diff --git a/.github/workflows/cloud-smoke-cleanup.yml b/.github/workflows/cloud-smoke-cleanup.yml
index 3e2f515..7f6e631 100644
--- a/.github/workflows/cloud-smoke-cleanup.yml
+++ b/.github/workflows/cloud-smoke-cleanup.yml
@@ -65,7 +65,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build trusted cloud CI runner
@@ -120,7 +120,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build trusted cloud CI runner
diff --git a/.github/workflows/cloud-smoke.yml b/.github/workflows/cloud-smoke.yml
index 25eeaea..44f9845 100644
--- a/.github/workflows/cloud-smoke.yml
+++ b/.github/workflows/cloud-smoke.yml
@@ -37,7 +37,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Run repository lint
@@ -92,7 +92,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build provider cloud CI runner
@@ -164,7 +164,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build provider cloud CI runner
@@ -243,7 +243,7 @@ jobs:
       - name: Install Go for cloud CI runner
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: "1.26.x"
+          go-version: "1.27.x"
           cache: false
 
       - name: Build cloud CI runner
diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl
index 23cec1c..11d7bfd 100644
--- a/.terraform.lock.hcl
+++ b/.terraform.lock.hcl
@@ -26,25 +26,32 @@ provider "registry.terraform.io/hashicorp/cloudinit" {
 }
 
 provider "registry.terraform.io/hashicorp/google" {
-  version     = "7.45.0"
+  version     = "7.46.1"
   constraints = "~> 7.0"
   hashes = [
-    "h1:5bwzwKa/bvJmUkVMkrF18v9AfFeJ/wjR230oY+4LHrc=",
-    "h1:EYsKCMfXi6gtv3fE6XgNpsKrt7qFNrGFwenhlTkrrRM=",
-    "h1:FGFsRBzfeyq56BUAcb/WT676NieMX3NRfR4DBj2eEqk=",
-    "h1:snI9jfT+CtL8dH099NZCe79ciOSTuL74nPB7KaCf9pM=",
-    "zh:0f33485d068e39b1661d4ad789dfac353134b99cb5746e463e7719c053d70c06",
-    "zh:162335c448b15125924c3451dc0a411635138c00e36784d9586b9df61bc8a3d7",
-    "zh:172c9e4902e9a01b1111bbbb9063a47804ec5f4207b2221df9c398239ff3b350",
-    "zh:39acce0806f1aeca106ea529053778681e332f3f895c21c6a6a9fb267bed1058",
-    "zh:58dadd7b96b7b706e2995a04f356862be7cfd6b55f6257464c8b10986abf8efa",
-    "zh:7230a5e49abed243317b9de0ee7fd365b4a2775b532a5d66006b39c4703978ac",
-    "zh:a1b60814ee9a0726c0cd43d36da2cee3db97ec296ee66b111a7e603997de9122",
-    "zh:a454c09162ccd342e101704dca4b0eedc2d11939ac48ebd7b7d505a96c1933e6",
-    "zh:ad6fdf73e072f510a7d8e2b70f9e1021d08b9076eae146b420f333905708c982",
-    "zh:de1de65b909c99430f8bef092718b75dc5c777e98daf474a2215621f35095bb8",
+    "h1:/ZUFL5n13Ltbg+M7921sWiRt6huh9B8xxCUGf7520mY=",
+    "h1:3GpjxmhaOvZUjzi/U4ED8AuqFV4mzr+0DdXowGM+P2g=",
+    "h1:BMf5TKc4/U6JTUCyY7bM+VtfKfCU7lT1BewErfS8RNw=",
+    "h1:FKyveMVv3ZZ99Dg8i8aADnyenhZj48IDyupxoc24Y4Y=",
+    "h1:Hgv4BX9846ucZ6XcEql0DPfACoXqlcLat9SjUAn7YLI=",
+    "h1:RePfcCFWRE1I8ISHv3Er/2pFEyFvlUWt7KJ/acbe7Ww=",
+    "h1:kHnCSeYvgpaeRjIR0YKKIQhsZ9dgRFhj1PR99Lyh8nY=",
+    "h1:nGDfBJbje56WPG/PeNCvFzSN7l2nl2pk7cGB2XSpBp8=",
+    "h1:oaPjmiPJz4rtO1CCcQ53YsY+Xr/vUEvmYRz10SGieuk=",
+    "h1:oljhKN9e9ao1FE0xeiHKnuNsP8KGivYKBx5l1vKTL1Q=",
+    "h1:vLRcwq7JBzozALBtMF9Ij5a4ylGa6XtRUaW53CsiTMA=",
+    "zh:2e0e513915988d80582f8db7ff18c6242b8f4fad977d428feb11bcbd30d8ba95",
+    "zh:44ebe20d2a548c4318cc75497b7de0ded4bcb5867dbc9d7418f1941d5f6c5c2c",
+    "zh:48016a7ad372f27aa44b4f4611eb24fc634b05b0c25b84ca55a359f525f5a36f",
+    "zh:726fc1bbacf317bf946b53adc71248f890f78ede639c7d9e6fc52716668fd0ef",
+    "zh:9944d3128c69217d976844d936dd642d07140412d56e04bada95da189be37bdb",
+    "zh:a77548865bd320243641389763d3696b05c540d1cbb9868b249371626bab4132",
+    "zh:af6a79150120844c45236dd8d0e39fec76ef50528f5de9a623acbfb96108e4b8",
+    "zh:c1f3a7b1652db3a9f429cb749e9a4a3efcbf980d9d90f2634f25973931f2eedc",
+    "zh:d18255642cae2f00cf5a2946652a17cbf59a0d65c56bc0aac31d2509a360000e",
+    "zh:df3a71bf6d245a9f7c6548680055c22ecc8432f664b3d93d2ea0363f4c4d56ad",
+    "zh:e406cc8194485420bee42af19e3a545272a5ce45bc9ce7d5ac4438fb1a3f6fc6",
     "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c",
-    "zh:fb1b9d1ea7bc79b7409f02aa7c19ba39afa22dbead69e83ae7eb2691ac5c2426",
   ]
 }
 
