From ae5b406d97b6fa0f1a184756db61e33f79ed838b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 22:08:23 +0000
Subject: [PATCH] chore(deps): update bump-dependencies

---
 .github/workflows/cloud-smoke-cleanup.yml     |  4 +-
 .github/workflows/cloud-smoke.yml             |  8 ++--
 .terraform.lock.hcl                           | 39 +++++++++-------
 ansible/roles/cloud_compose/defaults/main.yml |  2 +-
 ci/config-management-cloud-smoke.sh           |  2 +-
 ci/config-management-smoke.sh                 |  2 +-
 docs/Dockerfile                               |  4 +-
 modules/digitalocean/variables.tf             |  4 +-
 modules/gcp/.terraform.lock.hcl               | 39 +++++++++-------
 modules/gcp/variables.tf                      |  4 +-
 modules/linode/.terraform.lock.hcl            | 45 +++++++++++--------
 modules/linode/variables.tf                   |  4 +-
 modules/linux-vm-runtime/variables.tf         |  4 +-
 providers/do/variables.tf                     |  4 +-
 providers/gcp/variables.tf                    |  4 +-
 providers/linode/.terraform.lock.hcl          | 45 +++++++++++--------
 providers/linode/variables.tf                 |  4 +-
 .../cloud-compose/install-dependencies-cos.sh |  2 +-
 .../data/libops-internal/docker-compose.yaml  |  4 +-
 salt/cloud-compose/init.sls                   |  2 +-
 templates/apps.json                           | 16 +++----
 variables.tf                                  |  4 +-
 22 files changed, 139 insertions(+), 107 deletions(-)

diff --git a/.github/workflows/cloud-smoke-cleanup.yml b/.github/workflows/cloud-smoke-cleanup.yml
index 3e2f515..7f6e631 100644
--- a/.github/workflows/cloud-smoke-cleanup.yml
+++ b/.github/workflows/cloud-smoke-cleanup.yml
@@ -65,7 +65,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build trusted cloud CI runner
@@ -120,7 +120,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build trusted cloud CI runner
diff --git a/.github/workflows/cloud-smoke.yml b/.github/workflows/cloud-smoke.yml
index 25eeaea..44f9845 100644
--- a/.github/workflows/cloud-smoke.yml
+++ b/.github/workflows/cloud-smoke.yml
@@ -37,7 +37,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Run repository lint
@@ -92,7 +92,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build provider cloud CI runner
@@ -164,7 +164,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build provider cloud CI runner
@@ -243,7 +243,7 @@ jobs:
       - name: Install Go for cloud CI runner
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build cloud CI runner
diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl
index 23cec1c..c0489c1 100644
--- a/.terraform.lock.hcl
+++ b/.terraform.lock.hcl
@@ -26,25 +26,32 @@ provider "registry.terraform.io/hashicorp/cloudinit" {
 }
 
