diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index f265922..596cd8c 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -31,7 +31,7 @@ repos:
     hooks:
       - id: shellcheck
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.18.4
+    rev: v8.21.3
     hooks:
       - id: gitleaks
   - repo: local
diff --git a/.woodpecker/.build.yaml b/.woodpecker/.build.yaml
index 52334e5..4596864 100644
--- a/.woodpecker/.build.yaml
+++ b/.woodpecker/.build.yaml
@@ -3,7 +3,7 @@ steps:
     when:
       - event: push
         branch: main
-    image: woodpeckerci/plugin-docker-buildx:5.0.0@sha256:0a8e69cad4a25d641bdb51daea53ce309692c7bda1193ae04a990bb88486edd8
+    image: woodpeckerci/plugin-docker-buildx:5.1.0@sha256:f323e0b1133f71f6712e93753dfb2d6c0fb5ec1e41d8b99b1cb2ffeadfc15fd5
     pull: true
     settings:
       platforms: linux/amd64
@@ -21,7 +21,7 @@ steps:
       - event: push
         branch:
           exclude: ['main']
-    image: woodpeckerci/plugin-docker-buildx:5.0.0@sha256:0a8e69cad4a25d641bdb51daea53ce309692c7bda1193ae04a990bb88486edd8
+    image: woodpeckerci/plugin-docker-buildx:5.1.0@sha256:f323e0b1133f71f6712e93753dfb2d6c0fb5ec1e41d8b99b1cb2ffeadfc15fd5
     pull: true
     settings:
       platforms: linux/amd64
diff --git a/Dockerfile b/Dockerfile
index f0d5c09..08b15fc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,11 @@
-FROM python:3.12.4-alpine3.20@sha256:63094abdaf49e046da9f6529ecd6ce4d853d9bfbf00a25c52bbbb68b3223b490
+FROM python:3.13.1-alpine3.20@sha256:804ad02b9ba67ea1f8307eeb6407b121c6bd6bb19d3f182aae166821eb59d6a4
 
 # renovate: datasource=repology depName=alpine_3_20/build-base versioning=loose
 ENV BUILD_BASE_VERSION="0.5-r3"
 # renovate: datasource=repology depName=alpine_3_20/gcc versioning=loose
 ENV GCC_VERSION="13.2.1_git20240309-r0"
 # renovate: datasource=repology depName=alpine_3_20/ruby versioning=loose
-ENV RUBY_VERSION="3.3.3-r0"
+ENV RUBY_VERSION="3.3.6-r0"
 # renovate: datasource=repology depName=alpine_3_20/git versioning=loose
 ENV GIT_VERSION="2.45.2-r0"
 # renovate: datasource=repology depName=alpine_3_20/openssh-keygen versioning=loose