diff --git a/ansible/roles/cloud_compose/defaults/main.yml b/ansible/roles/cloud_compose/defaults/main.yml
index dde691b..9c7e45d 100644
--- a/ansible/roles/cloud_compose/defaults/main.yml
+++ b/ansible/roles/cloud_compose/defaults/main.yml
@@ -12,7 +12,7 @@ cloud_compose_home: /home/cloud-compose
 cloud_compose_data_dir: /mnt/disks/data
 cloud_compose_volumes_dir: /mnt/disks/volumes
 
-cloud_compose_docker_compose_version: v5.3.1
+cloud_compose_docker_compose_version: v5.5.1
 cloud_compose_docker_buildx_version: v0.35.0
 cloud_compose_sitectl_version: latest
 cloud_compose_sitectl_package_versions: {}
diff --git a/ci/config-management-cloud-smoke.sh b/ci/config-management-cloud-smoke.sh
index 289a5fe..b50c5b5 100755
--- a/ci/config-management-cloud-smoke.sh
+++ b/ci/config-management-cloud-smoke.sh
@@ -4,7 +4,7 @@ set -euo pipefail
 
 repo_root="$(cd "$(dirname "$0")/.." && pwd)"
 # renovate: datasource=docker depName=python packageName=python versioning=docker
-CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.11-slim@sha256:e031123e3d85762b141ad1cbc56452ba69c6e722ebf2f042cc0dc86c47c0d8b3"
+CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6"
 
 usage() {
   cat <<EOF
diff --git a/ci/config-management-smoke.sh b/ci/config-management-smoke.sh
index 5794d72..f52d0f3 100755
--- a/ci/config-management-smoke.sh
+++ b/ci/config-management-smoke.sh
@@ -4,7 +4,7 @@ set -euo pipefail
 