 provider "registry.terraform.io/hashicorp/google" {
-  version     = "7.45.0"
+  version     = "7.46.0"
   constraints = "~> 7.0"
   hashes = [
-    "h1:5bwzwKa/bvJmUkVMkrF18v9AfFeJ/wjR230oY+4LHrc=",
-    "h1:EYsKCMfXi6gtv3fE6XgNpsKrt7qFNrGFwenhlTkrrRM=",
-    "h1:FGFsRBzfeyq56BUAcb/WT676NieMX3NRfR4DBj2eEqk=",
-    "h1:snI9jfT+CtL8dH099NZCe79ciOSTuL74nPB7KaCf9pM=",
-    "zh:0f33485d068e39b1661d4ad789dfac353134b99cb5746e463e7719c053d70c06",
-    "zh:162335c448b15125924c3451dc0a411635138c00e36784d9586b9df61bc8a3d7",
-    "zh:172c9e4902e9a01b1111bbbb9063a47804ec5f4207b2221df9c398239ff3b350",
-    "zh:39acce0806f1aeca106ea529053778681e332f3f895c21c6a6a9fb267bed1058",
-    "zh:58dadd7b96b7b706e2995a04f356862be7cfd6b55f6257464c8b10986abf8efa",
-    "zh:7230a5e49abed243317b9de0ee7fd365b4a2775b532a5d66006b39c4703978ac",
-    "zh:a1b60814ee9a0726c0cd43d36da2cee3db97ec296ee66b111a7e603997de9122",
-    "zh:a454c09162ccd342e101704dca4b0eedc2d11939ac48ebd7b7d505a96c1933e6",
-    "zh:ad6fdf73e072f510a7d8e2b70f9e1021d08b9076eae146b420f333905708c982",
-    "zh:de1de65b909c99430f8bef092718b75dc5c777e98daf474a2215621f35095bb8",
+    "h1:/9i6qFwcXhRbpX4076IUrDLeyNy9uFBIJOKR1NpNRHQ=",
+    "h1:6fiUOPE3I+DWdkeHsoTR9/7tS17LDjLxdljWiqH4nfs=",
+    "h1:I09lOCSFGtdRxN7Zb7EnD+l0TEfMcWQkYllCV/sRDVI=",
+    "h1:L3O+5UStRwh0MTseTQ7/IlOruySgkWvZJuLMrCs4/D4=",
+    "h1:QGsixZ4fPD39W8839Ss3qG1sUqDET2+jm3+VxEYo0Jw=",
+    "h1:RW6+H+fkavdUf/iB0t951fjOB6ix3tUgkozRHjksKOc=",
+    "h1:UxFRPu6cbXdGVST0ON7FQCl0rS2s5BGTQBl3LGTGmK0=",
+    "h1:lf5PDcsxzVgO5ZHpl4WRr47Ft+HCxq9v9lbdUjm3qag=",
+    "h1:npeMNUZY21wqP7415Ko/M3Ktmc54f4iCF4ystQ4ngi0=",
+    "h1:okaW8gwzFZgNMjyLmFHVbyVsZ3EmLPVQvpL9LzzTyXY=",
+    "h1:vu6zcMqVIyURmZ9G8q1kVCdeXcU/m1Z6kpHs/qQUrB0=",
+    "zh:0d470c9e58a9f228a337cd52d7137943ac169511c13b4a8f3ecb075247b608d8",
+    "zh:28a14d1a8b1de00af2a527b92eb3695b5e5665b50a6ada8ba7c0367b63b4676b",
+    "zh:39cb9cea9ffff16178eec67cefccbcb80401dd38dce324d37209e9005f16d21d",
+    "zh:5637a959ed5413c8c4e656ba8cf266b8ba40193b10e9d8a54e558caf3225191e",
+    "zh:626dfd817b2d02375f3152a89ffa31ef02f3e907820bf534e8aaad19245b3058",
+    "zh:6acad5498724d6b40156ced010b6fe949b85d421e655df46c3e430f410f927e0",
+    "zh:ba06957cd47a61bfd662e02bb6e8760f1674436d5e3ca88b6b0e1000cc4d7f37",
+    "zh:dd24a83416deb21e56b70d3bf2e5e99af414868d4d686ab4a85284c2d90aacb2",
+    "zh:eb99197f62f84ea5ac29a607b5046e239427045908952d926ec5d9186f60f75e",
+    "zh:f4aa9fb2af06d8c81fc42a2db5c6223186832cedbae8d791ea5b811867dad019",
+    "zh:f4fb1431737107838ab48cff4db6eb711c6d5bf7ca64100ec9a85d2108e0265f",
     "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c",
-    "zh:fb1b9d1ea7bc79b7409f02aa7c19ba39afa22dbead69e83ae7eb2691ac5c2426",
   ]
 }
 
diff --git a/ansible/roles/cloud_compose/defaults/main.yml b/ansible/roles/cloud_compose/defaults/main.yml
index dde691b..1733290 100644
--- a/ansible/roles/cloud_compose/defaults/main.yml
+++ b/ansible/roles/cloud_compose/defaults/main.yml
@@ -12,7 +12,7 @@ cloud_compose_home: /home/cloud-compose
 cloud_compose_data_dir: /mnt/disks/data
 cloud_compose_volumes_dir: /mnt/disks/volumes
 
