diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index ab99412..40c36a1 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -78,7 +78,7 @@ jobs:
       # yq isn't pre-installed on the CodeBuild runners, so install it here
       - name: Build Images
         run: |
-          wget https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_amd64 -O /usr/local/bin/yq
+          wget https://github.com/mikefarah/yq/releases/download/v4.53.3/yq_linux_amd64 -O /usr/local/bin/yq
           chmod +x /usr/local/bin/yq
           make setup-ecr
           make -j `nproc` all-image
@@ -185,6 +185,6 @@ jobs:
       # yq isn't pre-installed on the CodeBuild runners, so install it here
       - name: Run Tests
         run: |
-          wget https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_amd64 -O /usr/local/bin/yq
+          wget https://github.com/mikefarah/yq/releases/download/v4.53.3/yq_linux_amd64 -O /usr/local/bin/yq
           chmod +x /usr/local/bin/yq
           make e2e/${{ matrix.test }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 31e7dbb..203e5a1 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -67,6 +67,6 @@ jobs:
       # yq isn't pre-installed on the CodeBuild runners, so install it here
       - name: Build Images
         run: |
-          wget https://github.com/mikefarah/yq/releases/download/v4.53.2/yq_linux_amd64 -O /usr/local/bin/yq
+          wget https://github.com/mikefarah/yq/releases/download/v4.53.3/yq_linux_amd64 -O /usr/local/bin/yq
           chmod +x /usr/local/bin/yq
           make -j `nproc` all-image
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 31b1363..f5d0f5f 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -33,7 +33,7 @@ jobs:
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@693b9ef15eec82123529a37c782242f091365961 # v46.1.14
+        uses: renovatebot/github-action@8217b3fc286df088d7c27f3255fe8414463bc0fd # v46.1.15
         with:
           token: ${{ secrets.RENOVATE_TOKEN }}
         env:
diff --git a/Dockerfile b/Dockerfile
index a134f81..8e82ad0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@ FROM --platform=$BUILDPLATFORM public.ecr.aws/docker/library/golang:1.26@sha256:
 RUN go env -w GOCACHE=/gocache GOMODCACHE=/gomodcache
 ARG GOPROXY
 # Dependencies not in builder image: yq and go-licenses
-RUN --mount=type=cache,target=/gomodcache --mount=type=cache,target=/gocache go install github.com/mikefarah/yq/v4@v4.53.2
+RUN --mount=type=cache,target=/gomodcache --mount=type=cache,target=/gocache go install github.com/mikefarah/yq/v4@v4.53.3
 RUN --mount=type=cache,target=/gomodcache --mount=type=cache,target=/gocache go install github.com/google/go-licenses/v2@v2.0.1
 
 WORKDIR /app/