diff --git a/.azure-pipelines.yaml b/.azure-pipelines.yaml
index 6fde2a0..4b465ca 100644
--- a/.azure-pipelines.yaml
+++ b/.azure-pipelines.yaml
@@ -25,7 +25,7 @@ jobs:
         displayName: Install dotnet
         inputs:
           # renovate: datasource=dotnet depName=dotnet-sdk
-          version: 9.0.305
+          version: 9.0.307
 
       - bash: dotnet tool restore && dotnet cake --verbosity=verbose
         displayName: Cake build
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 621ad09..60d852a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -32,7 +32,7 @@ jobs:
         uses: actions/setup-dotnet@v5.0.0
         with:
           # renovate: datasource=dotnet depName=dotnet-sdk
-          dotnet-version: 9.0.305
+          dotnet-version: 9.0.307
 
       - name: Docker login
         if: github.event_name != 'pull_request'
@@ -42,7 +42,7 @@ jobs:
           password: ${{ secrets.DOCKER_TOKEN }}
 
       - name: Setup qemu
-        uses: docker/setup-qemu-action@v3.6.0
+        uses: docker/setup-qemu-action@v3.7.0
         with:
           platforms: arm64
 
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6403e2b..8be53f3 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -25,6 +25,6 @@ build:
   script:
     - curl -fsSL https://get.docker.com/ | bash -s
     # renovate: datasource=dotnet depName=dotnet-sdk
-    - curl -fsSL https://dot.net/v1/dotnet-install.sh | bash -s -- --version 9.0.305
+    - curl -fsSL https://dot.net/v1/dotnet-install.sh | bash -s -- --version 9.0.307
     - export DOTNET_ROOT=$HOME/.dotnet && export PATH=$DOTNET_ROOT:$PATH
     - dotnet tool restore && dotnet cake --verbosity=verbose
diff --git a/Dockerfile b/Dockerfile
index 8dd2998..fd6ddbe 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1
-FROM mcr.microsoft.com/dotnet/sdk:9.0.305-noble
+FROM mcr.microsoft.com/dotnet/sdk:9.0.307-noble
 
 LABEL org.opencontainers.image.source=https://github.com/gitfool/cake-docker
 
@@ -45,7 +45,7 @@ ENV Cake_Settings_EnableScriptCache=true \
 RUN <<EOF
     set -ex
     [ "$TARGETARCH" = "amd64" ] && arch="x86_64" || arch="aarch64"
-    version=28.5.1
+    version=28.5.2
     curl -fsSL https://download.docker.com/linux/static/stable/$arch/docker-$version.tgz -o docker.tgz
     tar -xzf docker.tgz --directory /usr/local/bin --no-same-owner --strip=1 docker/docker
     rm -f docker.tgz
@@ -59,7 +59,7 @@ EOF
 RUN <<EOF
     set -ex
     [ "$TARGETARCH" = "amd64" ] && arch="amd64" || arch="arm64"
-    version=0.29.1
+    version=0.30.0
     curl -fsSL https://github.com/docker/buildx/releases/download/v$version/buildx-v$version.linux-$arch -o /usr/local/lib/docker/cli-plugins/docker-buildx
     chmod +x /usr/local/lib/docker/cli-plugins/docker-buildx
     docker buildx version
@@ -70,7 +70,7 @@ EOF
 RUN <<EOF
     set -ex
     [ "$TARGETARCH" = "amd64" ] && arch="x86_64" || arch="aarch64"
-    version=2.40.0
+    version=2.40.3
     curl -fsSL https://github.com/docker/compose/releases/download/v$version/docker-compose-linux-$arch -o /usr/local/lib/docker/cli-plugins/docker-compose
     chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
     docker compose version