-cloud_compose_docker_compose_version: v5.3.1
+cloud_compose_docker_compose_version: v5.5.0
 cloud_compose_docker_buildx_version: v0.35.0
 cloud_compose_sitectl_version: latest
 cloud_compose_sitectl_package_versions: {}
diff --git a/ci/config-management-cloud-smoke.sh b/ci/config-management-cloud-smoke.sh
index 289a5fe..4390589 100755
--- a/ci/config-management-cloud-smoke.sh
+++ b/ci/config-management-cloud-smoke.sh
@@ -4,7 +4,7 @@ set -euo pipefail
 
 repo_root="$(cd "$(dirname "$0")/.." && pwd)"
 # renovate: datasource=docker depName=python packageName=python versioning=docker
-CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.11-slim@sha256:e031123e3d85762b141ad1cbc56452ba69c6e722ebf2f042cc0dc86c47c0d8b3"
+CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.14-slim@sha256:83ff1d245a3d57d04152252d3ef9cb361494d0b3395abd65a5ebe91c401c8e83"
 
 usage() {
   cat <<EOF
diff --git a/ci/config-management-smoke.sh b/ci/config-management-smoke.sh
index 5794d72..dc77406 100755
--- a/ci/config-management-smoke.sh
+++ b/ci/config-management-smoke.sh
@@ -4,7 +4,7 @@ set -euo pipefail
 
 repo_root="$(cd "$(dirname "$0")/.." && pwd)"
 # renovate: datasource=docker depName=python packageName=python versioning=docker
-CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.11-slim@sha256:e031123e3d85762b141ad1cbc56452ba69c6e722ebf2f042cc0dc86c47c0d8b3"
+CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.14-slim@sha256:83ff1d245a3d57d04152252d3ef9cb361494d0b3395abd65a5ebe91c401c8e83"
 image="${CLOUD_COMPOSE_CONFIG_MANAGEMENT_IMAGE:-$CONFIG_MANAGEMENT_IMAGE_DEFAULT}"
 container_entrypoint="$repo_root/ci/config-management-smoke-container.sh"
 
diff --git a/docs/Dockerfile b/docs/Dockerfile
index f19dc39..0368ae3 100644
--- a/docs/Dockerfile
+++ b/docs/Dockerfile
@@ -3,8 +3,8 @@ FROM python:3.14-alpine3.22@sha256:6b91e66ab2a880ce9ca5a1b91c70f45963ff71ff68268
 WORKDIR /work
 
 RUN apk add --no-cache git && \
-    pip install uv==0.11.29 && \
-    uv pip install --break-system-packages --system zensical==0.0.50
+    pip install uv==0.12.6 && \
+    uv pip install --break-system-packages --system zensical==0.0.57
 
 EXPOSE 8080
 
diff --git a/modules/digitalocean/variables.tf b/modules/digitalocean/variables.tf
index d9a84ce..116496d 100644
--- a/modules/digitalocean/variables.tf
+++ b/modules/digitalocean/variables.tf
@@ -138,9 +138,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.0")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.36.1")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/modules/gcp/.terraform.lock.hcl b/modules/gcp/.terraform.lock.hcl
index 23cec1c..c0489c1 100644
--- a/modules/gcp/.terraform.lock.hcl
+++ b/modules/gcp/.terraform.lock.hcl
@@ -26,25 +26,32 @@ provider "registry.terraform.io/hashicorp/cloudinit" {
 }
 
