diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a3c44f0..e418af3 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -28,10 +28,10 @@ jobs:
         uses: supplypike/setup-bin@v3
         with:
           # renovate: zarf-uri datasource=github-tags depName=defenseunicorns/zarf
-          uri: 'https://github.com/defenseunicorns/zarf/releases/download/v0.28.0/zarf_v0.28.0_Linux_amd64'
+          uri: 'https://github.com/defenseunicorns/zarf/releases/download/v0.28.4/zarf_v0.28.4_Linux_amd64'
           name: 'zarf'
           # renovate: datasource=github-tags depName=defenseunicorns/zarf versioning=semver
-          version: 'v0.28.0'
+          version: 'v0.28.4'
 
       - name: Login to GHCR
         uses: docker/login-action@v2
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6f82e01..f681a08 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -31,7 +31,7 @@ repos:
     hooks:
       - id: fix-smartquotes
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.23.0
+    rev: 0.24.0
     hooks:
       - id: check-jsonschema
         name: "Validate Zarf Configs Against Schema"
@@ -44,10 +44,10 @@ repos:
             "--no-cache"
           ]
   - repo: https://github.com/golangci/golangci-lint
-    rev: v1.52.2
+    rev: v1.54.0
     hooks:
       - id: golangci-lint
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 35.105.1
+    rev: 36.40.5
     hooks:
       - id: renovate-config-validator
diff --git a/.tool-versions b/.tool-versions
index 4892760..d587a44 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,7 +1,7 @@
-golang 1.20.4
-golangci-lint 1.52.2
-pre-commit 3.3.2
-terraform 1.4.6
-tflint 0.46.1
+golang 1.21.0
+golangci-lint 1.54.0
+pre-commit 3.3.3
+terraform 1.5.5
+tflint 0.47.0
 tfsec 1.28.1
 sops 3.7.3
diff --git a/Makefile b/Makefile
index d3ea977..2a93ace 100755
--- a/Makefile
+++ b/Makefile
@@ -5,9 +5,9 @@ ZARF_VERSION := v0.28.3
 # The version of the build harness container to use
 BUILD_HARNESS_REPO := ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=docker depName=ghcr.io/defenseunicorns/build-harness/build-harness
-BUILD_HARNESS_VERSION := 1.8.1
+BUILD_HARNESS_VERSION := 1.10.2
 # renovate: datasource=docker depName=ghcr.io/defenseunicorns/packages/dubbd-k3d extractVersion=^(?<version>\d+\.\d+\.\d+)
-DUBBD_K3D_VERSION := 0.5.0
+DUBBD_K3D_VERSION := 0.6.1
 
 # Figure out which Zarf binary we should use based on the operating system we are on
 ZARF_BIN := zarf
diff --git a/gitlab-runner-flux-values.yaml b/gitlab-runner-flux-values.yaml
index 71ff80b..94384c6 100644
--- a/gitlab-runner-flux-values.yaml
+++ b/gitlab-runner-flux-values.yaml
@@ -6,7 +6,7 @@ application:
   repository: https://repo1.dso.mil/big-bang/product/packages/gitlab-runner.git
   ref:
     # renovate: datasource=gitlab-tags depName=big-bang/product/packages/gitlab-runner versioning=loose registryUrl=https://repo1.dso.mil
-    tag: 0.52.0-bb.0
+    tag: 0.52.0-bb.1
   values: |
     ###ZARF_VAR_GITLAB_RUNNER_VALUES###
   dependsOn:
diff --git a/go.mod b/go.mod
index 230a9d6..3c51c33 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/defenseunicorns/uds-capability-gitlab-runner
 go 1.20
 
 require (
-	github.com/gruntwork-io/terratest v0.43.9
+	github.com/gruntwork-io/terratest v0.43.11
 	github.com/stretchr/testify v1.8.4
 )
 
diff --git a/go.sum b/go.sum
index 94dc717..5bf9375 100644
--- a/go.sum
+++ b/go.sum
@@ -373,6 +373,8 @@ github.com/gruntwork-io/go-commons v0.8.0 h1:k/yypwrPqSeYHevLlEDmvmgQzcyTwrlZGRa
 github.com/gruntwork-io/go-commons v0.8.0/go.mod h1:gtp0yTtIBExIZp7vyIV9I0XQkVwiQZze678hvDXof78=
 github.com/gruntwork-io/terratest v0.43.9 h1:EfyWtyj6F/bwBqmY7F13TidDj+6c68I2PPw7I28mvuM=
 github.com/gruntwork-io/terratest v0.43.9/go.mod h1:Tw+6/fcJFiBPpsx9NNSkLG5oHKIeaqiJHVLpQ+ORIfQ=
+github.com/gruntwork-io/terratest v0.43.11 h1:k3U5lZjiNa38rqcTx/dus8cCaJY7qxShGIuGLeLfj/s=
+github.com/gruntwork-io/terratest v0.43.11/go.mod h1:Tw+6/fcJFiBPpsx9NNSkLG5oHKIeaqiJHVLpQ+ORIfQ=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
diff --git a/utils/k3d/k3d-config.yaml b/utils/k3d/k3d-config.yaml
index 88d5807..25c3d30 100644
--- a/utils/k3d/k3d-config.yaml
+++ b/utils/k3d/k3d-config.yaml
@@ -3,7 +3,7 @@ kind: Simple
 metadata:
   name: ci
 servers: 1
-image: rancher/k3s:v1.26.5-k3s1
+image: rancher/k3s:v1.27.4-k3s1
 options:
   k3s:
     extraArgs: