diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index dc4bb4f..7e171a6 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -31,7 +31,7 @@ jobs:
     if: (!startsWith(github.head_ref, 'renovate/') && !startsWith(github.head_ref, 'dependabot/'))
     services:
       buildkitd:
-        image: moby/buildkit:v0.17.2
+        image: moby/buildkit:v0.18.1
         options: --privileged
         ports:
           - 1234:1234
diff --git a/Pkgfile b/Pkgfile
index 20e42c3..4aac946 100644
--- a/Pkgfile
+++ b/Pkgfile
@@ -33,7 +33,7 @@ vars:
   linux_sha512: c7523dc5b012367301ab43a685b766dce025c4993041acd3dacd085b052b3fccc7f50c892357acf481e24ccad512770ef46a13d2da16c2a178c44a27f7022932
 
   # renovate: datasource=docker versioning=docker depName=cgr.dev/chainguard/wolfi-base
-  wolfi_base_ref: sha256:8dd9ceace8b1574e550374e9c07c2baafa60cc96223c1314fac61bd2edb48c70
+  wolfi_base_ref: sha256:56614cdca9ca3f091f18e594148e65427109a3c45f30d79263eecf4b711c5ae9
 
 labels:
   org.opencontainers.image.source: https://github.com/siderolabs/sbc-rockchip