diff --git a/Makefile b/Makefile
index e1e382f31..83b5e51b7 100644
--- a/Makefile
+++ b/Makefile
@@ -103,7 +103,7 @@ KIND_VERSION ?= 0.23.0
 KUBERNETES_VERSION ?= 1.30.2
 KUBECTL_VERSION ?= 1.25.3
 BATS_VERSION ?= 1.4.1
-TRIVY_VERSION ?= 0.39.1
+TRIVY_VERSION ?= 0.57.1
 PROTOC_VERSION ?= 3.20.1
 SHELLCHECK_VER ?= v0.8.0
 YQ_VERSION ?= v4.11.2
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 06031e19f..0442099ad 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -14,7 +14,7 @@
 
 ARG BASEIMAGE=registry.k8s.io/build-image/debian-base:bookworm-v1.0.4
 
-FROM golang:1.21@sha256:7026fb72cfa9cc112e4d1bf4b35a15cac61a413d0252d06615808e7c987b33a7 as builder
+FROM golang:1.22 as builder
 WORKDIR /go/src/sigs.k8s.io/secrets-store-csi-driver
 ADD . .
 ARG TARGETARCH
diff --git a/docker/crd.Dockerfile b/docker/crd.Dockerfile
index 9261f372e..b06872a05 100644
--- a/docker/crd.Dockerfile
+++ b/docker/crd.Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 FROM alpine as builder
-ARG KUBE_VERSION=v1.29.4
+ARG KUBE_VERSION=v1.29.11
 ARG TARGETARCH
 
 RUN apk add --no-cache curl && \
diff --git a/docker/windows.Dockerfile b/docker/windows.Dockerfile
index 84eeed33c..929c83a31 100644
--- a/docker/windows.Dockerfile
+++ b/docker/windows.Dockerfile
@@ -17,7 +17,7 @@ ARG BASEIMAGE_CORE=gcr.io/k8s-staging-e2e-test-images/windows-servercore-cache:1
 
 FROM --platform=linux/amd64 ${BASEIMAGE_CORE} as core
 
-FROM --platform=$BUILDPLATFORM golang:1.21@sha256:7026fb72cfa9cc112e4d1bf4b35a15cac61a413d0252d06615808e7c987b33a7 as builder
+FROM --platform=$BUILDPLATFORM golang:1.22 as builder
 WORKDIR /go/src/sigs.k8s.io/secrets-store-csi-driver
 ADD . .
 ARG TARGETARCH