 provider "registry.terraform.io/hashicorp/google" {
-  version     = "7.45.0"
+  version     = "7.46.0"
   constraints = "~> 7.0"
   hashes = [
-    "h1:5bwzwKa/bvJmUkVMkrF18v9AfFeJ/wjR230oY+4LHrc=",
-    "h1:EYsKCMfXi6gtv3fE6XgNpsKrt7qFNrGFwenhlTkrrRM=",
-    "h1:FGFsRBzfeyq56BUAcb/WT676NieMX3NRfR4DBj2eEqk=",
-    "h1:snI9jfT+CtL8dH099NZCe79ciOSTuL74nPB7KaCf9pM=",
-    "zh:0f33485d068e39b1661d4ad789dfac353134b99cb5746e463e7719c053d70c06",
-    "zh:162335c448b15125924c3451dc0a411635138c00e36784d9586b9df61bc8a3d7",
-    "zh:172c9e4902e9a01b1111bbbb9063a47804ec5f4207b2221df9c398239ff3b350",
-    "zh:39acce0806f1aeca106ea529053778681e332f3f895c21c6a6a9fb267bed1058",
-    "zh:58dadd7b96b7b706e2995a04f356862be7cfd6b55f6257464c8b10986abf8efa",
-    "zh:7230a5e49abed243317b9de0ee7fd365b4a2775b532a5d66006b39c4703978ac",
-    "zh:a1b60814ee9a0726c0cd43d36da2cee3db97ec296ee66b111a7e603997de9122",
-    "zh:a454c09162ccd342e101704dca4b0eedc2d11939ac48ebd7b7d505a96c1933e6",
-    "zh:ad6fdf73e072f510a7d8e2b70f9e1021d08b9076eae146b420f333905708c982",
-    "zh:de1de65b909c99430f8bef092718b75dc5c777e98daf474a2215621f35095bb8",
+    "h1:/9i6qFwcXhRbpX4076IUrDLeyNy9uFBIJOKR1NpNRHQ=",
+    "h1:6fiUOPE3I+DWdkeHsoTR9/7tS17LDjLxdljWiqH4nfs=",
+    "h1:I09lOCSFGtdRxN7Zb7EnD+l0TEfMcWQkYllCV/sRDVI=",
+    "h1:L3O+5UStRwh0MTseTQ7/IlOruySgkWvZJuLMrCs4/D4=",
+    "h1:QGsixZ4fPD39W8839Ss3qG1sUqDET2+jm3+VxEYo0Jw=",
+    "h1:RW6+H+fkavdUf/iB0t951fjOB6ix3tUgkozRHjksKOc=",
+    "h1:UxFRPu6cbXdGVST0ON7FQCl0rS2s5BGTQBl3LGTGmK0=",
+    "h1:lf5PDcsxzVgO5ZHpl4WRr47Ft+HCxq9v9lbdUjm3qag=",
+    "h1:npeMNUZY21wqP7415Ko/M3Ktmc54f4iCF4ystQ4ngi0=",
+    "h1:okaW8gwzFZgNMjyLmFHVbyVsZ3EmLPVQvpL9LzzTyXY=",
+    "h1:vu6zcMqVIyURmZ9G8q1kVCdeXcU/m1Z6kpHs/qQUrB0=",
+    "zh:0d470c9e58a9f228a337cd52d7137943ac169511c13b4a8f3ecb075247b608d8",
+    "zh:28a14d1a8b1de00af2a527b92eb3695b5e5665b50a6ada8ba7c0367b63b4676b",
+    "zh:39cb9cea9ffff16178eec67cefccbcb80401dd38dce324d37209e9005f16d21d",
+    "zh:5637a959ed5413c8c4e656ba8cf266b8ba40193b10e9d8a54e558caf3225191e",
+    "zh:626dfd817b2d02375f3152a89ffa31ef02f3e907820bf534e8aaad19245b3058",
+    "zh:6acad5498724d6b40156ced010b6fe949b85d421e655df46c3e430f410f927e0",
+    "zh:ba06957cd47a61bfd662e02bb6e8760f1674436d5e3ca88b6b0e1000cc4d7f37",
+    "zh:dd24a83416deb21e56b70d3bf2e5e99af414868d4d686ab4a85284c2d90aacb2",
+    "zh:eb99197f62f84ea5ac29a607b5046e239427045908952d926ec5d9186f60f75e",
+    "zh:f4aa9fb2af06d8c81fc42a2db5c6223186832cedbae8d791ea5b811867dad019",
+    "zh:f4fb1431737107838ab48cff4db6eb711c6d5bf7ca64100ec9a85d2108e0265f",
     "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c",
-    "zh:fb1b9d1ea7bc79b7409f02aa7c19ba39afa22dbead69e83ae7eb2691ac5c2426",
   ]
 }
 
diff --git a/modules/gcp/variables.tf b/modules/gcp/variables.tf
index 77ea1d4..bda3c4d 100644
--- a/modules/gcp/variables.tf
+++ b/modules/gcp/variables.tf
@@ -343,14 +343,14 @@ variable "sitectl_package_versions" {
 variable "docker_compose_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-  default     = "v5.3.1"
+  default     = "v5.5.0"
   description = "Docker Compose release tag installed as the docker compose CLI plugin on hosts that need a manually managed plugin."
 }
 
 variable "docker_buildx_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-  default     = "v0.35.0"
+  default     = "v0.36.1"
   description = "Docker Buildx release tag installed as the docker buildx CLI plugin on hosts that need a manually managed plugin."
 }
 
diff --git a/modules/linode/.terraform.lock.hcl b/modules/linode/.terraform.lock.hcl
index 811ad11..515ac2f 100644
--- a/modules/linode/.terraform.lock.hcl
+++ b/modules/linode/.terraform.lock.hcl
@@ -26,25 +26,34 @@ provider "registry.terraform.io/hashicorp/http" {
 }
 
