diff --git a/.env b/.env
index 54d7c91..efcada6 100644
--- a/.env
+++ b/.env
@@ -1,3 +1,3 @@
 BUILD_HARNESS_REPO=ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=github-tags depName=defenseunicorns/build-harness
-BUILD_HARNESS_VERSION=1.11.1
+BUILD_HARNESS_VERSION=1.11.2
diff --git a/.tool-versions b/.tool-versions
index 0ffc77b..e244c06 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,14 +1,14 @@
 adr-tools 3.0.0
 # renovate: datasource=github-releases depName=rebuy-de/aws-nuke
 aws-nuke 2.25.0
-awscli 2.13.19
+awscli 2.13.21
 # renovate: datasource=git-tags depName=https://github.com/bridgecrewio/checkov.git
-checkov 2.4.42
+checkov 2.4.48
 flux2 2.1.1
 golang 1.21.1
 golangci-lint 1.54.2
 # renovate: datasource=github-tags depName=anchore/grype
-grype 0.68.1
+grype 0.69.0
 hadolint 2.12.0
 helm 3.12.3
 # renovate: datasource=github-releases depName=k3d-io/k3d
@@ -19,7 +19,7 @@ kubectl 1.28.2
 pre-commit 3.4.0
 sops 3.8.0
 # renovate: datasource=github-tags depName=anchore/syft
-syft 0.90.0
+syft 0.91.0
 terraform 1.5.7
 terraform-docs 0.16.0
 tflint 0.48.0