diff --git a/.github/actions/rosa-create-cluster/README.md b/.github/actions/rosa-create-cluster/README.md
index 5c2a26b..2eb9f84 100644
--- a/.github/actions/rosa-create-cluster/README.md
+++ b/.github/actions/rosa-create-cluster/README.md
@@ -18,7 +18,7 @@ The kube context will be set on the created cluster.
 | `aws-region` | <p>AWS region where the ROSA cluster will be deployed</p> | `true` | `""` |
 | `rosa-cli-version` | <p>Version of the ROSA CLI to use</p> | `true` | `latest` |
 | `awscli-version` | <p>Version of the aws cli to use</p> | `true` | `2.15.52` |
-| `openshift-version` | <p>Version of the OpenShift to install</p> | `true` | `4.16.11` |
+| `openshift-version` | <p>Version of the OpenShift to install</p> | `true` | `4.16.13` |
 | `replicas` | <p>Number of replicas for the ROSA cluster</p> | `true` | `2` |
 | `s3-backend-bucket` | <p>Name of the S3 bucket to store Terraform state</p> | `true` | `""` |
 | `s3-bucket-region` | <p>Region of the bucket containing the resources states, if not set, will fallback on aws-region</p> | `false` | `""` |
@@ -95,7 +95,7 @@ This action is a `composite` action.
     # Version of the OpenShift to install
     #
     # Required: true
-    # Default: 4.16.11
+    # Default: 4.16.13
 
     replicas:
     # Number of replicas for the ROSA cluster
diff --git a/.github/actions/rosa-create-cluster/action.yml b/.github/actions/rosa-create-cluster/action.yml
index 408e4e7..7259a23 100644
--- a/.github/actions/rosa-create-cluster/action.yml
+++ b/.github/actions/rosa-create-cluster/action.yml
@@ -36,7 +36,7 @@ inputs:
         description: Version of the OpenShift to install
         required: true
         # renovate: datasource=custom.rosa-camunda depName=red-hat-openshift versioning=semver
-        default: 4.16.11
+        default: 4.16.13
     replicas:
         description: Number of replicas for the ROSA cluster
         required: true
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 7d7144f..e522c85 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -37,7 +37,7 @@ jobs:
 
             - name: Create Issue From File
               if: failure() && github.event_name == 'schedule'
-              uses: peter-evans/create-issue-from-file@24452a72d85239eacf1468b0f1982a9f3fec4c94 # v5
+              uses: peter-evans/create-issue-from-file@e8ef132d6df98ed982188e460ebb3b5d4ef3a9cd # v5
               with:
                   title: Link Checker Report
                   content-filepath: ./lychee/out.md
diff --git a/.tool-versions b/.tool-versions
index 68b642d..2706389 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -3,7 +3,7 @@
 # check it with
 # diff <(sed '/^#/d; /^$/d' .tool-versions | sort) <(sed '/^#/d; /^$/d' .tool-versions) && echo ".tool-versions is sorted correctly" || echo ".tool-versions is not sorted correctly"
 
-awscli 2.17.57
+awscli 2.17.61
 
 golang 1.23.1
 
diff --git a/modules/rosa-hcp/README.md b/modules/rosa-hcp/README.md
index e2ce12f..4ea5f58 100644
--- a/modules/rosa-hcp/README.md
+++ b/modules/rosa-hcp/README.md
@@ -25,7 +25,7 @@
 | <a name="input_htpasswd_username"></a> [htpasswd\_username](#input\_htpasswd\_username) | htpasswd username | `string` | `"kubeadmin"` | no |
 | <a name="input_machine_cidr_block"></a> [machine\_cidr\_block](#input\_machine\_cidr\_block) | value of the CIDR block to use for the machine | `string` | `"10.0.0.0/18"` | no |
 | <a name="input_offline_access_token"></a> [offline\_access\_token](#input\_offline\_access\_token) | The Red Hat OCM API access token for your account | `string` | n/a | yes |
-| <a name="input_openshift_version"></a> [openshift\_version](#input\_openshift\_version) | The version of ROSA to be deployed | `string` | `"4.16.11"` | no |
+| <a name="input_openshift_version"></a> [openshift\_version](#input\_openshift\_version) | The version of ROSA to be deployed | `string` | `"4.16.13"` | no |
 | <a name="input_pod_cidr_block"></a> [pod\_cidr\_block](#input\_pod\_cidr\_block) | value of the CIDR block to use for the pods | `string` | `"10.0.64.0/18"` | no |
 | <a name="input_replicas"></a> [replicas](#input\_replicas) | The number of computer nodes to create. Must be a minimum of 2 for a single-AZ cluster, 3 for multi-AZ. | `string` | `"2"` | no |
 | <a name="input_service_cidr_block"></a> [service\_cidr\_block](#input\_service\_cidr\_block) | value of the CIDR block to use for the services | `string` | `"10.0.128.0/18"` | no |
diff --git a/modules/rosa-hcp/vars.tf b/modules/rosa-hcp/vars.tf
index 38baf2e..8cc210e 100644
--- a/modules/rosa-hcp/vars.tf
+++ b/modules/rosa-hcp/vars.tf
@@ -9,7 +9,7 @@ variable "openshift_version" {
   type        = string
   description = "The version of ROSA to be deployed"
   # renovate: datasource=custom.rosa-camunda depName=red-hat-openshift versioning=semver
-  default = "4.16.11"
+  default = "4.16.13"
   validation {
     condition     = can(regex("^[0-9]*[0-9]+.[0-9]*[0-9]+.[0-9]*[0-9]+$", var.openshift_version))
     error_message = "openshift_version must be with structure <major>.<minor>.<patch> (for example 4.13.6)."