 repo_root="$(cd "$(dirname "$0")/.." && pwd)"
 # renovate: datasource=docker depName=python packageName=python versioning=docker
-CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.11-slim@sha256:e031123e3d85762b141ad1cbc56452ba69c6e722ebf2f042cc0dc86c47c0d8b3"
+CONFIG_MANAGEMENT_IMAGE_DEFAULT="python:3.14-slim@sha256:cad9a2c871761c413caa6fdd6441c783451e740a48aaeba60ae62a8b53525ef6"
 image="${CLOUD_COMPOSE_CONFIG_MANAGEMENT_IMAGE:-$CONFIG_MANAGEMENT_IMAGE_DEFAULT}"
 container_entrypoint="$repo_root/ci/config-management-smoke-container.sh"
 
diff --git a/docs/Dockerfile b/docs/Dockerfile
index f19dc39..a7d4b59 100644
--- a/docs/Dockerfile
+++ b/docs/Dockerfile
@@ -3,8 +3,8 @@ FROM python:3.14-alpine3.22@sha256:6b91e66ab2a880ce9ca5a1b91c70f45963ff71ff68268
 WORKDIR /work
 
 RUN apk add --no-cache git && \
-    pip install uv==0.11.29 && \
-    uv pip install --break-system-packages --system zensical==0.0.50
+    pip install uv==0.12.10 && \
+    uv pip install --break-system-packages --system zensical==0.0.59
 
 EXPOSE 8080
 
diff --git a/modules/digitalocean/variables.tf b/modules/digitalocean/variables.tf
index d9a84ce..9d4be8d 100644
--- a/modules/digitalocean/variables.tf
+++ b/modules/digitalocean/variables.tf
@@ -138,9 +138,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.1")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.37.0")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/modules/gcp/.terraform.lock.hcl b/modules/gcp/.terraform.lock.hcl
index 23cec1c..11d7bfd 100644
--- a/modules/gcp/.terraform.lock.hcl
+++ b/modules/gcp/.terraform.lock.hcl
@@ -26,25 +26,32 @@ provider "registry.terraform.io/hashicorp/cloudinit" {
 }
 
