diff --git a/.github/.wordlist.txt b/.github/.wordlist.txt
index bcc1062d..33b998b6 100644
--- a/.github/.wordlist.txt
+++ b/.github/.wordlist.txt
@@ -114,7 +114,6 @@ renderer
 repos
 RPC
 RUNC
-runtime
 RUNTIMES
 Scc
 sed
diff --git a/.github/workflows/on-demand.yml b/.github/workflows/on-demand.yml
index d06895e7..4d2707ff 100644
--- a/.github/workflows/on-demand.yml
+++ b/.github/workflows/on-demand.yml
@@ -60,7 +60,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+      - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         if: ${{ !env.ACT }}
         id: filter
         with:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index f653016f..97683656 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -26,7 +26,7 @@ repos:
     hooks:
       - id: yamlfmt
   - repo: https://github.com/electrocucaracha/ai-prepare-commit-msg
-    rev: 5da4f2a8922f53ff090e81f06f1dc22bfc9e35db
+    rev: v7.1.0
     hooks:
       - id: ai-prepare-commit
         stages:
diff --git a/ci/pinned_versions.env b/ci/pinned_versions.env
index 267aab1b..dba87f71 100644
--- a/ci/pinned_versions.env
+++ b/ci/pinned_versions.env
@@ -1,12 +1,12 @@
 export PKG_ACT_VERSION=0.2.89
-export PKG_AWS_VERSION=2.36.14
+export PKG_AWS_VERSION=2.36.23
 export PKG_CNI_PLUGINS_VERSION=1.9.1
-export PKG_CRUN_VERSION=1.28
+export PKG_CRUN_VERSION=1.29.1
 export PKG_DOCKER_DIVE_VERSION=0.13.1
 export PKG_DOCKER_SLIM_VERSION=1.40.11
 export PKG_FINALIZE_NAMESPACE_VERSION=0.0.2
-export PKG_FLANNEL_VERSION=1.9.1-flannel2
-export PKG_FLY_VERSION=8.2.4
+export PKG_FLANNEL_VERSION=1.9.1-flannel3
+export PKG_FLY_VERSION=8.3.0
 export PKG_GOMPLATE_VERSION=5.2.0
 export PKG_HADOLINT_VERSION=2.15.1
 export PKG_KIND_VERSION=0.32.0
@@ -15,13 +15,13 @@ export PKG_KREW_VERSION=0.5.0
 export PKG_KUSTOMIZE_VERSION=5.8.1
 export PKG_NINJA_VERSION=1.13.2
 export PKG_PMDK_VERSION=2.1.1
-export PKG_QEMU_VERSION=11.0.0
+export PKG_QEMU_VERSION=11.1.0
 export PKG_REGCLIENT_VERSION=0.11.5
 export PKG_RUNC_VERSION=1.5.1
 export PKG_TERRAFORM_DOCS_VERSION=0.24.0
 export PKG_TERRAFORM_VERSION=1.15.8
 export PKG_TERRASCAN_VERSION=1.19.9
-export PKG_TKN_VERSION=0.45.1
+export PKG_TKN_VERSION=0.46.0
 export PKG_VAGRANT_VERSION=2.4.9
 export PKG_YOUKI_VERSION=0.7.0
 export PKG_YQ_VERSION=4.53.3
diff --git a/src/aws/devcontainer-feature.json b/src/aws/devcontainer-feature.json
index 2dd4aff1..20e54787 100644
--- a/src/aws/devcontainer-feature.json
+++ b/src/aws/devcontainer-feature.json
@@ -7,7 +7,7 @@
     "pkg_aws_version": {
       "type": "string",
       "description": "Specifies the AWS CLI version to be installed",
-      "default": "2.36.14" // PKG_AWS_VERSION
+      "default": "2.36.23" // PKG_AWS_VERSION
     },
     "pkg_debug": {
       "type": "boolean",
diff --git a/src/cni-plugins/devcontainer-feature.json b/src/cni-plugins/devcontainer-feature.json
index cba96752..077ca504 100644
--- a/src/cni-plugins/devcontainer-feature.json
+++ b/src/cni-plugins/devcontainer-feature.json
@@ -17,7 +17,7 @@
     "pkg_flannel_version": {
       "type": "string",
       "description": "Specifies the Flannel CNI version to be installed",
-      "default": "1.9.1-flannel2" // PKG_FLANNEL_VERSION
+      "default": "1.9.1-flannel3" // PKG_FLANNEL_VERSION
     },
     "pkg_cni_plugins_install_flannel": {
       "type": "boolean",
diff --git a/src/fly/devcontainer-feature.json b/src/fly/devcontainer-feature.json
index 4d4e6c07..19f45a85 100644
--- a/src/fly/devcontainer-feature.json
+++ b/src/fly/devcontainer-feature.json
@@ -7,7 +7,7 @@
     "pkg_fly_version": {
       "type": "string",
       "description": "Specifies the Fly version to be installed",
-      "default": "8.2.4" // PKG_FLY_VERSION
+      "default": "8.3.0" // PKG_FLY_VERSION
     },
     "pkg_debug": {
       "type": "boolean",