diff --git a/base/Dockerfile b/base/Dockerfile
index 2783e8b69..e9e575a9f 100644
--- a/base/Dockerfile
+++ b/base/Dockerfile
@@ -1,4 +1,4 @@
-FROM buildpack-deps:jammy@sha256:4b87c2ce43b264d82daa23fdbd88fb1b5f1bc61cbee338eba7a41a47236f7b9a
+FROM buildpack-deps:jammy@sha256:d4dd8c4891377f710f1509f5a3aa777e9d64f3c93f9b3be198a10cdd497c8ac4
 
 # Dazzle does not rebuild a layer until one of its lines are changed. Increase this counter to rebuild this layer.
 ENV TRIGGER_REBUILD=2
diff --git a/chunks/lang-java/Dockerfile b/chunks/lang-java/Dockerfile
index f6798516e..96d5d745b 100644
--- a/chunks/lang-java/Dockerfile
+++ b/chunks/lang-java/Dockerfile
@@ -17,7 +17,7 @@ RUN curl -fsSL "https://get.sdkman.io" | bash \
     && sdk default java ${JAVA_VERSION} \
     && sdk install gradle \
     # 4.x requires Java 17+ https://maven.apache.org/docs/history.html
-    && sdk install maven 3.9.9 \
+    && sdk install maven 3.9.10 \
     && sdk flush archives \
     && sdk flush temp \
     && mkdir /home/gitpod/.m2 \
diff --git a/chunks/tool-nginx/Dockerfile b/chunks/tool-nginx/Dockerfile
index baa712e23..9aa3f25f9 100644
--- a/chunks/tool-nginx/Dockerfile
+++ b/chunks/tool-nginx/Dockerfile
@@ -9,7 +9,7 @@ ENV TRIGGER_REBUILD=2
 # Install composer
 COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
 
-RUN for _ppa in 'ppa:ondrej/php' 'ppa:ondrej/apache2' 'ppa:ondrej/nginx-mainline'; do add-apt-repository -y "$_ppa"; done \
+RUN for _ppa in 'ppa:ondrej/php' 'ppa:ondrej/apache2' 'ppa:ondrej/nginx'; do add-apt-repository -y "$_ppa"; done \
     && install-packages \
         apache2 \
         nginx \