 provider "registry.terraform.io/hashicorp/google" {
-  version     = "7.45.0"
+  version     = "7.46.1"
   constraints = "~> 7.0"
   hashes = [
-    "h1:5bwzwKa/bvJmUkVMkrF18v9AfFeJ/wjR230oY+4LHrc=",
-    "h1:EYsKCMfXi6gtv3fE6XgNpsKrt7qFNrGFwenhlTkrrRM=",
-    "h1:FGFsRBzfeyq56BUAcb/WT676NieMX3NRfR4DBj2eEqk=",
-    "h1:snI9jfT+CtL8dH099NZCe79ciOSTuL74nPB7KaCf9pM=",
-    "zh:0f33485d068e39b1661d4ad789dfac353134b99cb5746e463e7719c053d70c06",
-    "zh:162335c448b15125924c3451dc0a411635138c00e36784d9586b9df61bc8a3d7",
-    "zh:172c9e4902e9a01b1111bbbb9063a47804ec5f4207b2221df9c398239ff3b350",
-    "zh:39acce0806f1aeca106ea529053778681e332f3f895c21c6a6a9fb267bed1058",
-    "zh:58dadd7b96b7b706e2995a04f356862be7cfd6b55f6257464c8b10986abf8efa",
-    "zh:7230a5e49abed243317b9de0ee7fd365b4a2775b532a5d66006b39c4703978ac",
-    "zh:a1b60814ee9a0726c0cd43d36da2cee3db97ec296ee66b111a7e603997de9122",
-    "zh:a454c09162ccd342e101704dca4b0eedc2d11939ac48ebd7b7d505a96c1933e6",
-    "zh:ad6fdf73e072f510a7d8e2b70f9e1021d08b9076eae146b420f333905708c982",
-    "zh:de1de65b909c99430f8bef092718b75dc5c777e98daf474a2215621f35095bb8",
+    "h1:/ZUFL5n13Ltbg+M7921sWiRt6huh9B8xxCUGf7520mY=",
+    "h1:3GpjxmhaOvZUjzi/U4ED8AuqFV4mzr+0DdXowGM+P2g=",
+    "h1:BMf5TKc4/U6JTUCyY7bM+VtfKfCU7lT1BewErfS8RNw=",
+    "h1:FKyveMVv3ZZ99Dg8i8aADnyenhZj48IDyupxoc24Y4Y=",
+    "h1:Hgv4BX9846ucZ6XcEql0DPfACoXqlcLat9SjUAn7YLI=",
+    "h1:RePfcCFWRE1I8ISHv3Er/2pFEyFvlUWt7KJ/acbe7Ww=",
+    "h1:kHnCSeYvgpaeRjIR0YKKIQhsZ9dgRFhj1PR99Lyh8nY=",
+    "h1:nGDfBJbje56WPG/PeNCvFzSN7l2nl2pk7cGB2XSpBp8=",
+    "h1:oaPjmiPJz4rtO1CCcQ53YsY+Xr/vUEvmYRz10SGieuk=",
+    "h1:oljhKN9e9ao1FE0xeiHKnuNsP8KGivYKBx5l1vKTL1Q=",
+    "h1:vLRcwq7JBzozALBtMF9Ij5a4ylGa6XtRUaW53CsiTMA=",
+    "zh:2e0e513915988d80582f8db7ff18c6242b8f4fad977d428feb11bcbd30d8ba95",
+    "zh:44ebe20d2a548c4318cc75497b7de0ded4bcb5867dbc9d7418f1941d5f6c5c2c",
+    "zh:48016a7ad372f27aa44b4f4611eb24fc634b05b0c25b84ca55a359f525f5a36f",
+    "zh:726fc1bbacf317bf946b53adc71248f890f78ede639c7d9e6fc52716668fd0ef",
+    "zh:9944d3128c69217d976844d936dd642d07140412d56e04bada95da189be37bdb",
+    "zh:a77548865bd320243641389763d3696b05c540d1cbb9868b249371626bab4132",
+    "zh:af6a79150120844c45236dd8d0e39fec76ef50528f5de9a623acbfb96108e4b8",
+    "zh:c1f3a7b1652db3a9f429cb749e9a4a3efcbf980d9d90f2634f25973931f2eedc",
+    "zh:d18255642cae2f00cf5a2946652a17cbf59a0d65c56bc0aac31d2509a360000e",
+    "zh:df3a71bf6d245a9f7c6548680055c22ecc8432f664b3d93d2ea0363f4c4d56ad",
+    "zh:e406cc8194485420bee42af19e3a545272a5ce45bc9ce7d5ac4438fb1a3f6fc6",
     "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c",
-    "zh:fb1b9d1ea7bc79b7409f02aa7c19ba39afa22dbead69e83ae7eb2691ac5c2426",
   ]
 }
 
diff --git a/modules/gcp/variables.tf b/modules/gcp/variables.tf
index 77ea1d4..6ad65f7 100644
--- a/modules/gcp/variables.tf
+++ b/modules/gcp/variables.tf
@@ -343,14 +343,14 @@ variable "sitectl_package_versions" {
 variable "docker_compose_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-  default     = "v5.3.1"
+  default     = "v5.5.1"
   description = "Docker Compose release tag installed as the docker compose CLI plugin on hosts that need a manually managed plugin."
 }
 
 variable "docker_buildx_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-  default     = "v0.35.0"
+  default     = "v0.37.0"
   description = "Docker Buildx release tag installed as the docker buildx CLI plugin on hosts that need a manually managed plugin."
 }
 
diff --git a/modules/linode/.terraform.lock.hcl b/modules/linode/.terraform.lock.hcl
index 811ad11..515ac2f 100644
--- a/modules/linode/.terraform.lock.hcl
+++ b/modules/linode/.terraform.lock.hcl
@@ -26,25 +26,34 @@ provider "registry.terraform.io/hashicorp/http" {
 }
 
 provider "registry.terraform.io/linode/linode" {
-  version     = "4.3.0"
+  version     = "4.4.0"
   constraints = "~> 4.0"
   hashes = [
-    "h1:9f82B30cdnQ/f9MvBOJIIzPG63LQ7Rvy0bKyCxEOISM=",
-    "h1:NFvTyf4HvB5XENiZTNfRhysfLqc/yfnrw34nldk2+Bo=",
-    "h1:S7rLqWWTDEIBkte0+wUVHNTOWI96G2+St5FGCLCey8U=",
-    "h1:w/Dk56645sMU12AcdGNwJXJFqZLQQ3szHLbUE0uSn+0=",
-    "zh:010f08fa4dfbb77117ceac2629586941e262edc45c778659ae2a55c0b398ec23",
-    "zh:15a4ce678298eb17e67e22b7481a81991892804cc9f88a4883fc9eef30ab9437",
-    "zh:188828a08ce01de32a95f5f18d5db2cc86652fac03c85b20e8b83f615f2d37a0",
-    "zh:1a81ab9cebb8d1ff037345eb21eecaeecafc750c0a16a6b8d888a8cd0813bf58",
-    "zh:209a6aad0025d741e1a98d391cf2343901fcc626c3fbb070804ced02e7d6811c",
-    "zh:3bd23a831d03173799776da1ff451ada3539c879274ad78c99204a75edd1fbef",
-    "zh:60917b710106c5762111f90cbd356d0975db5b38d7e6ee4cafa821286a6030f8",
-    "zh:662844969f8af6194622b1f29f1f739b8b4539f25494011cf863c6ee1f029cad",
-    "zh:7d142f52374d71816be816c21d8fd35add09e28a97bca90b8ec19962ceee3327",
-    "zh:80cc8c523644e5379fe674665f067a74c860d2d0f78134d113af11bfe3485507",
-    "zh:b318a8f29e4e271594e39c2649536a9766c0a80e142a2b46cc72942d5317cc39",
-    "zh:c18ac394fe1b4e4f0818a9e2efb717032f6c8063d8c9efe8debdc63e763b0f25",
-    "zh:f3ad4cee92346805dfccf12a3b8044a4615dc9c1ffa9168e0a25240210235461",
+    "h1:1kB6Fc/spED8t7mwHimGZ/qryegfUX7IgISFwTciJik=",
+    "h1:4ooE//LtdBn0dVe78Dhj2ySBl4hs/bsUGorweoNo1rI=",
+    "h1:74d2ghRrn02SJ2A9BnLfwvYKruuL0sz4zMMfdRi6mPM=",
+    "h1:8SphjunDhDo3D9k/ZAJQ4mQeILrmFgGl0q77JXOVm44=",
+    "h1:AFyizUmgpe6xxYUaQAestlJURCFaYD60SA2HOwBw4gg=",
+    "h1:EXTFuUSz1ejFTv1bhFRdxSgwmzbL0H1mrozer5u0bjI=",
+    "h1:GmlC36pAo96Xm8pH4x3fjDIgC/6rvtK8LkLbiJl5LO8=",
+    "h1:HdEiqzmxUtudZCSRtB2MnOiyP2aM1hOejE3gmXZkI6w=",
+    "h1:PbVzCxArgGa8ok+XxTw3Yqf+dxl4IX/Vorvmbtka/4U=",
+    "h1:XbvymwLyKc9WbFVid49V92aBDK1F1Ydu69vvnQ8fJXA=",
+    "h1:elQk+R72jn1099G2iCxvog3t6OtTVf+1455VRXZggOg=",
+    "h1:jgn0jDSoPub1GeSO9rQPpLNCmQdy9351Shu1c7uXmJo=",
+    "h1:wFT1SHkY4AMc86lkfcvj2z2/l4jWc1BZgJBQFUJ4hxc=",
+    "zh:2704ecfe22669b40a2945b803ab9d7326a24bb8487430dba99a5454529af0b85",
+    "zh:2fcddfac285ce5c4742494bd3f8912c2957c9342b59fc87d401ccf528bd2a4c9",
+    "zh:3cce45411197bfea43bbe595527f73f53d441d977e8caf5df1d77fe8723dc5c1",
+    "zh:3d73359830702cc4283465efac98928986a0df6ae2a8cea4004e314ebee6b31b",
+    "zh:47353444f4bbec38e0e4dcf3dc43299480ac5bc792cd4708a666d3efc3a96f61",
+    "zh:50af1777398b3d941abd33feb90d8d735ac015168244df8bd2f18482031140d5",
+    "zh:57342c251577144c2f6688586b1fa4cd8106d3029d1dad8680145da0dc3a7581",
+    "zh:695d2948ff2346b9888bd010c5e829e1366d359cd7db8bfd9793e59423e65278",
+    "zh:9cd7a600109559fd742689aa4ed7092514a5e7a08131f54b76d52179e8ab486f",
+    "zh:cda1ef815f3a8c68d5882f0fbb6e28a6643ee287a3cfadefe1684cca52f0f170",
+    "zh:cf0bc5f8977f4108d07124b236553a549c5603afbc8af5adb40cc0fa17506e70",
+    "zh:cf37d8abdf1328ea2db280b6d67c349b4e7cf86a0a013bad98a7ab71d91d90aa",
+    "zh:d5de04a523fb6ae70f369d0f9b4f77d4d359a298be009bf352038d57c0778ce6",
   ]
 }
diff --git a/modules/linode/variables.tf b/modules/linode/variables.tf
index dd4e873..226277f 100644
--- a/modules/linode/variables.tf
+++ b/modules/linode/variables.tf
@@ -152,9 +152,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.1")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.37.0")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/modules/linux-vm-runtime/variables.tf b/modules/linux-vm-runtime/variables.tf
index effdbe6..dc93eb5 100644
--- a/modules/linux-vm-runtime/variables.tf
+++ b/modules/linux-vm-runtime/variables.tf
@@ -336,14 +336,14 @@ variable "sitectl_verify_args" {
 variable "docker_compose_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-  default     = "v5.3.1"
+  default     = "v5.5.1"
   description = "Docker Compose release tag installed as the Docker CLI plugin."
 }
 
