diff --git a/.github/workflows/build-and-push-image.yml b/.github/workflows/build-and-push-image.yml
index a7ddd17d..b59e0094 100644
--- a/.github/workflows/build-and-push-image.yml
+++ b/.github/workflows/build-and-push-image.yml
@@ -34,7 +34,7 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@9dc751fe249ad99385a2583ee0d084c400eee04e # v5.4.0
+        uses: docker/metadata-action@dbef88086f6cef02e264edb7dbf63250c17cef6c # v5.5.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
diff --git a/oci/Containerfile b/oci/Containerfile
index e5514542..44047526 100644
--- a/oci/Containerfile
+++ b/oci/Containerfile
@@ -5,7 +5,7 @@ WORKDIR /workspace
 COPY . .
 
 # renovate: datasource=github-releases depName=pulumi/pulumi
-ENV PULUMI_VERSION=v3.99.0
+ENV PULUMI_VERSION=v3.101.1
 ENV PULUMI_URL https://github.com/pulumi/pulumi/releases/download/${PULUMI_VERSION}/pulumi-${PULUMI_VERSION}-linux-x64.tar.gz
 
 RUN make build \
@@ -34,10 +34,10 @@ ARG PULUMI_TLS_VERSION=v5.0.0
 ARG PULUMI_RANDOM_VERSION=v4.15.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-aws
-ARG PULUMI_AWS_VERSION=v6.17.0
+ARG PULUMI_AWS_VERSION=v6.18.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-gcp
-ARG PULUMI_GCP_VERSION=v7.4.0
+ARG PULUMI_GCP_VERSION=v7.5.0
 
 # renovate: datasource=github-releases depName=pulumi/pulumi-azure-native
 ARG PULUMI_AZURE_NATIVE_VERSION=v2.24.0