diff --git a/Dockerfile b/Dockerfile
index 11ce5337c6..356dbe2f69 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,11 +5,11 @@ ARG DEBIAN_TAG=12.5-slim@sha256:155280b00ee0133250f7159b567a07d7cd03b1645714c3a7
 ARG GOLANG_TAG=1.22.1-alpine
 
 # renovate: datasource=github-releases depName=hashicorp/terraform versioning=hashicorp
-ARG DEFAULT_TERRAFORM_VERSION=1.8.0
+ARG DEFAULT_TERRAFORM_VERSION=1.8.3
 # renovate: datasource=github-releases depName=hashicorp/terraform versioning=hashicorp
-ARG DEFAULT_OPENTOFU_VERSION=1.6.2
+ARG DEFAULT_OPENTOFU_VERSION=1.7.1
 # renovate: datasource=github-releases depName=open-policy-agent/conftest
-ARG DEFAULT_CONFTEST_VERSION=0.49.1
+ARG DEFAULT_CONFTEST_VERSION=0.52.0
 
 # Stage 1: build artifact and download deps