 variable "docker_buildx_version" {
   type = string
   # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-  default     = "v0.35.0"
+  default     = "v0.37.0"
   description = "Docker Buildx release tag installed as the Docker CLI plugin."
 }
 
diff --git a/providers/do/variables.tf b/providers/do/variables.tf
index a3834ed..9e3cce8 100644
--- a/providers/do/variables.tf
+++ b/providers/do/variables.tf
@@ -149,9 +149,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.1")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.37.0")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/providers/gcp/variables.tf b/providers/gcp/variables.tf
index 4c90ff4..097f77f 100644
--- a/providers/gcp/variables.tf
+++ b/providers/gcp/variables.tf
@@ -261,9 +261,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.1")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.37.0")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/providers/linode/.terraform.lock.hcl b/providers/linode/.terraform.lock.hcl
index 811ad11..515ac2f 100644
--- a/providers/linode/.terraform.lock.hcl
+++ b/providers/linode/.terraform.lock.hcl
@@ -26,25 +26,34 @@ provider "registry.terraform.io/hashicorp/http" {
 }
 
 provider "registry.terraform.io/linode/linode" {
-  version     = "4.3.0"
+  version     = "4.4.0"
   constraints = "~> 4.0"
   hashes = [
-    "h1:9f82B30cdnQ/f9MvBOJIIzPG63LQ7Rvy0bKyCxEOISM=",
-    "h1:NFvTyf4HvB5XENiZTNfRhysfLqc/yfnrw34nldk2+Bo=",
-    "h1:S7rLqWWTDEIBkte0+wUVHNTOWI96G2+St5FGCLCey8U=",
-    "h1:w/Dk56645sMU12AcdGNwJXJFqZLQQ3szHLbUE0uSn+0=",
-    "zh:010f08fa4dfbb77117ceac2629586941e262edc45c778659ae2a55c0b398ec23",
-    "zh:15a4ce678298eb17e67e22b7481a81991892804cc9f88a4883fc9eef30ab9437",
-    "zh:188828a08ce01de32a95f5f18d5db2cc86652fac03c85b20e8b83f615f2d37a0",
-    "zh:1a81ab9cebb8d1ff037345eb21eecaeecafc750c0a16a6b8d888a8cd0813bf58",
-    "zh:209a6aad0025d741e1a98d391cf2343901fcc626c3fbb070804ced02e7d6811c",
-    "zh:3bd23a831d03173799776da1ff451ada3539c879274ad78c99204a75edd1fbef",
-    "zh:60917b710106c5762111f90cbd356d0975db5b38d7e6ee4cafa821286a6030f8",
-    "zh:662844969f8af6194622b1f29f1f739b8b4539f25494011cf863c6ee1f029cad",
-    "zh:7d142f52374d71816be816c21d8fd35add09e28a97bca90b8ec19962ceee3327",
-    "zh:80cc8c523644e5379fe674665f067a74c860d2d0f78134d113af11bfe3485507",
-    "zh:b318a8f29e4e271594e39c2649536a9766c0a80e142a2b46cc72942d5317cc39",
-    "zh:c18ac394fe1b4e4f0818a9e2efb717032f6c8063d8c9efe8debdc63e763b0f25",
