diff --git a/apps/forgejo/runner.yaml b/apps/forgejo/runner.yaml
index 9279b74..cc01616 100644
--- a/apps/forgejo/runner.yaml
+++ b/apps/forgejo/runner.yaml
@@ -170,7 +170,7 @@ spec:
             - name: cache
               mountPath: /cache
         - name: docker
-          image: docker.io/library/docker:29.9.0-dind
+          image: docker.io/library/docker:29.9.1-dind
           # --mtu は docker0 だけ。Runner がジョブごとに作るネットワークは --default-network-opt で揃える
           args:
             - --mtu=1400
diff --git a/tools/Dockerfile b/tools/Dockerfile
index d4a23e5..32036bf 100644
--- a/tools/Dockerfile
+++ b/tools/Dockerfile
@@ -20,11 +20,11 @@ ARG HELM_VERSION=v4.3.1
 # renovate: datasource=github-releases depName=getsops/sops
 ARG SOPS_VERSION=v3.13.3
 # renovate: datasource=github-releases depName=Infisical/cli
-ARG INFISICAL_VERSION=v0.44.1
+ARG INFISICAL_VERSION=v0.44.2
 # renovate: datasource=github-releases depName=restic/restic
 ARG RESTIC_VERSION=v0.19.1
 # renovate: datasource=github-releases depName=pulumi/pulumi
-ARG PULUMI_VERSION=v3.269.0
+ARG PULUMI_VERSION=v3.270.0
 # renovate: datasource=npm depName=cf
 ARG CF_VERSION=1.0.0-beta.18