diff --git a/.github/workflows/build-image.yml b/.github/workflows/build-image.yml
index 042ced9..6a4006d 100644
--- a/.github/workflows/build-image.yml
+++ b/.github/workflows/build-image.yml
@@ -58,7 +58,7 @@ jobs:
         uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
         with:
           driver-opts: >-
-            image=docker.io/moby/buildkit:v0.26.3@sha256:5601811fde88bb9e8a577bfe804af82bccb712e1cd07ff94663bded5e628cf75
+            image=docker.io/moby/buildkit:v0.27.1@sha256:1e110c71d389d6d24f67b9438e2f7b8da749a6ff407b22a1631e025c95599368
           buildkitd-flags: >-
             --oci-worker-snapshotter=stargz
 
diff --git a/image/repo-snapshot/Dockerfile b/image/repo-snapshot/Dockerfile
index 60f4e1b..24e07d0 100644
--- a/image/repo-snapshot/Dockerfile
+++ b/image/repo-snapshot/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1.20.0@sha256:26147acbda4f14c5add9946e2fd2ed543fc402884fd75146bd342a7f6271dc1d
 # Syntax: https://github.com/moby/buildkit/blob/v0.25/frontend/dockerfile/docs/reference.md
 
-FROM docker.io/almalinux/10-toolbox:10.1-20251124@sha256:5c733ba41634d8b760a437d43fb92d202ea33821d832b91656ad16e59ee30dc5 AS downloader
+FROM docker.io/almalinux/10-toolbox:10.1-20260129@sha256:204d8dde5b69e09a4f9fa66e5cc8e3d71ed48eb64dcbcaea3768a56bc8671cd7 AS downloader
 
 ARG TARGETARCH
 ARG TARGETVARIANT
diff --git a/image/stage0/Dockerfile b/image/stage0/Dockerfile
index e3eb30e..0cbc5a4 100644
--- a/image/stage0/Dockerfile
+++ b/image/stage0/Dockerfile
@@ -2,7 +2,7 @@
 # Syntax: https://github.com/moby/buildkit/blob/v0.25/frontend/dockerfile/docs/reference.md
 
 # https://raw.githubusercontent.com/AlmaLinux/container-images/9ec2d07542f07e6781d6f388e66f1e3f2aac889e/Containerfiles/10/Containerfile.toolbox
-FROM docker.io/almalinux/10-toolbox:10.1-20251124@sha256:5c733ba41634d8b760a437d43fb92d202ea33821d832b91656ad16e59ee30dc5 AS s0
+FROM docker.io/almalinux/10-toolbox:10.1-20260129@sha256:204d8dde5b69e09a4f9fa66e5cc8e3d71ed48eb64dcbcaea3768a56bc8671cd7 AS s0
 
 ENV LANG=C LC_CTYPE=C.UTF-8 LC_COLLATE=C
 ENV SYSTEMD_OFFLINE=1
diff --git a/image/stage3/Dockerfile b/image/stage3/Dockerfile
index c0cf697..65e8e1e 100644
--- a/image/stage3/Dockerfile
+++ b/image/stage3/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.20.0@sha256:26147acbda4f14c5add9946e2fd2ed543fc402884fd75146bd342a7f6271dc1d
 
-FROM docker.io/almalinux/10-toolbox:10.1-20251124@sha256:5c733ba41634d8b760a437d43fb92d202ea33821d832b91656ad16e59ee30dc5 AS toolbox
+FROM docker.io/almalinux/10-toolbox:10.1-20260129@sha256:204d8dde5b69e09a4f9fa66e5cc8e3d71ed48eb64dcbcaea3768a56bc8671cd7 AS toolbox
 
 FROM toolbox AS download-bazelisk
 RUN --mount=type=cache,id=download-bazelisk,target=/var/cache/download <<RUNEOF
@@ -39,13 +39,13 @@ FROM toolbox AS download-uv
 RUN --mount=type=cache,id=download-uv,target=/var/cache/download <<RUNEOF
 set -eux -o pipefail
 
-uv_version='0.9.18'
-uv_release_ts='2025-12-16T15:47:46Z'
+uv_version='0.9.28'
+uv_release_ts='2026-01-29T20:19:18Z'
 
 arch=$(rpm --eval '%{_arch}')
 case $arch in
-  x86_64) rust_arch='x86_64-unknown-linux-gnu' ; uv_sha256='c2def3db178ade63933fa15ffc96e882c196ce53e06173dcee05b36c5f6f68f5' ;;
-  aarch64) rust_arch='aarch64-unknown-linux-gnu' ; uv_sha256='f8e23ec786b18660ade6b033b6191b7e9c283c872eeb8c4531d56a873decf160' ;;
+  x86_64) rust_arch='x86_64-unknown-linux-gnu' ; uv_sha256='66ad1822dd9cf96694b95c24f25bc05cff417a65351464da01682a91796d1f2b' ;;
+  aarch64) rust_arch='aarch64-unknown-linux-gnu' ; uv_sha256='382c342735ff29f8ba4574d88e39bca798bcbac50bff6742710ca9cd8143e7d2' ;;
   *) echo "Unsupported architecture: $arch" >&2 ; exit 1 ;;
 esac
 
@@ -73,13 +73,13 @@ FROM toolbox AS download-sccache
 RUN --mount=type=cache,id=download-sccache,target=/var/cache/download <<RUNEOF
 set -eux -o pipefail
 
-sccache_version='0.12.0'
-sccache_release_ts='2025-10-20T22:38:10Z'
+sccache_version='0.13.0'
+sccache_release_ts='2026-01-13T19:16:21Z'
 
 arch=$(rpm --eval '%{_arch}')
 case $arch in
-  x86_64) rust_arch='x86_64-unknown-linux-musl' ; sccache_sha256='b0e89ead6899224a4ba2b90e9073bf1ce036d95bab30f3dc33c1e1468bc4ad44' ;;
-  aarch64) rust_arch='aarch64-unknown-linux-musl' ; sccache_sha256='111ddd28fb108cb3e17edb69ab62cefe1dcc97b02e5006ff9c1330f4f2e78368' ;;
+  x86_64) rust_arch='x86_64-unknown-linux-musl' ; sccache_sha256='0f57d80d0036967bc06b8391dcf4b527a6837187de454b55222ce4e0d5e19d0a' ;;
+  aarch64) rust_arch='aarch64-unknown-linux-musl' ; sccache_sha256='1bbbd570aa957db85c1e7c3fbc790f7766d4406347371b884515ed723ac03086' ;;
   *) echo "Unsupported architecture: $arch" >&2 ; exit 1 ;;
 esac
 
diff --git a/image/test-build-local.sh b/image/test-build-local.sh
index 2ab1a4d..b8aae6d 100755
--- a/image/test-build-local.sh
+++ b/image/test-build-local.sh
@@ -3,7 +3,7 @@
 readonly SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
 readonly BUILD_DIR=$(realpath "$SCRIPT_DIR"/../build)
 
-readonly buildkit_image='docker.io/moby/buildkit:v0.26.3@sha256:5601811fde88bb9e8a577bfe804af82bccb712e1cd07ff94663bded5e628cf75'
+readonly buildkit_image='docker.io/moby/buildkit:v0.27.1@sha256:1e110c71d389d6d24f67b9438e2f7b8da749a6ff407b22a1631e025c95599368'
 
 readonly REGISTRY_PORT=51350
 readonly REGISTRY_HOST="localhost:${REGISTRY_PORT}"