diff --git a/docker/build-tools/Dockerfile b/docker/build-tools/Dockerfile
index 5e049a180a..6ae8c3b979 100644
--- a/docker/build-tools/Dockerfile
+++ b/docker/build-tools/Dockerfile
@@ -37,15 +37,15 @@ ARG TARGETARCH
 ARG ISTIO_TOOLS_SHA
 
 # Pinned versions of stuff we pull in, keep this list sorted alphabetically
-ENV APKO_VERSION=v0.22.6
+ENV APKO_VERSION=v0.24.0
 ENV BENCHSTAT_VERSION=9c9101da8316
 ENV BOM_VERSION=v0.6.0
-ENV BUF_VERSION=v1.49.0
+ENV BUF_VERSION=v1.50.0
 ENV COSIGN_VERSION=v2.4.1
 ENV CRANE_VERSION=v0.20.3
 ENV GCLOUD_VERSION=496.0.0
 ENV GCR_AUTH_VERSION=2.1.21
-ENV GH_VERSION=2.65.0
+ENV GH_VERSION=2.66.1
 ENV GOCOVMERGE_VERSION=b5bfa59ec0adc420475f97f89b58045c721d761c
 ENV GOIMPORTS_VERSION=v0.24.0
 # When updating the golangci version, you may want to update the common-files config/.golangci* files as well.
@@ -59,7 +59,7 @@ ENV GO_BINDATA_VERSION=v3.1.2
 ENV GO_JUNIT_REPORT_VERSION=df0ed838addb0fa189c4d76ad4657f6007a5811c
 ENV HADOLINT_VERSION=v2.12.0
 ENV HELM3_VERSION=v3.17.0
-ENV HUGO_VERSION=0.141.0
+ENV HUGO_VERSION=0.143.0
 ENV JB_VERSION=v0.3.1
 ENV JSONNET_VERSION=v0.20.0
 ENV JUNIT_MERGER_VERSION=adf1545b49509db1f83c49d1de90bbcb235642a8
@@ -73,7 +73,7 @@ ENV KPT_VERSION=v1.0.0-beta.54
 ENV KUBECTL_VERSION=1.32.1
 ENV KUBECTX_VERSION=0.9.5
 ENV KUBETEST2_VERSION=b019714a389563c9a788f119f801520d059b6533
-ENV OC_VERSION=4.17.11
+ENV OC_VERSION=4.17.12
 ENV ORAS_VERSION=1.2.2
 ENV OTEL_CLI_VERSION=v0.4.1
 ENV PROTOC_GEN_GRPC_GATEWAY_VERSION=v1.16.0
@@ -81,7 +81,7 @@ ENV PROTOC_VERSION=29.3
 ENV PROTOLOCK_VERSION=v0.17.0
 ENV SHELLCHECK_VERSION=v0.10.0
 ENV SU_EXEC_VERSION=0.3.1
-ENV TRIVY_VERSION=0.58.2
+ENV TRIVY_VERSION=0.59.0
 ENV YQ_VERSION=4.45.1
 
 ENV GO111MODULE=on
@@ -562,9 +562,9 @@ FROM ubuntu:noble AS base_os_context
 ENV DEBIAN_FRONTEND=noninteractive
 
 ENV CONTAINERD_VERSION=1.7.25-1
-ENV DOCKER_VERSION=5:27.5.0-1~ubuntu.24.04~noble
-ENV DOCKER_BUILDX_VERSION=0.19.3-1~ubuntu.24.04~noble
-ENV RUST_VERSION=1.84.0
+ENV DOCKER_VERSION=5:27.5.1-1~ubuntu.24.04~noble
+ENV DOCKER_BUILDX_VERSION=0.20.0-1~ubuntu.24.04~noble
+ENV RUST_VERSION=1.84.1
 
 ENV OUTDIR=/out