diff --git a/bosh-cli-v2-cf-cli/Dockerfile b/bosh-cli-v2-cf-cli/Dockerfile
index 4df9dab7..39c67b40 100644
--- a/bosh-cli-v2-cf-cli/Dockerfile
+++ b/bosh-cli-v2-cf-cli/Dockerfile
@@ -3,7 +3,7 @@ FROM elpaasoci/bosh-cli-v2:latest
 # we use libc6 instead of libc6-compat as we do not use alpine base image
 ENV CF_PACKAGES "unzip curl openssl ca-certificates git libc6 bash jq gettext make"
 # renovate: datasource=github-releases depName=cloudfoundry/cli
-ENV CF_CLI_VERSION "8.7.10"
+ENV CF_CLI_VERSION "8.7.11"
 # renovate: datasource=github-releases depName=geofffranks/spruce
 ENV SPRUCE_VERSION "1.31.0"
 
diff --git a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
index 6df3cb85..5320d0db 100644
--- a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
+++ b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
@@ -3,7 +3,7 @@
 require 'serverspec'
 
 BOSH_CLI_VERSION="7.6.1" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
-CF_CLI_VERSION="8.7.10" # renovate: datasource=github-releases depName=cloudfoundry/cli
+CF_CLI_VERSION="8.7.11" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
 SPRUCE_VERSION = "1.31.0" # renovate: datasource=github-releases depName=geofffranks/spruce
 BOSH_ENV_DEPS = "build-essential zlib1g-dev openssl libxslt1-dev libxml2-dev \
diff --git a/bosh-cli-v2/Dockerfile b/bosh-cli-v2/Dockerfile
index 9f61136a..9371ca86 100644
--- a/bosh-cli-v2/Dockerfile
+++ b/bosh-cli-v2/Dockerfile
@@ -23,7 +23,7 @@ RUN wget -nv https://github.com/cloudfoundry/bosh-cli/releases/download/v${BOSH_
   && mv ${BOSH_CLI_FILENAME} /usr/local/bin/bosh
 
 # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
-ENV CREDHUB_CLI_VERSION 2.9.31
+ENV CREDHUB_CLI_VERSION 2.9.36
 ENV CREDHUB_CLI_SUM caf1f35837ee780b1ab105dff0e8f35b2e0a691484eff7b16cda31b03d6f91df
 ENV CREDHUB_CLI_FILENAME credhub-linux-amd64-${CREDHUB_CLI_VERSION}.tgz
 
diff --git a/bosh-cli-v2/bosh-cli-v2_spec.rb b/bosh-cli-v2/bosh-cli-v2_spec.rb
index 645e9d47..8d0df707 100644
--- a/bosh-cli-v2/bosh-cli-v2_spec.rb
+++ b/bosh-cli-v2/bosh-cli-v2_spec.rb
@@ -3,7 +3,7 @@
 require 'serverspec'
 
 BOSH_CLI_VERSION="7.6.1" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
-CREDHUB_CLI_VERSION='2.9.31' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
+CREDHUB_CLI_VERSION='2.9.36' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
 RUBY_VERSION = "3.1"
 
 BOSH_ENV_DEPS = "build-essential zlib1g-dev openssl libxslt1-dev libxml2-dev \
diff --git a/cf-cli/Dockerfile b/cf-cli/Dockerfile
index 0f2a99a5..cd4a78f5 100644
--- a/cf-cli/Dockerfile
+++ b/cf-cli/Dockerfile
@@ -2,7 +2,7 @@ FROM ruby:3.1-alpine3.18
 
 ENV PACKAGES "unzip curl openssl ca-certificates git libc6-compat bash jq gettext make"
 # renovate: datasource=github-releases depName=cloudfoundry/cli
-ENV CF_CLI_VERSION "8.7.10"
+ENV CF_CLI_VERSION "8.7.11"
 # renovate: datasource=github-releases depName=geofffranks/spruce
 ENV SPRUCE_VERSION "1.31.0"
 
diff --git a/cf-cli/cf-cli_spec.rb b/cf-cli/cf-cli_spec.rb
index e54722ec..4664bd88 100644
--- a/cf-cli/cf-cli_spec.rb
+++ b/cf-cli/cf-cli_spec.rb
@@ -2,7 +2,7 @@
 require 'docker'
 require 'serverspec'
 
-CF_CLI_VERSION="8.7.10" # renovate: datasource=github-releases depName=cloudfoundry/cli
+CF_CLI_VERSION="8.7.11" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
 SPRUCE_VERSION = "1.31.0" # renovate: datasource=github-releases depName=geofffranks/spruce
 RUBY_VERSION = "3.1"
diff --git a/k8s-tools/Dockerfile b/k8s-tools/Dockerfile
index 4c66df54..bdb9d7d8 100644
--- a/k8s-tools/Dockerfile
+++ b/k8s-tools/Dockerfile
@@ -22,7 +22,7 @@ RUN echo "Computed sha256sum: $(sha256sum ${YTT_FILENAME})" \
     && mv ${YTT_FILENAME} ytt
 
 # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
-ENV CREDHUB_CLI_VERSION 2.9.31
+ENV CREDHUB_CLI_VERSION 2.9.36
 ENV CREDHUB_CLI_SUM caf1f35837ee780b1ab105dff0e8f35b2e0a691484eff7b16cda31b03d6f91df
 ENV CREDHUB_CLI_FILENAME credhub-linux-amd64-${CREDHUB_CLI_VERSION}.tgz
 ADD https://github.com/cloudfoundry/credhub-cli/releases/download/${CREDHUB_CLI_VERSION}/${CREDHUB_CLI_FILENAME} .
diff --git a/k8s-tools/k8s-tools_spec.rb b/k8s-tools/k8s-tools_spec.rb
index a094e47b..6d0257fc 100644
--- a/k8s-tools/k8s-tools_spec.rb
+++ b/k8s-tools/k8s-tools_spec.rb
@@ -4,7 +4,7 @@
 
 BOSH_CLI_VERSION="7.6.1" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
 YTT_VERSION="0.49.1"  # renovate: datasource=github-releases depName=k14s/ytt
-CREDHUB_CLI_VERSION='2.9.31' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
+CREDHUB_CLI_VERSION='2.9.36' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
 KUSTOMIZE_VERSION="5.0.3" # renovate: datasource=github-releases depName=kubernetes-sigs/kustomize
 KAPP_VERSION="0.62.1" # renovate: datasource=github-releases depName=k14s/kapp
 KUBECTL_VERSION="1.26.15" # renovate: datasource=github-tags depName=kubernetes/kubectl