diff --git a/.circleci/config.yml b/.circleci/config.yml
index 7414bbdac..c301ce9b0 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -6,7 +6,7 @@ orbs:
 jobs:
   debug-tag:
     docker:
-      - image: cimg/base:2023.02
+      - image: cimg/base:2023.09
     steps:
       - checkout
       - run: |
@@ -14,7 +14,7 @@ jobs:
 
   update-krew-index:
     docker:
-      - image: cimg/go:1.20.0
+      - image: cimg/go:1.21.1
 
     environment:
       KREW_RELEASE_BOT_VERSION: v0.0.38
diff --git a/go.mod b/go.mod
index f4c574dc9..0ffbab0db 100644
--- a/go.mod
+++ b/go.mod
@@ -6,10 +6,10 @@ require (
 	dario.cat/mergo v1.0.0
 	github.com/3th1nk/cidr v0.2.0
 	github.com/Masterminds/sprig/v3 v3.2.3
-	github.com/ProtonMail/gopenpgp/v2 v2.7.2
+	github.com/ProtonMail/gopenpgp/v2 v2.7.3
 	github.com/blang/semver v3.5.1+incompatible
 	github.com/blang/semver/v4 v4.0.0
-	github.com/coreos/go-oidc/v3 v3.5.0
+	github.com/coreos/go-oidc/v3 v3.6.0
 	github.com/fatih/color v1.15.0
 	github.com/giantswarm/apiextensions-application v0.6.0
 	github.com/giantswarm/apiextensions/v6 v6.6.0
@@ -32,8 +32,8 @@ require (
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.4
 	github.com/xeipuuv/gojsonschema v1.2.0
-	go.mozilla.org/sops/v3 v3.7.3
-	golang.org/x/oauth2 v0.11.0
+	go.mozilla.org/sops/v3 v3.8.0
+	golang.org/x/oauth2 v0.12.0
 	gopkg.in/square/go-jose.v2 v2.6.0
 	gotest.tools/v3 v3.5.0
 	k8s.io/api v0.25.0
@@ -193,21 +193,21 @@ require (
 )
 
 replace (
-	github.com/containerd/containerd => github.com/containerd/containerd v1.6.18 // [CVE-2023-25153]
-	github.com/coreos/etcd => go.etcd.io/etcd/client/v3 v3.5.7
+	github.com/containerd/containerd => github.com/containerd/containerd v1.7.6 // [CVE-2023-25153]
+	github.com/coreos/etcd => go.etcd.io/etcd/client/v3 v3.5.9
 	github.com/docker/distribution v2.7.1+incompatible => github.com/docker/distribution v2.8.0+incompatible
-	github.com/docker/docker => github.com/moby/moby/v24 v24.0.1 // Use moby v20.10.x to fix build issue on darwin.
-	github.com/go-ldap/ldap/v3 => github.com/go-ldap/ldap/v3 v3.4.4
+	github.com/docker/docker => github.com/moby/moby/v24 v24.0.6 // Use moby v20.10.x to fix build issue on darwin.
+	github.com/go-ldap/ldap/v3 => github.com/go-ldap/ldap/v3 v3.4.5
 	github.com/gogo/protobuf => github.com/gogo/protobuf v1.3.2 // [CVE-2021-3121]
 	github.com/gorilla/websocket v1.4.0 => github.com/gorilla/websocket v1.4.2
-	github.com/hashicorp/consul/api => github.com/hashicorp/consul/api v1.19.1
-	github.com/hashicorp/vault/api => github.com/hashicorp/vault/api v1.9.0
+	github.com/hashicorp/consul/api => github.com/hashicorp/consul/api v1.24.0
+	github.com/hashicorp/vault/api => github.com/hashicorp/vault/api v1.10.0
 	github.com/hashicorp/vault/sdk v0.4.1 => github.com/hashicorp/vault/sdk v0.9.2
 	// CVE-2023-27561
 	github.com/opencontainers/runc v1.1.2 => github.com/opencontainers/runc v1.1.5
 	// CVE-2023-3978
-	golang.org/x/net => golang.org/x/net v0.13.0
-	golang.org/x/text => golang.org/x/text v0.11.0
-	helm.sh/helm/v3 => helm.sh/helm/v3 v3.11.1
+	golang.org/x/net => golang.org/x/net v0.15.0
+	golang.org/x/text => golang.org/x/text v0.13.0
+	helm.sh/helm/v3 => helm.sh/helm/v3 v3.12.3
 	sigs.k8s.io/cluster-api => sigs.k8s.io/cluster-api v1.0.4
 )