diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 33436a26..5f69de95 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -34,13 +34,13 @@ jobs:
 
       - name: Docker login
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3.2.0
+        uses: docker/login-action@v3.3.0
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
 
       - name: Setup buildx
-        uses: docker/setup-buildx-action@v3.4.0
+        uses: docker/setup-buildx-action@v3.6.1
 
       - name: Export runtime
         uses: crazy-max/ghaction-github-runtime@v3.0.0
diff --git a/Aws/packages.lock.json b/Aws/packages.lock.json
index c8d8354e..93a51689 100644
--- a/Aws/packages.lock.json
+++ b/Aws/packages.lock.json
@@ -220,8 +220,8 @@
       },
       "YamlDotNet": {
         "type": "Transitive",
-        "resolved": "16.0.0",
-        "contentHash": "kZ4jR5ltFhnjaUqK9x81zXRIUTH4PTXTTEmJDNQdkDLQhcv+2Nl19r0dCSvPW1mstOYBfXTnjdieRbUO6gHMDw=="
+        "resolved": "16.1.0",
+        "contentHash": "ywYsFpZi0SKeQ+wrg1V7wZIz/ym0QJKN8IOPi06vYOgTMwHlQEr02BV5yC9IUXOBzD/pbYTuVflcObz2WdzSOw=="
       },
       "k8s": {
         "type": "Project",
@@ -246,7 +246,7 @@
           "Pulumi.Aws": "[5.11.0, )",
           "Pulumi.Kubernetes": "[3.20.5, )",
           "Scriban": "[5.10.0, )",
-          "YamlDotNet": "[16.0.0, )"
+          "YamlDotNet": "[16.1.0, )"
         }
       }
     }
diff --git a/Cli/Cli.csproj b/Cli/Cli.csproj
index dca656e2..b90bebc8 100644
--- a/Cli/Cli.csproj
+++ b/Cli/Cli.csproj
@@ -29,8 +29,8 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Json.More.Net" Version="2.0.1.2" />
-    <PackageReference Include="JsonPath.Net" Version="1.1.2" />
+    <PackageReference Include="Json.More.Net" Version="2.0.2" />
+    <PackageReference Include="JsonPath.Net" Version="1.1.4" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="8.0.0" />
     <PackageReference Include="Microsoft.Extensions.Options" Version="8.0.2" />
     <PackageReference Include="NetEscapades.Configuration.Yaml" Version="3.1.0" />
diff --git a/Cli/Dockerfile b/Cli/Dockerfile
index 86d25aa7..64deefe8 100644
--- a/Cli/Dockerfile
+++ b/Cli/Dockerfile
@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1
-FROM mcr.microsoft.com/dotnet/aspnet:8.0.7-jammy
+FROM mcr.microsoft.com/dotnet/aspnet:8.0.8-jammy
 
