diff --git a/container-runtime/vars.yaml b/container-runtime/vars.yaml
index 539eb9ac..553cdbbb 100644
--- a/container-runtime/vars.yaml
+++ b/container-runtime/vars.yaml
@@ -1,5 +1,5 @@
 # renovate: datasource=github-tags extractVersion=^release-(?<version>.*)$ depName=google/gvisor
-GVISOR_VERSION: 20241118.0
+GVISOR_VERSION: 20241217.0
 # renovate: datasource=github-releases depName=containerd/stargz-snapshotter
 STARGZ_SNAPSHOTTER_VERSION: v0.16.3
 # renovate: datasource=github-releases depName=kubernetes/cloud-provider-aws
@@ -9,6 +9,6 @@ WASMEDGE_VERSION: v0.5.0
 # renovate: datasource=git-tags depName=https://github.com/spinkube/containerd-shim-spin.git
 SPIN_VERSION: v0.17.0
 # renovate: datasource=github-releases depName=kata-containers/kata-containers
-KATA_CONTAINERS_VERSION: 3.3.0
+KATA_CONTAINERS_VERSION: 3.12.0
 # renovate: datasource=github-releases depName=containers/crun
 CRUN_VERSION: 1.19.1
diff --git a/misc/glibc/vars.yaml b/misc/glibc/vars.yaml
index 69807898..4572815e 100644
--- a/misc/glibc/vars.yaml
+++ b/misc/glibc/vars.yaml
@@ -1,4 +1,4 @@
 # renovate: datasource=docker versioning=docker depName=cgr.dev/chainguard/wolfi-base
-WOLFI_BASE_REF: sha256:3b271f8bff9356a38aa23118ffdea3c0d659f39e207feedacf01bdea4b900871
+WOLFI_BASE_REF: sha256:d653e81239ff979cf810ca6f706d1bcf56d6994da75f37b4702327a3c2696900
 
 VERSION: {{ .GLIBC_VERSION }}
diff --git a/nvidia-gpu/vars.yaml b/nvidia-gpu/vars.yaml
index b7d35ffd..9328e04a 100644
--- a/nvidia-gpu/vars.yaml
+++ b/nvidia-gpu/vars.yaml
@@ -4,13 +4,13 @@ NVIDIA_DRIVER_LTS_VERSION: 535.216.03
 # renovate: datasource=github-releases extractVersion=^\d+\.(?<version>\d+\.\d+)$ depName=nvidia/open-gpu-kernel-modules
 NVIDIA_DRIVER_PRODUCTION_VERSION: 550.127.08
 # renovate: datasource=github-releases depName=nvidia/nvidia-container-toolkit
-CONTAINER_TOOLKIT_VERSION: v1.17.2
-CONTAINER_TOOLKIT_REF: fa66e4cd562804509055e44a88f666673e6d27c0
+CONTAINER_TOOLKIT_VERSION: v1.17.3
+CONTAINER_TOOLKIT_REF: cb82e29c75d387992bf59eb6eadf5d96cb6d4747
 # renovate: datasource=github-releases depName=nvidia/libnvidia-container
 LIBNVIDIA_CONTAINER_VERSION: v1.17.2
 LIBNVIDIA_CONTAINER_REF: 63d366ee3b4183513c310ac557bf31b05b83328f
 # renovate: datasource=docker versioning=docker depName=cgr.dev/chainguard/wolfi-base
-WOLFI_BASE_REF: sha256:3b271f8bff9356a38aa23118ffdea3c0d659f39e207feedacf01bdea4b900871
+WOLFI_BASE_REF: sha256:d653e81239ff979cf810ca6f706d1bcf56d6994da75f37b4702327a3c2696900
 # renovate: datasource=github-tags extractVersion=^v(?<version>.*)$ depName=seccomp/libseccomp
 LIBSECCOMP_VERSION: 2.5.5
 # renovate: datasource=git-tags extractVersion=^libcap-(?<version>.*)$ depName=git://git.kernel.org/pub/scm/libs/libcap/libcap.git
diff --git a/storage/vars.yaml b/storage/vars.yaml
index 50716ccc..0539009c 100644
--- a/storage/vars.yaml
+++ b/storage/vars.yaml
@@ -1,4 +1,4 @@
 # renovate: datasource=github-releases extractVersion=^fuse-(?<version>.*)$ depName=libfuse/libfuse
 FUSE3_VERSION: 3.16.2
 # renovate: datasource=git-tags extractVersion=^mdadm-(?<version>.*)$ depName=git://git.kernel.org/pub/scm/utils/mdadm/mdadm.git
-MDADM_VERSION: 4.3
+MDADM_VERSION: 4.4