-    "zh:f3ad4cee92346805dfccf12a3b8044a4615dc9c1ffa9168e0a25240210235461",
+    "h1:1kB6Fc/spED8t7mwHimGZ/qryegfUX7IgISFwTciJik=",
+    "h1:4ooE//LtdBn0dVe78Dhj2ySBl4hs/bsUGorweoNo1rI=",
+    "h1:74d2ghRrn02SJ2A9BnLfwvYKruuL0sz4zMMfdRi6mPM=",
+    "h1:8SphjunDhDo3D9k/ZAJQ4mQeILrmFgGl0q77JXOVm44=",
+    "h1:AFyizUmgpe6xxYUaQAestlJURCFaYD60SA2HOwBw4gg=",
+    "h1:EXTFuUSz1ejFTv1bhFRdxSgwmzbL0H1mrozer5u0bjI=",
+    "h1:GmlC36pAo96Xm8pH4x3fjDIgC/6rvtK8LkLbiJl5LO8=",
+    "h1:HdEiqzmxUtudZCSRtB2MnOiyP2aM1hOejE3gmXZkI6w=",
+    "h1:PbVzCxArgGa8ok+XxTw3Yqf+dxl4IX/Vorvmbtka/4U=",
+    "h1:XbvymwLyKc9WbFVid49V92aBDK1F1Ydu69vvnQ8fJXA=",
+    "h1:elQk+R72jn1099G2iCxvog3t6OtTVf+1455VRXZggOg=",
+    "h1:jgn0jDSoPub1GeSO9rQPpLNCmQdy9351Shu1c7uXmJo=",
+    "h1:wFT1SHkY4AMc86lkfcvj2z2/l4jWc1BZgJBQFUJ4hxc=",
+    "zh:2704ecfe22669b40a2945b803ab9d7326a24bb8487430dba99a5454529af0b85",
+    "zh:2fcddfac285ce5c4742494bd3f8912c2957c9342b59fc87d401ccf528bd2a4c9",
+    "zh:3cce45411197bfea43bbe595527f73f53d441d977e8caf5df1d77fe8723dc5c1",
+    "zh:3d73359830702cc4283465efac98928986a0df6ae2a8cea4004e314ebee6b31b",
+    "zh:47353444f4bbec38e0e4dcf3dc43299480ac5bc792cd4708a666d3efc3a96f61",
+    "zh:50af1777398b3d941abd33feb90d8d735ac015168244df8bd2f18482031140d5",
+    "zh:57342c251577144c2f6688586b1fa4cd8106d3029d1dad8680145da0dc3a7581",
+    "zh:695d2948ff2346b9888bd010c5e829e1366d359cd7db8bfd9793e59423e65278",
+    "zh:9cd7a600109559fd742689aa4ed7092514a5e7a08131f54b76d52179e8ab486f",
+    "zh:cda1ef815f3a8c68d5882f0fbb6e28a6643ee287a3cfadefe1684cca52f0f170",
+    "zh:cf0bc5f8977f4108d07124b236553a549c5603afbc8af5adb40cc0fa17506e70",
+    "zh:cf37d8abdf1328ea2db280b6d67c349b4e7cf86a0a013bad98a7ab71d91d90aa",
+    "zh:d5de04a523fb6ae70f369d0f9b4f77d4d359a298be009bf352038d57c0778ce6",
   ]
 }
diff --git a/providers/linode/variables.tf b/providers/linode/variables.tf
index 1f5025b..3ba63b1 100644
--- a/providers/linode/variables.tf
+++ b/providers/linode/variables.tf
@@ -164,9 +164,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.1")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.37.0")
     }), {})
 
     managed_runtime = optional(object({
diff --git a/rootfs/home/cloud-compose/install-dependencies-cos.sh b/rootfs/home/cloud-compose/install-dependencies-cos.sh
index ba1da78..46a08a1 100755
--- a/rootfs/home/cloud-compose/install-dependencies-cos.sh
+++ b/rootfs/home/cloud-compose/install-dependencies-cos.sh
@@ -3,7 +3,7 @@
 set -euo pipefail
 
