diff --git a/coreos-pxe-install.jsonnet b/coreos-pxe-install.jsonnet
index fc641ec..e6d9093 100644
--- a/coreos-pxe-install.jsonnet
+++ b/coreos-pxe-install.jsonnet
@@ -705,7 +705,7 @@ local filekey(path) = (
           tolerations+: utils.toleratesMaster,
           containers_+: {
             httpd: kube.Container("httpd") {
-              image: "httpd:2.4.54-alpine", // renovate
+              image: "httpd:2.4.55-alpine", // renovate
               ports_+: {
                 http: { containerPort: 80 },
               },
diff --git a/external-dns.jsonnet b/external-dns.jsonnet
index ab5bd58..3977e4c 100644
--- a/external-dns.jsonnet
+++ b/external-dns.jsonnet
@@ -172,7 +172,7 @@ local utils = import "utils.libsonnet";
           },
           containers_+: {
             default: kube.Container("extdns") {
-              image: "registry.k8s.io/external-dns/external-dns:v0.13.1", // renovate
+              image: "registry.k8s.io/external-dns/external-dns:v0.13.2", // renovate
               args_+: {
                 sources_:: ["ingress", "service"],
                 "domain-filter": "oldmacdonald.farm",
diff --git a/kube-system.jsonnet b/kube-system.jsonnet
index f09bbef..7ed2aea 100644
--- a/kube-system.jsonnet
+++ b/kube-system.jsonnet
@@ -273,7 +273,7 @@ local CA(name, namespace, issuer) = {
             },
             containers_+: {
               etcd: kube.Container("etcd") {
-                image: "gcr.io/etcd-development/etcd:v3.5.6", // renovate
+                image: "gcr.io/etcd-development/etcd:v3.5.7", // renovate
                 securityContext+: {
                   allowPrivilegeEscalation: false,
                 },