 provider "registry.terraform.io/linode/linode" {
-  version     = "4.3.0"
+  version     = "4.4.0"
   constraints = "~> 4.0"
   hashes = [
-    "h1:9f82B30cdnQ/f9MvBOJIIzPG63LQ7Rvy0bKyCxEOISM=",
-    "h1:NFvTyf4HvB5XENiZTNfRhysfLqc/yfnrw34nldk2+Bo=",
-    "h1:S7rLqWWTDEIBkte0+wUVHNTOWI96G2+St5FGCLCey8U=",
-    "h1:w/Dk56645sMU12AcdGNwJXJFqZLQQ3szHLbUE0uSn+0=",
-    "zh:010f08fa4dfbb77117ceac2629586941e262edc45c778659ae2a55c0b398ec23",
-    "zh:15a4ce678298eb17e67e22b7481a81991892804cc9f88a4883fc9eef30ab9437",
-    "zh:188828a08ce01de32a95f5f18d5db2cc86652fac03c85b20e8b83f615f2d37a0",
-    "zh:1a81ab9cebb8d1ff037345eb21eecaeecafc750c0a16a6b8d888a8cd0813bf58",
-    "zh:209a6aad0025d741e1a98d391cf2343901fcc626c3fbb070804ced02e7d6811c",
-    "zh:3bd23a831d03173799776da1ff451ada3539c879274ad78c99204a75edd1fbef",
-    "zh:60917b710106c5762111f90cbd356d0975db5b38d7e6ee4cafa821286a6030f8",
-    "zh:662844969f8af6194622b1f29f1f739b8b4539f25494011cf863c6ee1f029cad",
-    "zh:7d142f52374d71816be816c21d8fd35add09e28a97bca90b8ec19962ceee3327",
-    "zh:80cc8c523644e5379fe674665f067a74c860d2d0f78134d113af11bfe3485507",
-    "zh:b318a8f29e4e271594e39c2649536a9766c0a80e142a2b46cc72942d5317cc39",
-    "zh:c18ac394fe1b4e4f0818a9e2efb717032f6c8063d8c9efe8debdc63e763b0f25",
-    "zh:f3ad4cee92346805dfccf12a3b8044a4615dc9c1ffa9168e0a25240210235461",
+    "h1:1kB6Fc/spED8t7mwHimGZ/qryegfUX7IgISFwTciJik=",
+    "h1:4ooE//LtdBn0dVe78Dhj2ySBl4hs/bsUGorweoNo1rI=",
+    "h1:74d2ghRrn02SJ2A9BnLfwvYKruuL0sz4zMMfdRi6mPM=",
+    "h1:8SphjunDhDo3D9k/ZAJQ4mQeILrmFgGl0q77JXOVm44=",
+    "h1:AFyizUmgpe6xxYUaQAestlJURCFaYD60SA2HOwBw4gg=",
+    "h1:EXTFuUSz1ejFTv1bhFRdxSgwmzbL0H1mrozer5u0bjI=",
+    "h1:GmlC36pAo96Xm8pH4x3fjDIgC/6rvtK8LkLbiJl5LO8=",
+    "h1:HdEiqzmxUtudZCSRtB2MnOiyP2aM1hOejE3gmXZkI6w=",
+    "h1:PbVzCxArgGa8ok+XxTw3Yqf+dxl4IX/Vorvmbtka/4U=",
+    "h1:XbvymwLyKc9WbFVid49V92aBDK1F1Ydu69vvnQ8fJXA=",
+    "h1:elQk+R72jn1099G2iCxvog3t6OtTVf+1455VRXZggOg=",
+    "h1:jgn0jDSoPub1GeSO9rQPpLNCmQdy9351Shu1c7uXmJo=",
+    "h1:wFT1SHkY4AMc86lkfcvj2z2/l4jWc1BZgJBQFUJ4hxc=",
+    "zh:2704ecfe22669b40a2945b803ab9d7326a24bb8487430dba99a5454529af0b85",
+    "zh:2fcddfac285ce5c4742494bd3f8912c2957c9342b59fc87d401ccf528bd2a4c9",
+    "zh:3cce45411197bfea43bbe595527f73f53d441d977e8caf5df1d77fe8723dc5c1",
+    "zh:3d73359830702cc4283465efac98928986a0df6ae2a8cea4004e314ebee6b31b",
+    "zh:47353444f4bbec38e0e4dcf3dc43299480ac5bc792cd4708a666d3efc3a96f61",
+    "zh:50af1777398b3d941abd33feb90d8d735ac015168244df8bd2f18482031140d5",
+    "zh:57342c251577144c2f6688586b1fa4cd8106d3029d1dad8680145da0dc3a7581",
+    "zh:695d2948ff2346b9888bd010c5e829e1366d359cd7db8bfd9793e59423e65278",
+    "zh:9cd7a600109559fd742689aa4ed7092514a5e7a08131f54b76d52179e8ab486f",
+    "zh:cda1ef815f3a8c68d5882f0fbb6e28a6643ee287a3cfadefe1684cca52f0f170",
+    "zh:cf0bc5f8977f4108d07124b236553a549c5603afbc8af5adb40cc0fa17506e70",
+    "zh:cf37d8abdf1328ea2db280b6d67c349b4e7cf86a0a013bad98a7ab71d91d90aa",
+    "zh:d5de04a523fb6ae70f369d0f9b4f77d4d359a298be009bf352038d57c0778ce6",
   ]
 }
diff --git a/modules/linode/variables.tf b/modules/linode/variables.tf
index dd4e873..71d3015 100644
--- a/modules/linode/variables.tf
+++ b/modules/linode/variables.tf
@@ -152,9 +152,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.0")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.36.1")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/modules/linux-vm-runtime/variables.tf b/modules/linux-vm-runtime/variables.tf
index effdbe6..5431f74 100644
--- a/modules/linux-vm-runtime/variables.tf
+++ b/modules/linux-vm-runtime/variables.tf
@@ -336,14 +336,14 @@ variable "sitectl_verify_args" {
 variable "docker_compose_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-  default     = "v5.3.1"
+  default     = "v5.5.0"
   description = "Docker Compose release tag installed as the Docker CLI plugin."
 }
 
