diff --git a/images/actions-runner/Dockerfile b/images/actions-runner/Dockerfile
index 2a4bbcd..86e8f63 100644
--- a/images/actions-runner/Dockerfile
+++ b/images/actions-runner/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:24.04@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90
+FROM ubuntu:24.04@sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac
 
 # renovate: datasource=github-releases depName=actions/runner
 ARG RUNNER_VERSION=2.336.0
diff --git a/images/kubectl/Dockerfile b/images/kubectl/Dockerfile
index 8ce6f43..a12dd31 100644
--- a/images/kubectl/Dockerfile
+++ b/images/kubectl/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:24.04@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90
+FROM ubuntu:24.04@sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
 ARG KUBECTL_VERSION=1.36.2
diff --git a/images/sandbox-agent/Dockerfile b/images/sandbox-agent/Dockerfile
index 19206b1..2e28fc6 100644
--- a/images/sandbox-agent/Dockerfile
+++ b/images/sandbox-agent/Dockerfile
@@ -1,4 +1,4 @@
-FROM ubuntu:24.04@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90
+FROM ubuntu:24.04@sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac
 
 # renovate: datasource=node-version depName=node
 ARG NODE_VERSION=24.18.0