diff --git a/bosh-cli-v2/Dockerfile b/bosh-cli-v2/Dockerfile
index 8c0379b5..9790211b 100644
--- a/bosh-cli-v2/Dockerfile
+++ b/bosh-cli-v2/Dockerfile
@@ -34,8 +34,8 @@ RUN wget -nv https://github.com/cloudfoundry/credhub-cli/releases/download/${CRE
   && mv credhub /usr/local/bin/credhub
 
 # renovate: datasource=github-releases depName=mikefarah/yq
-ENV YQ_VERSION 4.35.2
-ENV YQ_SUM 8afd786b3b8ba8053409c5e7d154403e2d4ed4cf3e93c237462dc9ef75f38c8d
+ENV YQ_VERSION 4.40.5
+ENV YQ_SUM 0d6aaf1cf44a8d18fbc7ed0ef14f735a8df8d2e314c4cc0f0242d35c0a440c95
 ENV YQ_FILENAME yq_linux_amd64
 ENV YQ_REPO github.com/mikefarah/yq
 RUN wget -nv https://github.com/mikefarah/yq/releases/download/v${YQ_VERSION}/${YQ_FILENAME} \
diff --git a/k8s-tools/Dockerfile b/k8s-tools/Dockerfile
index 5b1ad2df..02dfbe43 100644
--- a/k8s-tools/Dockerfile
+++ b/k8s-tools/Dockerfile
@@ -13,8 +13,8 @@ RUN apt-get update \
 WORKDIR /usr/local/bin
 
 # renovate: datasource=github-releases depName=k14s/ytt
-ENV YTT_VERSION "0.46.0"
-ENV YTT_SUM 348cb34965b64c07fd5118e69efd9a4fae7e22f57db4e91e2d9903c1ad19f041
+ENV YTT_VERSION "0.46.3"
+ENV YTT_SUM 2b4ca5365c343bb1e903e8e845d9750b5d2776b3a99483912f27da6e95c480c0
 ENV YTT_FILENAME ytt-linux-amd64
 ADD https://github.com/k14s/ytt/releases/download/v${YTT_VERSION}/${YTT_FILENAME} .
 RUN echo "Computed sha256sum: $(sha256sum ${YTT_FILENAME})" \
@@ -41,8 +41,8 @@ RUN echo "Computed sha256sum: $(sha256sum ${KUSTOMIZE_FILENAME})" \
     && tar zxvf ${KUSTOMIZE_FILENAME}
 
 # renovate: datasource=github-releases depName=k14s/kapp
-ENV KAPP_VERSION 0.59.0
-ENV KAPP_SUM cc1cca783173badd5e74edc1f10decfcae85525cfece73b3d43acfda1eaccbe5
+ENV KAPP_VERSION 0.59.2
+ENV KAPP_SUM 6986369c06e89bcec366b2cc18f81634fcd95e2b52c6c6f7ee46b497ade25f7d
 ENV KAPP_FILENAME kapp-linux-amd64
 ADD https://github.com/k14s/kapp/releases/download/v${KAPP_VERSION}/kapp-linux-amd64 .
 RUN echo "Computed sha256sum: $(sha256sum ${KAPP_FILENAME})" \
@@ -79,8 +79,8 @@ RUN echo "Computed ${KUTTL_PLUGIN_FILENAME} sha256sum: $(sha256sum ${KUTTL_PLUGI
     && ln -s kubectl-kuttl kuttl
 
 # renovate: datasource=github-releases depName=mikefarah/yq
-ENV YQ_VERSION 4.35.2
-ENV YQ_SUM 8afd786b3b8ba8053409c5e7d154403e2d4ed4cf3e93c237462dc9ef75f38c8d
+ENV YQ_VERSION 4.40.5
+ENV YQ_SUM 0d6aaf1cf44a8d18fbc7ed0ef14f735a8df8d2e314c4cc0f0242d35c0a440c95
 ENV YQ_FILENAME yq_linux_amd64
 ADD https://github.com/mikefarah/yq/releases/download/v${YQ_VERSION}/${YQ_FILENAME} .
 RUN echo "Computed ${YQ_FILENAME} sha256sum: $(sha256sum ${YQ_FILENAME})" \
diff --git a/k8s-tools/k8s-tools_spec.rb b/k8s-tools/k8s-tools_spec.rb
index b4a9f5d3..707f422f 100644
--- a/k8s-tools/k8s-tools_spec.rb
+++ b/k8s-tools/k8s-tools_spec.rb
@@ -3,10 +3,10 @@
 require 'serverspec'
 
 BOSH_CLI_VERSION="7.4.0" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
-YTT_VERSION="0.46.0"  # renovate: datasource=github-releases depName=k14s/ytt
+YTT_VERSION="0.46.3"  # renovate: datasource=github-releases depName=k14s/ytt
 CREDHUB_CLI_VERSION='2.9.19' # renovate: datasource=github-releases depName=cloudfoundry/credhub-cli
 KUSTOMIZE_VERSION="4.5.4" # renovate: datasource=github-releases depName=kubernetes-sigs/kustomize
-KAPP_VERSION="0.59.0" # renovate: datasource=github-releases depName=k14s/kapp
+KAPP_VERSION="0.59.2" # renovate: datasource=github-releases depName=k14s/kapp
 KUBECTL_VERSION="1.24.17" # renovate: datasource=github-tags depName=kubernetes/kubectl
 HELM_VERSION="3.12.0" # renovate: datasource=github-releases depName=helm/helm
 KUTTL_VERSION="0.15.0" # renovate: datasource=github-releases depName=kudobuilder/kuttl