 variable "docker_buildx_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-  default     = "v0.35.0"
+  default     = "v0.36.1"
   description = "Docker Buildx release tag installed as the Docker CLI plugin."
 }
 
diff --git a/providers/do/variables.tf b/providers/do/variables.tf
index a3834ed..73a58cd 100644
--- a/providers/do/variables.tf
+++ b/providers/do/variables.tf
@@ -149,9 +149,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.0")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.36.1")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/providers/gcp/variables.tf b/providers/gcp/variables.tf
index 4c90ff4..097f930 100644
--- a/providers/gcp/variables.tf
+++ b/providers/gcp/variables.tf
@@ -261,9 +261,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.0")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.36.1")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/providers/linode/.terraform.lock.hcl b/providers/linode/.terraform.lock.hcl
index 811ad11..515ac2f 100644
--- a/providers/linode/.terraform.lock.hcl
+++ b/providers/linode/.terraform.lock.hcl
@@ -26,25 +26,34 @@ provider "registry.terraform.io/hashicorp/http" {
 }
 
 provider "registry.terraform.io/linode/linode" {
-  version     = "4.3.0"
+  version     = "4.4.0"
   constraints = "~> 4.0"
   hashes = [
-    "h1:9f82B30cdnQ/f9MvBOJIIzPG63LQ7Rvy0bKyCxEOISM=",
-    "h1:NFvTyf4HvB5XENiZTNfRhysfLqc/yfnrw34nldk2+Bo=",
-    "h1:S7rLqWWTDEIBkte0+wUVHNTOWI96G2+St5FGCLCey8U=",
-    "h1:w/Dk56645sMU12AcdGNwJXJFqZLQQ3szHLbUE0uSn+0=",
-    "zh:010f08fa4dfbb77117ceac2629586941e262edc45c778659ae2a55c0b398ec23",
-    "zh:15a4ce678298eb17e67e22b7481a81991892804cc9f88a4883fc9eef30ab9437",
-    "zh:188828a08ce01de32a95f5f18d5db2cc86652fac03c85b20e8b83f615f2d37a0",
-    "zh:1a81ab9cebb8d1ff037345eb21eecaeecafc750c0a16a6b8d888a8cd0813bf58",
-    "zh:209a6aad0025d741e1a98d391cf2343901fcc626c3fbb070804ced02e7d6811c",
-    "zh:3bd23a831d03173799776da1ff451ada3539c879274ad78c99204a75edd1fbef",
-    "zh:60917b710106c5762111f90cbd356d0975db5b38d7e6ee4cafa821286a6030f8",
-    "zh:662844969f8af6194622b1f29f1f739b8b4539f25494011cf863c6ee1f029cad",
-    "zh:7d142f52374d71816be816c21d8fd35add09e28a97bca90b8ec19962ceee3327",
-    "zh:80cc8c523644e5379fe674665f067a74c860d2d0f78134d113af11bfe3485507",
-    "zh:b318a8f29e4e271594e39c2649536a9766c0a80e142a2b46cc72942d5317cc39",
-    "zh:c18ac394fe1b4e4f0818a9e2efb717032f6c8063d8c9efe8debdc63e763b0f25",
