diff --git a/.env b/.env
index 087819e..8c0deb9 100644
--- a/.env
+++ b/.env
@@ -1,3 +1,3 @@
 BUILD_HARNESS_REPO=ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=github-tags depName=defenseunicorns/build-harness
-BUILD_HARNESS_VERSION=1.10.1
+BUILD_HARNESS_VERSION=1.10.2
diff --git a/.tool-versions b/.tool-versions
index 69e4da6..a64937e 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,28 +1,28 @@
 adr-tools 3.0.0
 # renovate: datasource=github-releases depName=rebuy-de/aws-nuke
-aws-nuke 2.23.0
-awscli 2.13.5
+aws-nuke 2.24.1
+awscli 2.13.9
 # renovate: datasource=git-tags depName=https://github.com/bridgecrewio/checkov.git
-checkov 2.3.234
+checkov 2.4.1
 flux2 2.0.1
-golang 1.20.7
-golangci-lint 1.53.3
+golang 1.21.0
+golangci-lint 1.54.1
 # renovate: datasource=github-tags depName=anchore/grype
-grype 0.65.0
+grype 0.65.1
 hadolint 2.12.0
-helm 3.12.2
+helm 3.12.3
 # renovate: datasource=github-releases depName=k3d-io/k3d
-k3d 5.5.1
+k3d 5.5.2
 # renovate: datasource=github-tags depName=derailed/k9s
 k9s 0.27.4
-kubectl 1.27.4
+kubectl 1.28.0
 pre-commit 3.3.3
 sops 3.7.3
 # renovate: datasource=github-tags depName=anchore/syft
-syft 0.86.1
-terraform 1.5.4
+syft 0.87.0
+terraform 1.5.5
 terraform-docs 0.16.0
 tflint 0.47.0
 tfsec 1.28.1
 # renovate: datasource=github-releases depName=defenseunicorns/zarf
-zarf 0.28.3
+zarf 0.29.0