diff --git a/bosh-cli-v2-cf-cli/Dockerfile b/bosh-cli-v2-cf-cli/Dockerfile
index 8fe8f534..4df9dab7 100644
--- a/bosh-cli-v2-cf-cli/Dockerfile
+++ b/bosh-cli-v2-cf-cli/Dockerfile
@@ -3,7 +3,7 @@ FROM elpaasoci/bosh-cli-v2:latest
 # we use libc6 instead of libc6-compat as we do not use alpine base image
 ENV CF_PACKAGES "unzip curl openssl ca-certificates git libc6 bash jq gettext make"
 # renovate: datasource=github-releases depName=cloudfoundry/cli
-ENV CF_CLI_VERSION "8.7.6"
+ENV CF_CLI_VERSION "8.7.10"
 # renovate: datasource=github-releases depName=geofffranks/spruce
 ENV SPRUCE_VERSION "1.31.0"
 
diff --git a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
index 530d43fa..6df3cb85 100644
--- a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
+++ b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
@@ -3,7 +3,7 @@
 require 'serverspec'
 
 BOSH_CLI_VERSION="7.6.1" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
-CF_CLI_VERSION="8.7.6" # renovate: datasource=github-releases depName=cloudfoundry/cli
+CF_CLI_VERSION="8.7.10" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
 SPRUCE_VERSION = "1.31.0" # renovate: datasource=github-releases depName=geofffranks/spruce
 BOSH_ENV_DEPS = "build-essential zlib1g-dev openssl libxslt1-dev libxml2-dev \
diff --git a/bosh-cli-v2/Dockerfile b/bosh-cli-v2/Dockerfile
index 3d1d9f30..9f61136a 100644
--- a/bosh-cli-v2/Dockerfile
+++ b/bosh-cli-v2/Dockerfile
@@ -23,8 +23,8 @@ RUN wget -nv https://github.com/cloudfoundry/bosh-cli/releases/download/v${BOSH_
   && mv ${BOSH_CLI_FILENAME} /usr/local/bin/bosh
 
 # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
-ENV CREDHUB_CLI_VERSION 2.9.24
-ENV CREDHUB_CLI_SUM 026b07fe91d55e3d562e7cdbcabb92b0cd4712ef4017d632c7d3dd07559ee63e
+ENV CREDHUB_CLI_VERSION 2.9.31
+ENV CREDHUB_CLI_SUM caf1f35837ee780b1ab105dff0e8f35b2e0a691484eff7b16cda31b03d6f91df
 ENV CREDHUB_CLI_FILENAME credhub-linux-amd64-${CREDHUB_CLI_VERSION}.tgz
 
 RUN wget -nv https://github.com/cloudfoundry/credhub-cli/releases/download/${CREDHUB_CLI_VERSION}/${CREDHUB_CLI_FILENAME} \
diff --git a/bosh-cli-v2/bosh-cli-v2_spec.rb b/bosh-cli-v2/bosh-cli-v2_spec.rb
index 8e85a12d..645e9d47 100644
--- a/bosh-cli-v2/bosh-cli-v2_spec.rb
+++ b/bosh-cli-v2/bosh-cli-v2_spec.rb
@@ -3,7 +3,7 @@
 require 'serverspec'
 
 BOSH_CLI_VERSION="7.6.1" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
-CREDHUB_CLI_VERSION='2.9.24' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
+CREDHUB_CLI_VERSION='2.9.31' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
 RUBY_VERSION = "3.1"
 
 BOSH_ENV_DEPS = "build-essential zlib1g-dev openssl libxslt1-dev libxml2-dev \
diff --git a/cf-cli/Dockerfile b/cf-cli/Dockerfile
index c9ba185f..0f2a99a5 100644
--- a/cf-cli/Dockerfile
+++ b/cf-cli/Dockerfile
@@ -2,7 +2,7 @@ FROM ruby:3.1-alpine3.18
 
 ENV PACKAGES "unzip curl openssl ca-certificates git libc6-compat bash jq gettext make"
 # renovate: datasource=github-releases depName=cloudfoundry/cli
-ENV CF_CLI_VERSION "8.7.6"
+ENV CF_CLI_VERSION "8.7.10"
 # renovate: datasource=github-releases depName=geofffranks/spruce
 ENV SPRUCE_VERSION "1.31.0"
 
diff --git a/cf-cli/cf-cli_spec.rb b/cf-cli/cf-cli_spec.rb
index 8a9f7c66..e54722ec 100644
--- a/cf-cli/cf-cli_spec.rb
+++ b/cf-cli/cf-cli_spec.rb
@@ -2,7 +2,7 @@
 require 'docker'
 require 'serverspec'
 
-CF_CLI_VERSION="8.7.6" # renovate: datasource=github-releases depName=cloudfoundry/cli
+CF_CLI_VERSION="8.7.10" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
 SPRUCE_VERSION = "1.31.0" # renovate: datasource=github-releases depName=geofffranks/spruce
 RUBY_VERSION = "3.1"
diff --git a/k8s-tools/Dockerfile b/k8s-tools/Dockerfile
index c6669d4c..4c66df54 100644
--- a/k8s-tools/Dockerfile
+++ b/k8s-tools/Dockerfile
@@ -22,8 +22,8 @@ RUN echo "Computed sha256sum: $(sha256sum ${YTT_FILENAME})" \
     && mv ${YTT_FILENAME} ytt
 
 # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
-ENV CREDHUB_CLI_VERSION 2.9.24
-ENV CREDHUB_CLI_SUM 026b07fe91d55e3d562e7cdbcabb92b0cd4712ef4017d632c7d3dd07559ee63e
+ENV CREDHUB_CLI_VERSION 2.9.31
+ENV CREDHUB_CLI_SUM caf1f35837ee780b1ab105dff0e8f35b2e0a691484eff7b16cda31b03d6f91df
 ENV CREDHUB_CLI_FILENAME credhub-linux-amd64-${CREDHUB_CLI_VERSION}.tgz
 ADD https://github.com/cloudfoundry/credhub-cli/releases/download/${CREDHUB_CLI_VERSION}/${CREDHUB_CLI_FILENAME} .
 RUN echo "Computed sha256sum: $(sha256sum ${CREDHUB_CLI_FILENAME})" \
diff --git a/k8s-tools/k8s-tools_spec.rb b/k8s-tools/k8s-tools_spec.rb
index 9d92e713..a094e47b 100644
--- a/k8s-tools/k8s-tools_spec.rb
+++ b/k8s-tools/k8s-tools_spec.rb
@@ -4,7 +4,7 @@
 
 BOSH_CLI_VERSION="7.6.1" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
 YTT_VERSION="0.49.1"  # renovate: datasource=github-releases depName=k14s/ytt
-CREDHUB_CLI_VERSION='2.9.24' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
+CREDHUB_CLI_VERSION='2.9.31' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
 KUSTOMIZE_VERSION="5.0.3" # renovate: datasource=github-releases depName=kubernetes-sigs/kustomize
 KAPP_VERSION="0.62.1" # renovate: datasource=github-releases depName=k14s/kapp
 KUBECTL_VERSION="1.26.15" # renovate: datasource=github-tags depName=kubernetes/kubectl