-    "zh:f3ad4cee92346805dfccf12a3b8044a4615dc9c1ffa9168e0a25240210235461",
+    "h1:1kB6Fc/spED8t7mwHimGZ/qryegfUX7IgISFwTciJik=",
+    "h1:4ooE//LtdBn0dVe78Dhj2ySBl4hs/bsUGorweoNo1rI=",
+    "h1:74d2ghRrn02SJ2A9BnLfwvYKruuL0sz4zMMfdRi6mPM=",
+    "h1:8SphjunDhDo3D9k/ZAJQ4mQeILrmFgGl0q77JXOVm44=",
+    "h1:AFyizUmgpe6xxYUaQAestlJURCFaYD60SA2HOwBw4gg=",
+    "h1:EXTFuUSz1ejFTv1bhFRdxSgwmzbL0H1mrozer5u0bjI=",
+    "h1:GmlC36pAo96Xm8pH4x3fjDIgC/6rvtK8LkLbiJl5LO8=",
+    "h1:HdEiqzmxUtudZCSRtB2MnOiyP2aM1hOejE3gmXZkI6w=",
+    "h1:PbVzCxArgGa8ok+XxTw3Yqf+dxl4IX/Vorvmbtka/4U=",
+    "h1:XbvymwLyKc9WbFVid49V92aBDK1F1Ydu69vvnQ8fJXA=",
+    "h1:elQk+R72jn1099G2iCxvog3t6OtTVf+1455VRXZggOg=",
+    "h1:jgn0jDSoPub1GeSO9rQPpLNCmQdy9351Shu1c7uXmJo=",
+    "h1:wFT1SHkY4AMc86lkfcvj2z2/l4jWc1BZgJBQFUJ4hxc=",
+    "zh:2704ecfe22669b40a2945b803ab9d7326a24bb8487430dba99a5454529af0b85",
+    "zh:2fcddfac285ce5c4742494bd3f8912c2957c9342b59fc87d401ccf528bd2a4c9",
+    "zh:3cce45411197bfea43bbe595527f73f53d441d977e8caf5df1d77fe8723dc5c1",
+    "zh:3d73359830702cc4283465efac98928986a0df6ae2a8cea4004e314ebee6b31b",
+    "zh:47353444f4bbec38e0e4dcf3dc43299480ac5bc792cd4708a666d3efc3a96f61",
+    "zh:50af1777398b3d941abd33feb90d8d735ac015168244df8bd2f18482031140d5",
+    "zh:57342c251577144c2f6688586b1fa4cd8106d3029d1dad8680145da0dc3a7581",
+    "zh:695d2948ff2346b9888bd010c5e829e1366d359cd7db8bfd9793e59423e65278",
+    "zh:9cd7a600109559fd742689aa4ed7092514a5e7a08131f54b76d52179e8ab486f",
+    "zh:cda1ef815f3a8c68d5882f0fbb6e28a6643ee287a3cfadefe1684cca52f0f170",
+    "zh:cf0bc5f8977f4108d07124b236553a549c5603afbc8af5adb40cc0fa17506e70",
+    "zh:cf37d8abdf1328ea2db280b6d67c349b4e7cf86a0a013bad98a7ab71d91d90aa",
+    "zh:d5de04a523fb6ae70f369d0f9b4f77d4d359a298be009bf352038d57c0778ce6",
   ]
 }
diff --git a/providers/linode/variables.tf b/providers/linode/variables.tf
index 1f5025b..871b609 100644
--- a/providers/linode/variables.tf
+++ b/providers/linode/variables.tf
@@ -164,9 +164,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.0")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.36.1")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/rootfs/home/cloud-compose/install-dependencies-cos.sh b/rootfs/home/cloud-compose/install-dependencies-cos.sh
index ba1da78..46a08a1 100755
--- a/rootfs/home/cloud-compose/install-dependencies-cos.sh
+++ b/rootfs/home/cloud-compose/install-dependencies-cos.sh
@@ -3,7 +3,7 @@
 set -euo pipefail
 
