diff --git a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-non-root-usr.base b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-non-root-usr.base
index d57fa7f..e49c613 100644
--- a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-non-root-usr.base
+++ b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-non-root-usr.base
@@ -20,14 +20,15 @@
 
 # Set Go & tools versions. Be carreful when upgrading these versions, make sure
 # to keep them in sync with the version golang
-ARG GOLANG_VERSION=1.22.5
-ARG TRIVY_VERSION=0.49.1
-ARG SYFT_VERSION=1.9.0
-ARG COSIGN_VERSION=2.4.0
-ARG KO_VERSION=0.16.0
-# goreleaser v2.1.0 ships with go1.22.5
-ARG GORELEASER_VERSION=2.1.0
-
+ARG GOLANG_VERSION=1.23.0
+ARG TRIVY_VERSION=0.57.1
+ARG SYFT_VERSION=1.16.0
+ARG COSIGN_VERSION=2.4.1
+ARG KO_VERSION=0.17.1
+# goreleaser v2.4.7 ships with go1.23.0
+ARG GORELEASER_VERSION=2.4.7
+
+# Set Debian version name (e.g. bookworm)
 ARG DEBIAN_VERSION=bookworm
 
 # Builder image's registry
diff --git a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr
index 80c352d..6f92ce5 100644
--- a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr
+++ b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr
@@ -14,13 +14,13 @@
 
 # Set Go & tools versions. This needs to match the versions from the corresponding base image
 # ghcr.io/thalesgroup/goreleaser-glibc-image-base (the one with entrypoint /bin/bash)
-ARG GOLANG_VERSION=1.22.5
-ARG TRIVY_VERSION=0.49.1
-ARG SYFT_VERSION=1.9.0
-ARG COSIGN_VERSION=2.4.0
-ARG KO_VERSION=0.16.0
-# goreleaser v2.1.0 ships with go1.22.5
-ARG GORELEASER_VERSION=2.1.0
+ARG GOLANG_VERSION=1.23.0
+ARG TRIVY_VERSION=0.57.1
+ARG SYFT_VERSION=1.16.0
+ARG COSIGN_VERSION=2.4.1
+ARG KO_VERSION=0.17.1
+# goreleaser v2.4.7 ships with go1.23.0
+ARG GORELEASER_VERSION=2.4.7
 
 # Set Debian version name (e.g. bookworm)
 ARG DEBIAN_VERSION=bookworm
diff --git a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr.base b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr.base
index 0409ab8..112fb98 100644
--- a/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr.base
+++ b/Containerfile.goreleaser-ko-cosign-trivy-syft-x86-arm64-root-usr.base
@@ -20,13 +20,13 @@
 
 # Set Go & tools versions. Be carreful when upgrading these versions, make sure
 # to keep them in sync with the version golang
-ARG GOLANG_VERSION=1.22.5
-ARG TRIVY_VERSION=0.49.1
-ARG SYFT_VERSION=1.9.0
-ARG COSIGN_VERSION=2.4.0
-ARG KO_VERSION=0.16.0
-# goreleaser v2.1.0 ships with go1.22.5
-ARG GORELEASER_VERSION=2.1.0
+ARG GOLANG_VERSION=1.23.0
+ARG TRIVY_VERSION=0.57.1
+ARG SYFT_VERSION=1.16.0
+ARG COSIGN_VERSION=2.4.1
+ARG KO_VERSION=0.17.1
+# goreleaser v2.4.7 ships with go1.23.0
+ARG GORELEASER_VERSION=2.4.7
 
 # Set Debian version name (e.g. bookworm)
 ARG DEBIAN_VERSION=bookworm