serverless
 
-FROM node:25.2-alpine3.22 AS build
+FROM node:25.9-alpine3.22 AS build
 
 # Install AWS CLI v2 using the bundled installer (supports amd64 and aarch64)
 ARG ARCH="amd64"
diff --git a/node-build/awscli-requirements.txt b/node-build/awscli-requirements.txt
index 7610e7be8..b1c56290a 100644
--- a/node-build/awscli-requirements.txt
+++ b/node-build/awscli-requirements.txt
@@ -1,14 +1,14 @@
 awscli==1.43.4
-botocore==1.41.4
+botocore==1.43.111
 colorama==0.4.6
-docutils==0.22.3
-jmespath==1.0.1
+docutils==0.23
+jmespath==1.1.0
 pyasn1==0.6.1
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 rsa==4.9.1
-s3transfer==0.15.0
+s3transfer==0.19.2
 six==1.17.0
 urllib3==2.5.0
-yamllint==1.37.1
+yamllint==1.38.0
 requests==2.32.5
diff --git a/py-build/Dockerfile b/py-build/Dockerfile
index 93c0bbbab..fa02437ee 100644
--- a/py-build/Dockerfile
+++ b/py-build/Dockerfile
@@ -1,15 +1,15 @@
 ARG KUBECTL_VERSION=v1.29.7
 
 FROM hairyhenderson/gomplate:v3.11.7-slim AS gomplate
-FROM docker:29.0.4 AS docker
+FROM docker:29.9.0 AS docker
 FROM docker/compose:1.29.2 AS compose
 FROM vault:1.13.3 AS vault
-FROM hashicorp/terraform:1.14.0 AS terraform
-FROM hashicorp/packer:1.14.3 AS packer
-FROM prom/prometheus:v3.7.3 AS prometheus
-FROM prom/alertmanager:v0.29.0 AS alertmanager
-FROM mikefarah/yq:4.49.2 AS yq
-FROM alpine:3.22 AS packages
+FROM hashicorp/terraform:1.16.5 AS terraform
+FROM hashicorp/packer:1.16.1 AS packer
+FROM prom/prometheus:v3.15.0 AS prometheus
+FROM prom/alertmanager:v0.34.1 AS alertmanager
+FROM mikefarah/yq:4.54.1 AS yq
+FROM alpine:3.24 AS packages
 
 RUN apk add --no-cache \
     zip \
diff --git a/py-build/awscli-requirements.txt b/py-build/awscli-requirements.txt
index e0d394481..33ef52494 100644
--- a/py-build/awscli-requirements.txt
+++ b/py-build/awscli-requirements.txt
@@ -1,14 +1,14 @@
 awscli==1.43.4
-botocore==1.41.4
+botocore==1.43.111
 colorama==0.4.6
-docutils==0.22.3
+docutils==0.23
 jmespath==0.10.0
 pyasn1==0.6.1
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 rsa==4.9.1
-s3transfer==0.15.0
+s3transfer==0.19.2
 six==1.17.0
 urllib3==2.5.0
-yamllint==1.37.1
+yamllint==1.38.0
 requests==2.32.5
diff --git a/py-build/requirements.txt b/py-build/requirements.txt
index 3ef867e66..372f2aca4 100644
--- a/py-build/requirements.txt
+++ b/py-build/requirements.txt
@@ -1,6 +1,6 @@
-astroid==4.0.2
+astroid==4.3.4
 certifi==2025.11.12
-docutils==0.22.3
+docutils==0.23
 ecdsa==0.19.1
 future==1.0.0
 idna==3.11
@@ -9,13 +9,13 @@ jmespath==0.10.0
 lazy-object-proxy==1.12.0
 mccabe==0.7.0
 placebo==0.10.0
-prometheus-client==0.23.1
+prometheus-client==0.26.0
 pyasn1==0.6.1
-pylint==4.0.3
+pylint==4.1.3
 python-dateutil==2.9.0.post0
 python-jose==3.5.0
 requests==2.32.5
 rsa==4.9.1
 six==1.17.0
 urllib3==2.5.0
-wrapt==2.0.1
+wrapt==2.5.0
diff --git a/socat/Dockerfile b/socat/Dockerfile
index f6ca51c1a..4b76758e3 100644
--- a/socat/Dockerfile
+++ b/socat/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.22.2
+FROM alpine:3.24.2
 
 RUN apk add --no-cache \
   ca-certificates \
diff --git a/tiny-build/Dockerfile b/tiny-build/Dockerfile
index 9a07165a7..21e09902e 100644
--- a/tiny-build/Dockerfile
+++ b/tiny-build/Dockerfile
@@ -1,18 +1,18 @@
 FROM hairyhenderson/gomplate:v5.2.0 AS gomplate
-FROM docker:29.6.1 AS docker
+FROM docker:29.9.0 AS docker
 FROM docker/compose:1.29.2 AS compose
 FROM hashicorp/vault:1.21.4 AS vault
-FROM hashicorp/terraform:1.15.8 AS terraform
-FROM hashicorp/packer:1.15.4 AS packer
-FROM prom/prometheus:v3.13.1 AS prometheus
-FROM prom/alertmanager:v0.33.1 AS alertmanager
+FROM hashicorp/terraform:1.16.5 AS terraform
+FROM hashicorp/packer:1.16.1 AS packer
+FROM prom/prometheus:v3.15.0 AS prometheus
+FROM prom/alertmanager:v0.34.1 AS alertmanager
 FROM grafana/cortex-tools:v0.11.3 AS cortextool
-FROM grafana/mimirtool:3.0.0 AS mimirtool
-FROM mikefarah/yq:4.53.3 AS yq
+FROM grafana/mimirtool:3.2.2 AS mimirtool
+FROM mikefarah/yq:4.54.1 AS yq
 FROM gcr.io/google.com/cloudsdktool/cloud-sdk:548.0.0-alpine AS google-cloud-sdk
-FROM openpolicyagent/conftest:v0.68.2 AS conftest
+FROM openpolicyagent/conftest:v0.71.1 AS conftest
 
-FROM alpine:3.22 AS packages
+FROM alpine:3.24 AS packages
 
 RUN apk add --no-cache \
     aws-cli \