 # renovate: datasource=docker depName=alpine packageName=alpine versioning=docker
-ALPINE_BUILD_IMAGE="alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce"
+ALPINE_BUILD_IMAGE="alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b"
 MAKE_VERSION="4.4.1"
 
 valid_make_binary() {
diff --git a/rootfs/mnt/disks/data/libops-internal/docker-compose.yaml b/rootfs/mnt/disks/data/libops-internal/docker-compose.yaml
index 21579cc..ddc5de3 100644
--- a/rootfs/mnt/disks/data/libops-internal/docker-compose.yaml
+++ b/rootfs/mnt/disks/data/libops-internal/docker-compose.yaml
@@ -4,7 +4,7 @@ services:
   lightsout:
     profiles:
       - lightsout
-    image: ghcr.io/libops/lightsout:main@sha256:4d38ac380c86514d72efbcce0af9ea8ffd7ff86e97abea3d0b3c946cf204eaae
+    image: ghcr.io/libops/lightsout:main@sha256:21ba52b88073aa9b8225836b49d0aeba04b2815b0fb6322139ec27bbaeb7068a
     ports:
       - "8808:8808"
     networks:
@@ -40,7 +40,7 @@ services:
       - /mnt/disks/data/docker/:/var/lib/docker:ro
       - /dev/disk/:/dev/disk:ro
   cap:
-    image: ghcr.io/libops/cap:main@sha256:c9d6a6c2ded2d0a72ceff382fd71da9cd161c17c071319b45270b07c0f54a5ed
+    image: ghcr.io/libops/cap:main@sha256:e365ea355cc82a14b620d005ab6c443b4d9bff27e6eb68498fa3baefb9347f90
     command: ["/app/binary"]
     networks:
       - internal
diff --git a/salt/cloud-compose/init.sls b/salt/cloud-compose/init.sls
index a4e3945..ce1b662 100644
--- a/salt/cloud-compose/init.sls
+++ b/salt/cloud-compose/init.sls
@@ -482,7 +482,7 @@
   'DOCKER_COMPOSE_DIR': primary_project.get('project_dir', project_dir),
   'DOCKER_COMPOSE_REPO': primary_project.get('docker_compose_repo', repo),
   'DOCKER_COMPOSE_BRANCH': primary_project.get('docker_compose_branch', branch),
-  'DOCKER_COMPOSE_VERSION': docker.get('compose_version', cc.get('docker_compose_version', 'v5.3.1')),
+  'DOCKER_COMPOSE_VERSION': docker.get('compose_version', cc.get('docker_compose_version', 'v5.5.0')),
   'DOCKER_BUILDX_VERSION': docker.get('buildx_version', cc.get('docker_buildx_version', 'v0.35.0')),
   'GCP_PROJECT': '',
   'GCP_PROJECT_NUMBER': '',
diff --git a/templates/apps.json b/templates/apps.json
index c694cfd..33ec658 100644
--- a/templates/apps.json
+++ b/templates/apps.json
@@ -18,7 +18,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-archivesspace": "v2.1.1"
+        "sitectl-archivesspace": "v2.1.2"
       }
     },
     "ojs": {
@@ -29,7 +29,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-ojs": "v1.4.0"
+        "sitectl-ojs": "v1.4.1"
       }
     },
     "isle": {
@@ -42,8 +42,8 @@
       },
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-drupal": "v1.5.0",
-        "sitectl-isle": "v1.6.0"
+        "sitectl-drupal": "v1.6.2",
+        "sitectl-isle": "v1.7.3"
       }
     },
     "drupal": {
@@ -54,7 +54,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-drupal": "v1.5.0"
+        "sitectl-drupal": "v1.6.2"
       }
     },
     "wp": {
@@ -65,7 +65,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-wp": "v2.1.0"
+        "sitectl-wp": "v2.1.1"
       }
     },
     "omeka-s": {
@@ -76,7 +76,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-omeka-s": "v1.4.0"
+        "sitectl-omeka-s": "v1.4.1"
       }
     },
     "omeka-classic": {
@@ -87,7 +87,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-omeka-classic": "v1.4.0"
+        "sitectl-omeka-classic": "v1.4.1"
       }
     }
   }
diff --git a/variables.tf b/variables.tf
index f91cf82..6b156d5 100644
--- a/variables.tf
+++ b/variables.tf
@@ -272,9 +272,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.0")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.36.1")
     }), {})
 
     managed_runtime = optional(object({