diff --git a/MODULE.bazel.lock b/MODULE.bazel.lock
index 7772468f..6acd66c2 100644
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -39,8 +39,8 @@
     "https://bcr.bazel.build/modules/rules_cc/0.0.9/source.json": "1f1ba6fea244b616de4a554a0f4983c91a9301640c8fe0dd1d410254115c8430",
     "https://bcr.bazel.build/modules/rules_java/4.0.0/MODULE.bazel": "5a78a7ae82cd1a33cef56dc578c7d2a46ed0dca12643ee45edbb8417899e6f74",
     "https://bcr.bazel.build/modules/rules_java/5.3.5/MODULE.bazel": "a4ec4f2db570171e3e5eb753276ee4b389bae16b96207e9d3230895c99644b86",
-    "https://bcr.bazel.build/modules/rules_java/7.6.1/MODULE.bazel": "2f14b7e8a1aa2f67ae92bc69d1ec0fa8d9f827c4e17ff5e5f02e91caa3b2d0fe",
-    "https://bcr.bazel.build/modules/rules_java/7.6.1/source.json": "8f3f3076554e1558e8e468b2232991c510ecbcbed9e6f8c06ac31c93bcf38362",
+    "https://bcr.bazel.build/modules/rules_java/7.6.5/MODULE.bazel": "481164be5e02e4cab6e77a36927683263be56b7e36fef918b458d7a8a1ebadb1",
+    "https://bcr.bazel.build/modules/rules_java/7.6.5/source.json": "a805b889531d1690e3c72a7a7e47a870d00323186a9904b36af83aa3d053ee8d",
     "https://bcr.bazel.build/modules/rules_jvm_external/4.4.2/MODULE.bazel": "a56b85e418c83eb1839819f0b515c431010160383306d13ec21959ac412d2fe7",
     "https://bcr.bazel.build/modules/rules_jvm_external/4.4.2/source.json": "a075731e1b46bc8425098512d038d416e966ab19684a10a34f4741295642fc35",
     "https://bcr.bazel.build/modules/rules_license/0.0.3/MODULE.bazel": "627e9ab0247f7d1e05736b59dbb1b6871373de5ad31c3011880b4133cafd4bd0",
@@ -63,8 +63,8 @@
     "https://bcr.bazel.build/modules/upb/0.0.0-20220923-a547704/source.json": "f1ef7d3f9e0e26d4b23d1c39b5f5de71f584dd7d1b4ef83d9bbba6ec7a6a6459",
     "https://bcr.bazel.build/modules/zlib/1.2.11/MODULE.bazel": "07b389abc85fdbca459b69e2ec656ae5622873af3f845e1c9d80fe179f3effa0",
     "https://bcr.bazel.build/modules/zlib/1.2.12/MODULE.bazel": "3b1a8834ada2a883674be8cbd36ede1b6ec481477ada359cd2d3ddc562340b27",
-    "https://bcr.bazel.build/modules/zlib/1.3/MODULE.bazel": "6a9c02f19a24dcedb05572b2381446e27c272cd383aed11d41d99da9e3167a72",
-    "https://bcr.bazel.build/modules/zlib/1.3/source.json": "b6b43d0737af846022636e6e255fd4a96fee0d34f08f3830e6e0bac51465c37c"
+    "https://bcr.bazel.build/modules/zlib/1.3.1.bcr.3/MODULE.bazel": "af322bc08976524477c79d1e45e241b6efbeb918c497e8840b8ab116802dda79",
+    "https://bcr.bazel.build/modules/zlib/1.3.1.bcr.3/source.json": "2be409ac3c7601245958cd4fcdff4288be79ed23bd690b4b951f500d54ee6e7d"
   },
   "selectedYankedVersions": {},
   "moduleExtensions": {
diff --git a/hack/checksums.sh b/hack/checksums.sh
new file mode 100755
index 00000000..3bb464b6
--- /dev/null
+++ b/hack/checksums.sh
@@ -0,0 +1,45 @@
+#!/bin/sh
+
+# Copyright 2024 Google Inc. All rights reserved.