 # renovate: datasource=docker depName=alpine packageName=alpine versioning=docker
-ALPINE_BUILD_IMAGE="alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce"
+ALPINE_BUILD_IMAGE="alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b"
 MAKE_VERSION="4.4.1"
 
 valid_make_binary() {
diff --git a/salt/cloud-compose/init.sls b/salt/cloud-compose/init.sls
index a4e3945..4252f96 100644
--- a/salt/cloud-compose/init.sls
+++ b/salt/cloud-compose/init.sls
@@ -482,7 +482,7 @@
   'DOCKER_COMPOSE_DIR': primary_project.get('project_dir', project_dir),
   'DOCKER_COMPOSE_REPO': primary_project.get('docker_compose_repo', repo),
   'DOCKER_COMPOSE_BRANCH': primary_project.get('docker_compose_branch', branch),
-  'DOCKER_COMPOSE_VERSION': docker.get('compose_version', cc.get('docker_compose_version', 'v5.3.1')),
+  'DOCKER_COMPOSE_VERSION': docker.get('compose_version', cc.get('docker_compose_version', 'v5.5.1')),
   'DOCKER_BUILDX_VERSION': docker.get('buildx_version', cc.get('docker_buildx_version', 'v0.35.0')),
   'GCP_PROJECT': '',
   'GCP_PROJECT_NUMBER': '',
diff --git a/templates/apps.json b/templates/apps.json
index c694cfd..33ec658 100644
--- a/templates/apps.json
+++ b/templates/apps.json
@@ -18,7 +18,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-archivesspace": "v2.1.1"
+        "sitectl-archivesspace": "v2.1.2"
       }
     },
     "ojs": {
@@ -29,7 +29,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-ojs": "v1.4.0"
+        "sitectl-ojs": "v1.4.1"
       }
     },
     "isle": {
@@ -42,8 +42,8 @@
       },
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-drupal": "v1.5.0",
-        "sitectl-isle": "v1.6.0"
+        "sitectl-drupal": "v1.6.2",
+        "sitectl-isle": "v1.7.3"
       }
     },
     "drupal": {
@@ -54,7 +54,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-drupal": "v1.5.0"
+        "sitectl-drupal": "v1.6.2"
       }
     },
     "wp": {
@@ -65,7 +65,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-wp": "v2.1.0"
+        "sitectl-wp": "v2.1.1"
       }
     },
     "omeka-s": {
@@ -76,7 +76,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-omeka-s": "v1.4.0"
+        "sitectl-omeka-s": "v1.4.1"
       }
     },
     "omeka-classic": {
@@ -87,7 +87,7 @@
       "extra_env": {},
       "package_versions": {
         "sitectl": "v1.12.8",
-        "sitectl-omeka-classic": "v1.4.0"
+        "sitectl-omeka-classic": "v1.4.1"
       }
     }
   }
diff --git a/variables.tf b/variables.tf
index f91cf82..b6a674a 100644
--- a/variables.tf
+++ b/variables.tf
@@ -272,9 +272,9 @@ variable "runtime" {
 
     docker = optional(object({
       # renovate: datasource=github-releases depName=docker-compose packageName=docker/compose versioning=semver
-      compose_version = optional(string, "v5.3.1")
+      compose_version = optional(string, "v5.5.1")
       # renovate: datasource=github-releases depName=docker-buildx packageName=docker/buildx versioning=semver
-      buildx_version = optional(string, "v0.35.0")
+      buildx_version = optional(string, "v0.37.0")
     }), {})
 
     managed_runtime = optional(object({