diff --git a/.aqua/aqua.yaml b/.aqua/aqua.yaml
index 667cf43..e7f9c59 100644
--- a/.aqua/aqua.yaml
+++ b/.aqua/aqua.yaml
@@ -3,27 +3,27 @@
 # https://aquaproj.github.io/
 registries:
   - type: standard
-    ref: v4.205.0 # renovate: depName=aquaproj/aqua-registry
+    ref: v4.296.0 # renovate: depName=aquaproj/aqua-registry
 packages:
-  - name: miniscruff/changie@v1.19.1
+  - name: miniscruff/changie@v1.21.0
     tags:
       - release
-  - name: golang/go@go1.22.5
-  - name: direnv/direnv@v2.34.0
+  - name: golang/go@go1.23.5
+  - name: direnv/direnv@v2.35.0
   - name: magefile/mage@v1.15.0
   - name: charmbracelet/glow@v2.0.0
-  - name: goreleaser/goreleaser@v2.1.0
-  - name: mvdan/gofumpt@v0.6.0
-  - name: anchore/syft@v1.12.2
-  - name: golangci/golangci-lint@v1.59.1
+  - name: goreleaser/goreleaser@v2.5.1
+  - name: mvdan/gofumpt@v0.7.0
+  - name: anchore/syft@v1.18.1
+  - name: golangci/golangci-lint@v1.63.4
     tags: ['lint']
   - name: git-town/git-town@v17.2.0
   - name: DelineaXPM/dsv-cli@v1.41.1
-  - name: cli/cli@v2.53.0
+  - name: cli/cli@v2.65.0
     tags: ['foo', release]
-  - name: mikefarah/yq@v4.44.3
+  - name: mikefarah/yq@v4.45.1
     tags:
       - release
-  - name: miniscruff/changie@v1.19.1
+  - name: miniscruff/changie@v1.21.0
     tags:
       - release
diff --git a/.github/workflows/changie-trigger-release.yml b/.github/workflows/changie-trigger-release.yml
index 4d8a316..82b4918 100644
--- a/.github/workflows/changie-trigger-release.yml
+++ b/.github/workflows/changie-trigger-release.yml
@@ -45,10 +45,10 @@ jobs:
               echo "Branch exists. Skipping workflow."
               echo "BRANCH_ALREADY_EXISTS=true" >> "$GITHUB_OUTPUT"
           fi
-      - uses: aquaproj/aqua-installer@6ce1f8848ec8e61f14d57bd5d7597057a6dd187c # v3.0.1
+      - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         if: steps.check_branch.outputs.BRANCH_ALREADY_EXISTS == 'false'
         with:
-          aqua_version: v2.30.0
+          aqua_version: v2.42.2
           aqua_opts: '--only-link' # lazy install so we can start this way
           policy_allow: true
         env:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c67b086..3d110c3 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -31,10 +31,10 @@ jobs:
           else
             echo "👉 No aqua-policy.yaml file found, skipping setting AQUA_POLICY_CONFIG"
           fi
-      - uses: aquaproj/aqua-installer@6ce1f8848ec8e61f14d57bd5d7597057a6dd187c # v3.0.1
+      - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         continue-on-error: true
         with:
-          aqua_version: v2.30.0
+          aqua_version: v2.42.2
           enable_aqua_install: true
           aqua_opts: '--tags lint' # if using aqua.yaml config any special items in your repo like Golangci-lint using tags so it only installs what's needed
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3fc48be..0872fb7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,9 +28,9 @@ jobs:
           else
             echo "👉 No aqua-policy.yaml file found, skipping setting AQUA_POLICY_CONFIG"
           fi
-      - uses: aquaproj/aqua-installer@6ce1f8848ec8e61f14d57bd5d7597057a6dd187c # v3.0.1
+      - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
-          aqua_version: v2.30.0
+          aqua_version: v2.42.2
           # working_directory:
           aqua_opts: '--tags release'
         env:
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index d03d1d6..7664d16 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -29,9 +29,9 @@ jobs:
           else
             echo "👉 No aqua-policy.yaml file found, skipping setting AQUA_POLICY_CONFIG"
           fi
-      - uses: aquaproj/aqua-installer@6ce1f8848ec8e61f14d57bd5d7597057a6dd187c # v3.0.1
+      - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
-          aqua_version: v2.30.0
+          aqua_version: v2.42.2
           enable_aqua_install: true
           aqua_opts: '--tags scan'
         env:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3dc3e77..8df7db4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -41,9 +41,9 @@ jobs:
           else
             echo "👉 No aqua-policy.yaml file found, skipping setting AQUA_POLICY_CONFIG"
           fi
-      - uses: aquaproj/aqua-installer@6ce1f8848ec8e61f14d57bd5d7597057a6dd187c # v3.0.1
+      - uses: aquaproj/aqua-installer@f13c5d2f0357708d85477aabe50fd3f725528745 # v3.1.0
         with:
-          aqua_version: v2.30.0
+          aqua_version: v2.42.2
           enable_aqua_install: true
           aqua_opts: '--tags test'
         env: