diff --git a/hack/make/deps.mk b/hack/make/deps.mk
index de7c693e..ad07c6eb 100644
--- a/hack/make/deps.mk
+++ b/hack/make/deps.mk
@@ -1,8 +1,27 @@
 # renovate: datasource=github-release-attachments depName=golangci/golangci-lint
-GOLANGCI_VERSION = v2.1.6
+GOLANGCI_VERSION = v2.11.4
+# renovate: datasource=github-release-attachments depName=golangci/golangci-lint digestVersion=v2.11.4
+GOLANGCI_SUM_amd64 := 200c5b7503f67b59a6743ccf32133026c174e272b930ee79aa2aa6f37aca7ef1
+# renovate: datasource=github-release-attachments depName=golangci/golangci-lint digestVersion=v2.11.4
+GOLANGCI_SUM_arm64 := 3bcfa2e6f3d32b2bf5cd75eaa876447507025e0303698633f722a05331988db4
+
 # renovate: datasource=github-release-attachments depName=k3d-io/k3d
 K3D_VERSION = v5.8.3
+# renovate: datasource=github-release-attachments depName=k3d-io/k3d digestVersion=v5.8.3
+K3D_SUM_amd64 := dbaa79a76ace7f4ca230a1ff41dc7d8a5036a8ad0309e9c54f9bf3836dbe853e
+# renovate: datasource=github-release-attachments depName=k3d-io/k3d digestVersion=v5.8.3
+K3D_SUM_arm64 := 0b8110f2229631af7402fb828259330985918b08fefd38b7f1b788a1c8687216
+
+# renovate: datasource=github-releases packageName=kubernetes/kubernetes
+KUBECTL_VERSION = v1.31.13
+# renovate: datasource=github-releases packageName=kubernetes/kubernetes digestVersion=v1.31.13
+KUBECTL_SUM_amd64 := ce427a4df97b044bf6beaf38be6b3aaafb1b5c782c406958b3c71ebb25a48fe3
+# renovate: datasource=github-releases packageName=kubernetes/kubernetes digestVersion=v1.31.13
+KUBECTL_SUM_arm64 := cfe055bd02650cd5c2687599069630cf4a602f1c99be63986a25b775752620db
 
-KUBECTL_VERSION = 1.31.10
 # renovate: datasource=github-release-attachments depName=helm/helm
-HELM_VERSION = v3.18.2
+HELM_VERSION = v3.17.2
+# renovate: datasource=github-release-attachments depName=helm/helm digestVersion=v3.17.2
+HELM_SUM_amd64 := 90c28792a1eb5fb0b50028e39ebf826531ebfcf73f599050dbd79bab2f277241
+# renovate: datasource=github-release-attachments depName=helm/helm digestVersion=v3.17.2
+HELM_SUM_arm64 := d78d76ec7625a94991e887ac049d93f44bd70e4876200b945f813c9e1ed1df7c
diff --git a/hack/make/tools.mk b/hack/make/tools.mk
index 009aeb29..77b8aab5 100644
--- a/hack/make/tools.mk
+++ b/hack/make/tools.mk
@@ -12,40 +12,40 @@ endif
 K3D = $(TOOLS_BIN)/k3d-$(K3D_VERSION)
 $(K3D):
 	rm -f $(TOOLS_BIN)/k3d*
-	curl -s https://raw.githubusercontent.com/k3d-io/k3d/main/install.sh | \
-		PATH=$(PATH):$(TOOLS_BIN) K3D_INSTALL_DIR="$(TOOLS_BIN)" TAG="$(K3D_VERSION)" USE_SUDO=false bash
-	mv $(TOOLS_BIN)/k3d $(TOOLS_BIN)/k3d-$(K3D_VERSION)
+	curl -sSfL -o $(K3D) "https://github.com/k3d-io/k3d/releases/download/$(K3D_VERSION)/k3d-$(OS_NAME)-$(OS_ARCH)"
+	echo "$(K3D_SUM_$(OS_ARCH))  $(K3D)" | shasum -a 256 -c -
+	chmod u+x $(K3D)
 
 GOLANGCI = $(TOOLS_BIN)/golangci-lint-$(GOLANGCI_VERSION)
+GOLANGCI_VERSION_TRIMMED := $(GOLANGCI_VERSION:v%=%)
 $(GOLANGCI):
-	rm -f $(TOOLS_BIN)/golangci-lint*
-	curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(TOOLS_BIN) $(GOLANGCI_VERSION)
-	mv $(TOOLS_BIN)/golangci-lint $(TOOLS_BIN)/golangci-lint-$(GOLANGCI_VERSION)
+	rm -rf $(TOOLS_BIN)/golangci*
+	curl -sSfL -o $(TOOLS_BIN)/golangci.tar.gz \
+		"https://github.com/golangci/golangci-lint/releases/download/$(GOLANGCI_VERSION)/golangci-lint-$(GOLANGCI_VERSION_TRIMMED)-$(OS_NAME)-$(OS_ARCH).tar.gz"
+	echo "$(GOLANGCI_SUM_$(OS_ARCH))  $(TOOLS_BIN)/golangci.tar.gz" | shasum -a 256 -c -
+	tar -xf $(TOOLS_BIN)/golangci.tar.gz -C $(TOOLS_BIN)
+	mv $(TOOLS_BIN)/golangci-lint-$(GOLANGCI_VERSION_TRIMMED)-$(OS_NAME)-$(OS_ARCH)/golangci-lint $(GOLANGCI)
+	chmod u+x $(GOLANGCI)
+	rm -rf $(TOOLS_BIN)/golangci-lint-$(GOLANGCI_VERSION_TRIMMED)-$(OS_NAME)-$(OS_ARCH)
+	rm -f $(TOOLS_BIN)/golangci.tar.gz
 
 KUBECTL = $(TOOLS_BIN)/kubectl-$(KUBECTL_VERSION)
 $(KUBECTL):
 	rm -f $(TOOLS_BIN)/kubectl*
-	curl --output $(KUBECTL) -sSfL "https://dl.k8s.io/release/v$(KUBECTL_VERSION)/bin/$(OS_NAME)/$(OS_ARCH)/kubectl"
-	echo "$(shell curl -L "https://dl.k8s.io/release/v$(KUBECTL_VERSION)/bin/$(OS_NAME)/$(OS_ARCH)/kubectl.sha256")  $(KUBECTL)" | shasum -a 256 -c -
+	curl -sSfL -o $(KUBECTL) \
+		"https://dl.k8s.io/release/$(KUBECTL_VERSION)/bin/$(OS_NAME)/$(OS_ARCH)/kubectl"
+	echo "$(KUBECTL_SUM_$(OS_ARCH))  $(KUBECTL)" | shasum -a 256 -c -
 	chmod u+x $(KUBECTL)
 
 HELM = $(TOOLS_BIN)/helm-$(HELM_VERSION)
 $(HELM):
 	rm -rf $(TOOLS_BIN)/helm*
 	mkdir -p $(TOOLS_BIN)/tmp-helm
-	curl --output $(TOOLS_BIN)/helm-$(HELM_VERSION)-$(OS_NAME)-$(OS_ARCH).tar.gz -sSfL "https://get.helm.sh/helm-$(HELM_VERSION)-$(OS_NAME)-$(OS_ARCH).tar.gz"
-	$(call indirect-value,HELM_SUM)
-	cd $(TOOLS_BIN) && echo "$(shell curl -L "https://get.helm.sh/helm-$(HELM_VERSION)-$(OS_NAME)-$(OS_ARCH).tar.gz.sha256sum")" | shasum -a 256 -c -
-	tar -xf $(TOOLS_BIN)/helm-$(HELM_VERSION)-$(OS_NAME)-$(OS_ARCH).tar.gz --strip-components 1 -C $(TOOLS_BIN)/tmp-helm
+	curl -sSfL -o $(TOOLS_BIN)/helm.tar.gz \
+		"https://get.helm.sh/helm-$(HELM_VERSION)-$(OS_NAME)-$(OS_ARCH).tar.gz"
+	echo "$(HELM_SUM_$(OS_ARCH))  $(TOOLS_BIN)/helm.tar.gz" | shasum -a 256 -c -
+	tar -xf $(TOOLS_BIN)/helm.tar.gz --strip-components 1 -C $(TOOLS_BIN)/tmp-helm
 	mv $(TOOLS_BIN)/tmp-helm/helm $(HELM)
 	chmod u+x $(HELM)
-	rm -rf $(TOOLS_BIN)/helm-$(HELM_VERSION)-$(OS_NAME)-$(OS_ARCH).tar.gz $(TOOLS_BIN)/tmp-helm
+	rm -rf $(TOOLS_BIN)/helm.tar.gz $(TOOLS_BIN)/tmp-helm
 
-# go-install-tool will 'go install' any package $2 and install it as $1.
-define go-install-tool
-@[ -f $(1) ] || { \
-set -e ;\
-echo "Downloading $(2)" ;\
-GOBIN=$(TOOLS_BIN) go install $(2) ;\
-}
-endef