diff --git a/Dockerfile b/Dockerfile
index 8091617f..d1d96373 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -217,7 +217,7 @@ EOF
 
 # Trivy
 # renovate: datasource=github-releases depName=aquasecurity/trivy
-ARG TRIVY_VERSION=0.45.0
+ARG TRIVY_VERSION=0.45.1
 ENV TRIVY_URL=https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz
 RUN <<EOF
 curl -LSs $TRIVY_URL | tar xz
@@ -308,7 +308,7 @@ EOF
 
 # ah cli
 # renovate: datasource=github-releases depName=artifacthub/hub
-ARG AH_CLI_VERSION=1.15.0
+ARG AH_CLI_VERSION=1.16.0
 ENV AH_CLI_URL=https://github.com/artifacthub/hub/releases/download/v${AH_CLI_VERSION}/ah_${AH_CLI_VERSION}_linux_amd64.tar.gz
 RUN <<EOF
 curl -LSs $AH_CLI_URL | tar xz
diff --git a/requirements.txt b/requirements.txt
index 1a8b1b85..8ff5ddf1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,4 @@
 yamale==4.0.4
 yamllint==1.32.0
 pre-commit==3.4.0
-checkov==2.4.32
+checkov==2.4.40