diff --git a/task/buildah-remote/0.1/buildah-remote.yaml b/task/buildah-remote/0.1/buildah-remote.yaml
index 0899981cf8..8680427140 100644
--- a/task/buildah-remote/0.1/buildah-remote.yaml
+++ b/task/buildah-remote/0.1/buildah-remote.yaml
@@ -387,7 +387,7 @@ spec:
     - mountPath: /var/lib/containers
       name: varlibcontainers
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:1-172.1712567222@sha256:c96f839e927c52990143df4efb2872946fcd5de9e1ed2014947bb2cf3084c27a
+    image: registry.access.redhat.com/ubi9/python-39:1-182.1714671018@sha256:f33083d843898a6ffae35d91d6ff4bf6cfe0d9585c7897b04834cda30ede5b5c
     name: merge-syft-sboms
     script: |
       #!/bin/python3
@@ -436,7 +436,7 @@ spec:
       runAsUser: 0
     workingDir: $(workspaces.source.path)
   - computeResources: {}
-    image: registry.access.redhat.com/ubi9/python-39:1-172.1712567222@sha256:c96f839e927c52990143df4efb2872946fcd5de9e1ed2014947bb2cf3084c27a
+    image: registry.access.redhat.com/ubi9/python-39:1-182.1714671018@sha256:f33083d843898a6ffae35d91d6ff4bf6cfe0d9585c7897b04834cda30ede5b5c
     name: create-purl-sbom
     script: |
       #!/bin/python3
diff --git a/task/buildah-rhtap/0.1/buildah-rhtap.yaml b/task/buildah-rhtap/0.1/buildah-rhtap.yaml
index 59489ca788..6e1ecf9cdc 100644
--- a/task/buildah-rhtap/0.1/buildah-rhtap.yaml
+++ b/task/buildah-rhtap/0.1/buildah-rhtap.yaml
@@ -57,7 +57,7 @@ spec:
       value: $(params.BUILD_ARGS_FILE)
   steps:
   - name: build
-    image: registry.access.redhat.com/ubi9/buildah@sha256:3b11aae36f6c762e01731952ee6fb8e89c41660ce410e4c30d0bfc6496bca93c
+    image: registry.access.redhat.com/ubi9/buildah@sha256:b2704a17d310c5d97cd718c7e876d42e2771eb3c7d6e826616602e35614bdd7c
     script: |
       # Check if the Dockerfile exists
       SOURCE_CODE_DIR=source
diff --git a/task/buildah/0.1/buildah.yaml b/task/buildah/0.1/buildah.yaml
index 4e0e53b9d5..702e9ef004 100644
--- a/task/buildah/0.1/buildah.yaml
+++ b/task/buildah/0.1/buildah.yaml
@@ -304,7 +304,7 @@ spec:
       runAsUser: 0
 
   - name: merge-syft-sboms
-    image: registry.access.redhat.com/ubi9/python-39:1-172.1712567222@sha256:c96f839e927c52990143df4efb2872946fcd5de9e1ed2014947bb2cf3084c27a
+    image: registry.access.redhat.com/ubi9/python-39:1-182.1714671018@sha256:f33083d843898a6ffae35d91d6ff4bf6cfe0d9585c7897b04834cda30ede5b5c
     script: |
       #!/bin/python3
       import json
@@ -353,7 +353,7 @@ spec:
       runAsUser: 0
 
   - name: create-purl-sbom
-    image: registry.access.redhat.com/ubi9/python-39:1-172.1712567222@sha256:c96f839e927c52990143df4efb2872946fcd5de9e1ed2014947bb2cf3084c27a
+    image: registry.access.redhat.com/ubi9/python-39:1-182.1714671018@sha256:f33083d843898a6ffae35d91d6ff4bf6cfe0d9585c7897b04834cda30ede5b5c
     script: |
       #!/bin/python3
       import json
diff --git a/task/s2i-java/0.1/s2i-java.yaml b/task/s2i-java/0.1/s2i-java.yaml
index 1bc2bce9b4..04b195794b 100644
--- a/task/s2i-java/0.1/s2i-java.yaml
+++ b/task/s2i-java/0.1/s2i-java.yaml
@@ -128,7 +128,7 @@ spec:
       container=$(buildah from --pull-never $IMAGE)
       buildah mount $container | tee /workspace/container_path
       echo $container > /workspace/container_name
-    image: registry.access.redhat.com/ubi9/buildah:9.3-12@sha256:3b11aae36f6c762e01731952ee6fb8e89c41660ce410e4c30d0bfc6496bca93c
+    image: registry.access.redhat.com/ubi9/buildah:9.4-6.1714668835@sha256:b2704a17d310c5d97cd718c7e876d42e2771eb3c7d6e826616602e35614bdd7c
     name: build
     env:
     - name: COMMIT_SHA
@@ -180,7 +180,7 @@ spec:
       name: varlibcontainers
     securityContext:
       runAsUser: 0
-  - image: registry.access.redhat.com/ubi9/python-39:1-172.1712567222@sha256:c96f839e927c52990143df4efb2872946fcd5de9e1ed2014947bb2cf3084c27a
+  - image: registry.access.redhat.com/ubi9/python-39:1-182.1714671018@sha256:f33083d843898a6ffae35d91d6ff4bf6cfe0d9585c7897b04834cda30ede5b5c
     # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
     # the cluster will set imagePullPolicy to IfNotPresent
     # also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
@@ -227,7 +227,7 @@ spec:
     securityContext:
       runAsUser: 0
 
