diff --git a/.github/workflows/aws_ec2_tests.yml b/.github/workflows/aws_ec2_tests.yml
index e586f2f..988e31a 100644
--- a/.github/workflows/aws_ec2_tests.yml
+++ b/.github/workflows/aws_ec2_tests.yml
@@ -31,11 +31,11 @@ jobs:
             matrix:
                 camunda:
                     # renovate: datasource=github-releases depName=camunda/camunda versioning=regex:^8\.6?(\.(?<patch>\d+))?$
-                    - 8.6.4
+                    - 8.6.5
                     - 8.7.0-SNAPSHOT
                 include:
                     # renovate: datasource=github-releases depName=camunda/camunda versioning=regex:^8\.6?(\.(?<patch>\d+))?$
-                    - camunda: 8.6.4
+                    - camunda: 8.6.5
                       previous_camunda: 8.6.2
                     - camunda: 8.7.0-SNAPSHOT
                       previous_camunda: 8.6.2
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ceca31e..eeef4ca 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -21,7 +21,7 @@ repos:
           - id: detect-private-key
 
     - repo: https://github.com/rhysd/actionlint
-      rev: v1.7.3
+      rev: v1.7.4
       hooks:
           - id: actionlint-docker
 
diff --git a/.tool-versions b/.tool-versions
index da1e966..963461b 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -12,11 +12,11 @@
 awscli 2.19.4
 
 # renovate: datasource=github-tags depName=rhysd/actionlint
-actionlint 1.7.3
+actionlint 1.7.4
 
 delta 0.18.2
 
-golang 1.23.2
+golang 1.23.3
 
 jq 1.7.1
 
diff --git a/aws/ec2/scripts/camunda-install.sh b/aws/ec2/scripts/camunda-install.sh
index 21af5f7..05c3eeb 100755
--- a/aws/ec2/scripts/camunda-install.sh
+++ b/aws/ec2/scripts/camunda-install.sh
@@ -10,9 +10,9 @@ set -euo pipefail
 # Executed on remote host, defaults should be set here or env vars preconfigured on remote host
 OPENJDK_VERSION=${OPENJDK_VERSION:-"21"}
 # renovate: datasource=github-releases depName=camunda/camunda versioning=regex:^8\.6?(\.(?<patch>\d+))?$
-CAMUNDA_VERSION=${CAMUNDA_VERSION:-"8.6.4"}
+CAMUNDA_VERSION=${CAMUNDA_VERSION:-"8.6.5"}
 # renovate: datasource=github-releases depName=camunda/connectors versioning=regex:^8\.6?(\.(?<patch>\d+))?$
-CAMUNDA_CONNECTORS_VERSION=${CAMUNDA_CONNECTORS_VERSION:-"8.6.3"}
+CAMUNDA_CONNECTORS_VERSION=${CAMUNDA_CONNECTORS_VERSION:-"8.6.4"}
 MNT_DIR=${MNT_DIR:-"/opt/camunda"}
 USERNAME=${USERNAME:-"camunda"}
 JAVA_OPTS="${JAVA_OPTS:- -Xmx512m}" # Default Java options, required to run commands as remote user