diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index c230a47b..d503ebb9 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   go:
-    uses: openconfig/common-ci/.github/workflows/go.yml@v0.2.0
+    uses: openconfig/common-ci/.github/workflows/go.yml@v0.3.0
     with:
       coverage-excludes-regex: /cloudbuild
       tests-excludes-regex: /cloudbuild
@@ -18,4 +18,4 @@ jobs:
       go-versions: "['1.21']"
 
   linter:
-    uses: openconfig/common-ci/.github/workflows/linter.yml@v0.2.0
+    uses: openconfig/common-ci/.github/workflows/linter.yml@v0.3.0
diff --git a/go.mod b/go.mod
index cd790e91..8b0557af 100644
--- a/go.mod
+++ b/go.mod
@@ -3,47 +3,47 @@ module github.com/openconfig/kne
 go 1.24.0
 
 require (
-	cloud.google.com/go/pubsub v1.36.1
+	cloud.google.com/go/pubsub v1.50.2
 	github.com/aristanetworks/arista-ceoslab-operator/v2 v2.1.2
 	github.com/blang/semver v3.5.1+incompatible
-	github.com/docker/docker v28.1.1+incompatible
-	github.com/drivenets/cdnos-controller v1.7.4
+	github.com/docker/docker v28.5.2+incompatible
+	github.com/drivenets/cdnos-controller v1.7.9
 	github.com/ghodss/yaml v1.0.0
-	github.com/golang/glog v1.2.4
+	github.com/golang/glog v1.2.5
 	github.com/golang/mock v1.6.0
 	github.com/google/go-cmp v0.7.0
 	github.com/google/gopacket v1.1.19
 	github.com/kr/pretty v0.3.1
-	github.com/networkop/meshnet-cni v0.3.1-0.20230525201116-d7c306c635cf
-	github.com/open-traffic-generator/keng-operator v0.3.34
+	github.com/networkop/meshnet-cni v0.4.0
+	github.com/open-traffic-generator/keng-operator v0.4.0
 	github.com/open-traffic-generator/snappi/gosnappi v0.13.7
-	github.com/openconfig/gnmi v0.10.0
-	github.com/openconfig/lemming/operator v0.2.0
-	github.com/openconfig/ondatra v0.5.8
+	github.com/openconfig/gnmi v0.14.1
+	github.com/openconfig/lemming/operator v0.2.6
+	github.com/openconfig/ondatra v0.14.3
 	github.com/pborman/uuid v1.2.1
 	github.com/pkg/errors v0.9.1
-	github.com/scrapli/scrapligo v1.3.3
+	github.com/scrapli/scrapligo v1.4.0
 	github.com/scrapli/scrapligocfg v1.0.0
-	github.com/spf13/cobra v1.8.1
-	github.com/spf13/pflag v1.0.5
-	github.com/spf13/viper v1.17.0
+	github.com/spf13/cobra v1.10.2
+	github.com/spf13/pflag v1.0.10
+	github.com/spf13/viper v1.21.0
 	github.com/srl-labs/srl-controller v0.7.1
 	github.com/srl-labs/srlinux-scrapli v0.6.0
-	github.com/wI2L/jsondiff v0.5.1
-	go.universe.tf/metallb v0.14.8
-	golang.org/x/oauth2 v0.27.0
-	golang.org/x/sync v0.18.0
-	google.golang.org/api v0.169.0
+	github.com/wI2L/jsondiff v0.7.1
+	go.universe.tf/metallb v0.15.3
+	golang.org/x/oauth2 v0.36.0
+	golang.org/x/sync v0.20.0
+	google.golang.org/api v0.275.0
 	google.golang.org/grpc v1.65.0
-	google.golang.org/protobuf v1.36.7
+	google.golang.org/protobuf v1.36.11
 	gopkg.in/yaml.v3 v3.0.1
 	k8s.io/api v0.31.2
 	k8s.io/apimachinery v0.31.2
 	k8s.io/client-go v0.31.2
-	k8s.io/klog/v2 v2.130.1
-	k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3
-	sigs.k8s.io/controller-runtime v0.19.0
-	sigs.k8s.io/yaml v1.4.0
+	k8s.io/klog/v2 v2.140.0
+	k8s.io/utils 28399d86e0b5
+	sigs.k8s.io/controller-runtime v0.23.3
+	sigs.k8s.io/yaml v1.6.0
 )
 
 require (
diff --git a/init_wait/Dockerfile b/init_wait/Dockerfile
index 65554320..be72d5da 100644
--- a/init_wait/Dockerfile
+++ b/init_wait/Dockerfile
@@ -11,7 +11,7 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-FROM alpine:3.22.2
+FROM alpine:3.23.3
 COPY entrypoint.sh /
 ENTRYPOINT [ "/entrypoint.sh" ]
 CMD []
diff --git a/x/wire/forward/Dockerfile b/x/wire/forward/Dockerfile
index 8baa70bb..e8cea137 100644
--- a/x/wire/forward/Dockerfile
+++ b/x/wire/forward/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.21
+FROM golang:1.26
 
 WORKDIR /app