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+
+#     http://www.apache.org/licenses/LICENSE-2.0
+
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -eu
+
+
+LATEST=$(curl --silent -L https://api.github.com/repos/GoogleContainerTools/container-structure-test/releases/latest | jq -r .tag_name)
+
+TAG="${TAG:-$LATEST}"
+
+
+echo "Using tag: $LATEST"
+
+checksums="$(curl --silent -L https://github.com/GoogleContainerTools/container-structure-test/releases/download/$TAG/checksums.txt)"
+
+
+echo "Paste this into repositories.bzl"
+echo ""
+echo ""
+echo ""
+
+echo "_VERSION=\"$TAG\""
+echo "_HASHES = {"
+while IFS= read -r line; do
+	read -r sha256 filename <<< "$line"
+	integrity="sha256-$(echo $sha256 | xxd -r -p | base64)"
+	filename=${filename#container-structure-test-}
+    echo "    \"$filename\": \"$integrity\""
+done <<< "$checksums"
+echo "}"
+
+echo ""
diff --git a/repositories.bzl b/repositories.bzl
index 9cd10299..7fade3bc 100644
--- a/repositories.bzl
+++ b/repositories.bzl
@@ -8,15 +8,15 @@ load("//bazel:toolchains_repo.bzl", "PLATFORMS", "toolchains_repo")
 # bazel build @structure_test_st_darwin_amd64//... @structure_test_st_darwin_arm64//... @structure_test_st_linux_arm64//... \
 # @structure_test_st_linux_s390x//...  @structure_test_st_linux_amd64//... @structure_test_st_windows_amd64//...
 
-_VERSION = "v1.19.0"
+_VERSION="v1.19.2"
 _HASHES = {
-    "darwin-amd64": "sha256-Df7utNLHZ6hIowpSo0X1oFxNFZoGeZ1DhvkNe+Qg4A4=",
-    "darwin-arm64": "sha256-qYg6KylartuF5Prmwrs172fycCWoC+TmSe7MReNOT4s=",
-    "linux-amd64": "sha256-+jSKFvjR1WN+vciuTY4UhbdXT8950SvqjbX9qNVDf3U=",
-    "linux-arm64": "sha256-Vp1aUQprdkg13C0T5K/Ua1gsOx8YYNye2KoskD2Yh8c=",
-    "linux-ppc64le": "sha256-dlDUm5hZbLcpRvVWoFHwVzTKdnlPvAikf/16tQSMyOA=",
-    "linux-s390x": "sha256-KSZ95vOjSVzazyU2sL2qE4MvcHa1TBp1Dt3kDVt1ua8=",
-    "windows-amd64.exe": "sha256-XqfaYiUqCiS4sDmM1ZJ0lLaiyT4Wru1bBKHHP6KACWY=",
+    "darwin-amd64": "sha256-mkBKyy32nnivskrvlj0BbPnauhXnUckmBJJZzrDdKYU="
+    "darwin-arm64": "sha256-qdy4KDN143ar99X2kIwvXwyQO/NBqwMCZhmVJ65Pu3Y="
+    "linux-amd64": "sha256-u6b/uaz5Z0QMHMD+Iz2uM9ClCq4ULxLIWCYZAue/tAU="
+    "linux-arm64": "sha256-ebFieFZDy+X9ZbNAhdUi6KPKRyBe+bsizBaBqoimZ88="
+    "linux-ppc64le": "sha256-pkvTL+pb9/kxVxs0HBPf3CgTLD4z6mkdXlrZRU+iiIE="
+    "linux-s390x": "sha256-v2Nu34HxrGtJ1Op8qWMtoFi36CNW4hI83RRTVd7uq7s="
+    "windows-amd64.exe": "sha256-J9+eC2BlqXXhLIDyjMpFm10uFAQcV8HzPOuz76y1WbE="
 }
 
 STRUCTURE_TEST_BUILD_TMPL = """\