diff --git a/.ko.yaml b/.ko.yaml
index 2463358f8..84e48a13c 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1,7 +1,7 @@
 ---
 defaultBaseImage: gcr.io/distroless/static-debian12:nonroot
 baseImageOverrides:
-  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.13.0-alpine
+  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.14.0-alpine
 
 builds:
   - id: ctlog-createctconfig
diff --git a/Dockerfile.deps b/Dockerfile.deps
index 71e6cf867..5afc092d6 100644
--- a/Dockerfile.deps
+++ b/Dockerfile.deps
@@ -1,5 +1,5 @@
 # This Dockerfile simply serves as a trigger for dependabot to notify when a new upstream release of a component is available
 #
 # !!! READ AND ACT ON THIS !!! If dependabot proposes an update to the container listed below, you should also update the value listed in '.ko.yaml' and cut a new release of scaffolding
-FROM gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.13.0-alpine as cloud-sql-proxy
+FROM gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.14.0-alpine as cloud-sql-proxy
 ENV FOO=BAR