 LABEL org.opencontainers.image.source=https://github.com/gitfool/Pulumi.Dungeon
 
@@ -16,7 +16,7 @@ EOF
 # renovate: datasource=github-tags depName=kubectl packageName=kubernetes/kubectl extractVersion=^kubernetes-(?<version>.+)$
 RUN <<EOF
     set -ex
-    version=1.30.3
+    version=1.31.1
     curl -fsSL https://storage.googleapis.com/kubernetes-release/release/v$version/bin/linux/amd64/kubectl -o /usr/local/bin/kubectl
     chmod +x /usr/local/bin/kubectl
     kubectl completion bash > /etc/bash_completion.d/kubectl
@@ -27,7 +27,7 @@ EOF
 # renovate: datasource=github-releases depName=aws-iam-authenticator packageName=kubernetes-sigs/aws-iam-authenticator
 RUN <<EOF
     set -ex
-    version=0.6.22
+    version=0.6.26
     curl -fsSL https://github.com/kubernetes-sigs/aws-iam-authenticator/releases/download/v$version/aws-iam-authenticator_${version}_linux_amd64 -o /usr/local/bin/aws-iam-authenticator
     chmod +x /usr/local/bin/aws-iam-authenticator
     aws-iam-authenticator version
@@ -37,7 +37,7 @@ EOF
 # renovate: datasource=github-releases depName=helm packageName=helm/helm
 RUN <<EOF
     set -ex
-    version=3.15.3
+    version=3.16.1
     curl -fsSL https://get.helm.sh/helm-v$version-linux-amd64.tar.gz -o helm.tar.gz
     tar -xzf helm.tar.gz --directory /usr/local/bin --no-same-owner --strip=1 linux-amd64/helm
     rm -f helm.tar.gz
diff --git a/Cli/packages.lock.json b/Cli/packages.lock.json
index 4edf48d5..09638845 100644
--- a/Cli/packages.lock.json
+++ b/Cli/packages.lock.json
@@ -4,17 +4,17 @@
     "net8.0": {
       "Json.More.Net": {
         "type": "Direct",
-        "requested": "[2.0.1.2, )",
-        "resolved": "2.0.1.2",
-        "contentHash": "uF3QeiaXEfH92emz0/BWUiNtMSfxIIvgynuB0Bf1vF4s8eWTcZitBx9l+g/FDaJk5XxqBv9buQXizXKQcXFG1w=="
+        "requested": "[2.0.2, )",
+        "resolved": "2.0.2",
+        "contentHash": "izscdjjk8EAHDBCjyz7V7n77SzkrSjh/hUGV6cyR6PlVdjYDh5ohc8yqvwSqJ9+6Uof8W6B24dIHlDKD+I1F8A=="
       },
       "JsonPath.Net": {
         "type": "Direct",
-        "requested": "[1.1.2, )",
-        "resolved": "1.1.2",
-        "contentHash": "K39Y4u6eLEPwzQNd+s0IwA9Fm/1XYl7LhDfgdoaZEOfDe92HUQLooFiVOeI/TJAx20MNlAa6oFytl8rD+/xagQ==",
+        "requested": "[1.1.4, )",
+        "resolved": "1.1.4",
+        "contentHash": "RAVhHdPEJPUoKPSSHBh82Q8Qrwl3mr1OlRj0I/IFj42DSoS8b9VUOPCCr+O6V/2gmPDbuGnf2mdic9Cp8AqfBg==",
         "dependencies": {
-          "Json.More.Net": "2.0.1.2"
+          "Json.More.Net": "2.0.2"
         }
       },
       "Microsoft.Extensions.Hosting": {
@@ -611,8 +611,8 @@
       },
       "YamlDotNet": {
         "type": "Transitive",
-        "resolved": "16.0.0",
-        "contentHash": "kZ4jR5ltFhnjaUqK9x81zXRIUTH4PTXTTEmJDNQdkDLQhcv+2Nl19r0dCSvPW1mstOYBfXTnjdieRbUO6gHMDw=="
+        "resolved": "16.1.0",
+        "contentHash": "ywYsFpZi0SKeQ+wrg1V7wZIz/ym0QJKN8IOPi06vYOgTMwHlQEr02BV5yC9IUXOBzD/pbYTuVflcObz2WdzSOw=="
       },
       "aws": {
         "type": "Project",
@@ -649,7 +649,7 @@
           "Pulumi.Aws": "[5.11.0, )",
           "Pulumi.Kubernetes": "[3.20.5, )",
           "Scriban": "[5.10.0, )",
-          "YamlDotNet": "[16.0.0, )"
+          "YamlDotNet": "[16.1.0, )"
         }
       }
     }
diff --git a/K8s/packages.lock.json b/K8s/packages.lock.json
index 949097f4..1462ee97 100644
--- a/K8s/packages.lock.json
+++ b/K8s/packages.lock.json
@@ -209,8 +209,8 @@
       },
       "YamlDotNet": {
         "type": "Transitive",
-        "resolved": "16.0.0",
-        "contentHash": "kZ4jR5ltFhnjaUqK9x81zXRIUTH4PTXTTEmJDNQdkDLQhcv+2Nl19r0dCSvPW1mstOYBfXTnjdieRbUO6gHMDw=="
+        "resolved": "16.1.0",
+        "contentHash": "ywYsFpZi0SKeQ+wrg1V7wZIz/ym0QJKN8IOPi06vYOgTMwHlQEr02BV5yC9IUXOBzD/pbYTuVflcObz2WdzSOw=="
       },
       "library": {
         "type": "Project",
@@ -222,7 +222,7 @@
           "Pulumi.Aws": "[5.11.0, )",
           "Pulumi.Kubernetes": "[3.20.5, )",
           "Scriban": "[5.10.0, )",
-          "YamlDotNet": "[16.0.0, )"
+          "YamlDotNet": "[16.1.0, )"
         }
       }
     }
diff --git a/Library/Library.csproj b/Library/Library.csproj
index d52896cb..39b5308d 100644
--- a/Library/Library.csproj
+++ b/Library/Library.csproj
@@ -11,6 +11,6 @@
     <PackageReference Include="Pulumi.Aws" Version="5.11.0" />
     <PackageReference Include="Pulumi.Kubernetes" Version="3.20.5" />
     <PackageReference Include="Scriban" Version="5.10.0" />
-    <PackageReference Include="YamlDotNet" Version="16.0.0" />
+    <PackageReference Include="YamlDotNet" Version="16.1.0" />
   </ItemGroup>
 </Project>
diff --git a/Library/packages.lock.json b/Library/packages.lock.json
index 76cc0d85..e222c3dd 100644
--- a/Library/packages.lock.json
+++ b/Library/packages.lock.json
@@ -70,9 +70,9 @@
       },
       "YamlDotNet": {
         "type": "Direct",
-        "requested": "[16.0.0, )",
-        "resolved": "16.0.0",
-        "contentHash": "kZ4jR5ltFhnjaUqK9x81zXRIUTH4PTXTTEmJDNQdkDLQhcv+2Nl19r0dCSvPW1mstOYBfXTnjdieRbUO6gHMDw=="
+        "requested": "[16.1.0, )",
+        "resolved": "16.1.0",
+        "contentHash": "ywYsFpZi0SKeQ+wrg1V7wZIz/ym0QJKN8IOPi06vYOgTMwHlQEr02BV5yC9IUXOBzD/pbYTuVflcObz2WdzSOw=="
       },
       "Ben.Demystifier": {
         "type": "Transitive",