-  - image: registry.access.redhat.com/ubi9/buildah:9.3-12@sha256:3b11aae36f6c762e01731952ee6fb8e89c41660ce410e4c30d0bfc6496bca93c
+  - image: registry.access.redhat.com/ubi9/buildah:9.4-6.1714668835@sha256:b2704a17d310c5d97cd718c7e876d42e2771eb3c7d6e826616602e35614bdd7c
     # default above is image digest specific
     name: inject-sbom-and-push
     computeResources: {}
diff --git a/task/s2i-nodejs/0.1/s2i-nodejs.yaml b/task/s2i-nodejs/0.1/s2i-nodejs.yaml
index ea03d6daca..086a8039d4 100644
--- a/task/s2i-nodejs/0.1/s2i-nodejs.yaml
+++ b/task/s2i-nodejs/0.1/s2i-nodejs.yaml
@@ -113,7 +113,7 @@ spec:
       container=$(buildah from --pull-never $IMAGE)
       buildah mount $container | tee /workspace/container_path
       echo $container > /workspace/container_name
-    image: registry.access.redhat.com/ubi9/buildah:9.3-12@sha256:3b11aae36f6c762e01731952ee6fb8e89c41660ce410e4c30d0bfc6496bca93c
+    image: registry.access.redhat.com/ubi9/buildah:9.4-6.1714668835@sha256:b2704a17d310c5d97cd718c7e876d42e2771eb3c7d6e826616602e35614bdd7c
     name: build
     env:
     - name: COMMIT_SHA
@@ -150,7 +150,7 @@ spec:
     volumeMounts:
     - mountPath: /var/lib/containers
       name: varlibcontainers
-  - image: registry.access.redhat.com/ubi9/python-39:1-172.1712567222@sha256:c96f839e927c52990143df4efb2872946fcd5de9e1ed2014947bb2cf3084c27a
+  - image: registry.access.redhat.com/ubi9/python-39:1-182.1714671018@sha256:f33083d843898a6ffae35d91d6ff4bf6cfe0d9585c7897b04834cda30ede5b5c
     # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
     # the cluster will set imagePullPolicy to IfNotPresent
     # also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
@@ -197,7 +197,7 @@ spec:
     securityContext:
       runAsUser: 0
 
-  - image: registry.access.redhat.com/ubi9/buildah:9.3-12@sha256:3b11aae36f6c762e01731952ee6fb8e89c41660ce410e4c30d0bfc6496bca93c
+  - image: registry.access.redhat.com/ubi9/buildah:9.4-6.1714668835@sha256:b2704a17d310c5d97cd718c7e876d42e2771eb3c7d6e826616602e35614bdd7c
     name: inject-sbom-and-push
     computeResources: {}
     script: |
diff --git a/task/slack-webhook-notification/0.1/slack-webhook-notification.yaml b/task/slack-webhook-notification/0.1/slack-webhook-notification.yaml
index 2b4f865345..364bfab1f6 100644
--- a/task/slack-webhook-notification/0.1/slack-webhook-notification.yaml
+++ b/task/slack-webhook-notification/0.1/slack-webhook-notification.yaml
@@ -27,7 +27,7 @@ spec:
         optional: true
   steps:
     - name: send-message
-      image: registry.access.redhat.com/ubi9/ubi-minimal:9.3-1612@sha256:119ac25920c8bb50c8b5fd75dcbca369bf7d1f702b82f3d39663307890f0bf26
+      image: registry.access.redhat.com/ubi9/ubi-minimal:9.4-949.1714662671@sha256:cb6f20b9225031c8d704af95932c0331cfe0b229cd5b3dd805681d92a439186e
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       # also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.
diff --git a/task/summary/0.1/summary.yaml b/task/summary/0.1/summary.yaml
index 40b8ab3cd4..ed23634012 100644
--- a/task/summary/0.1/summary.yaml
+++ b/task/summary/0.1/summary.yaml
@@ -23,7 +23,7 @@ spec:
       default: Succeeded
   steps:
     - name: appstudio-summary
-      image: registry.access.redhat.com/ubi9/ubi-minimal:9.3-1612@sha256:119ac25920c8bb50c8b5fd75dcbca369bf7d1f702b82f3d39663307890f0bf26
+      image: registry.access.redhat.com/ubi9/ubi-minimal:9.4-949.1714662671@sha256:cb6f20b9225031c8d704af95932c0331cfe0b229cd5b3dd805681d92a439186e
       # per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
       # the cluster will set imagePullPolicy to IfNotPresent
       # also per direction from Ralph Bean, we want to use image digest based tags to use a cue to automation like dependabot or renovatebot to periodially submit pull requests that update the digest as new images are released.