diff --git a/.env b/.env
index 95eec7e..9f9e02d 100644
--- a/.env
+++ b/.env
@@ -1,3 +1,3 @@
 BUILD_HARNESS_REPO=ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=github-tags depName=defenseunicorns/build-harness
-BUILD_HARNESS_VERSION=1.14.8
+BUILD_HARNESS_VERSION=1.14.12
diff --git a/.tool-versions b/.tool-versions
index 77d9eb6..275b69d 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,36 +1,36 @@
 adr-tools 3.0.0
 # renovate: datasource=github-releases depName=rebuy-de/aws-nuke
 aws-nuke 2.25.0
-awscli 2.15.6
+awscli 2.15.9
 # renovate: datasource=git-tags depName=https://github.com/bridgecrewio/checkov.git
-checkov 3.1.51
+checkov 3.1.57
 # renovate: datasource=github-tags depName=dagger/dagger
 dagger 0.9.5
 flux2 2.2.2
 # renovate: datasource=github-tags depName=gruntwork-io/git-xargs
 git-xargs 0.1.10
-golang 1.21.5
+golang 1.21.6
 golangci-lint 1.55.2
 # renovate: datasource=github-tags depName=anchore/grype
-grype 0.73.5
+grype 0.74.0
 hadolint 2.12.0
 helm 3.13.3
 # renovate: datasource=github-releases depName=k3d-io/k3d
 k3d 5.6.0
 # renovate: datasource=github-tags depName=derailed/k9s
-k9s 0.30.7
+k9s 0.31.4
 kubectl 1.29.0
 # renovate: datasource=github-tags depName=opentofu/opentofu versioning=loose
-opentofu 1.6.0-rc1
+opentofu 1.6.0
 pre-commit 3.6.0
 sops 3.8.1
 # renovate: datasource=github-tags depName=anchore/syft
-syft 0.99.0
+syft 0.100.0
 terraform 1.5.7
 terraform-docs 0.17.0
-tflint 0.50.0
+tflint 0.50.1
 tfsec 1.28.4
 # renovate: datasource=github-tags depName=mikefarah/yq
 yq 4.40.5
 # renovate: datasource=github-releases depName=defenseunicorns/zarf
-zarf 0.32.0
+zarf 0.32.1