diff --git a/cmd/frontend/Dockerfile b/cmd/frontend/Dockerfile
index f30882dfa0..9e9692274f 100644
--- a/cmd/frontend/Dockerfile
+++ b/cmd/frontend/Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 # Compile the UI assets.
-FROM --platform=$BUILDPLATFORM docker.io/node:23.11.0-bookworm@sha256:a9de312c8f40add3e897b9987e5d62eafcd39de785fe67dc3e70c4d2128153ec AS assets
+FROM --platform=$BUILDPLATFORM docker.io/node:26.5.0-bookworm@sha256:219fc9da91e7f29a9f32290ff598cdf8886fd68f421ff515c8f93434da39a271 AS assets
 WORKDIR /app
 COPY --from=google-go.pkg.dev/golang:1.26.5@sha256:5075e8b0e1a7913c2274737c1a8b379ea264322c082bd21d3911d196dce46559 /usr/local/go /usr/local/
 ENV PATH="/usr/local/go/bin:${PATH}"
diff --git a/examples/instrumentation/go-synthetic/go-synthetic-basic-auth.yaml b/examples/instrumentation/go-synthetic/go-synthetic-basic-auth.yaml
index aba3472576..11c8f65f88 100644
--- a/examples/instrumentation/go-synthetic/go-synthetic-basic-auth.yaml
+++ b/examples/instrumentation/go-synthetic/go-synthetic-basic-auth.yaml
@@ -29,7 +29,7 @@ spec:
       containers:
       - name: go-synthetic
         # TODO(bwplotka): Rename image to go-synthetic (example-app is misleading, we actually use go-synthetic).
-        image: gke.gcr.io/prometheus-engine/example-app:v0.15.0-gke.8
+        image: gke.gcr.io/prometheus-engine/example-app:v0.17.0-gke.8
         args:
         - "--listen-address=:8080"
         - "--cpu-burn-ops=75"
diff --git a/examples/instrumentation/go-synthetic/go-synthetic.yaml b/examples/instrumentation/go-synthetic/go-synthetic.yaml
index 85be46a094..5b21c1942b 100644
--- a/examples/instrumentation/go-synthetic/go-synthetic.yaml
+++ b/examples/instrumentation/go-synthetic/go-synthetic.yaml
@@ -29,7 +29,7 @@ spec:
       containers:
       - name: go-synthetic
         # TODO(bwplotka): Rename image to go-synthetic (example-app is misleading, we actually use go-synthetic).
-        image: gke.gcr.io/prometheus-engine/example-app:v0.15.0-gke.8
+        image: gke.gcr.io/prometheus-engine/example-app:v0.17.0-gke.8
         args:
         - "--listen-address=:8080"
         - "--cpu-burn-ops=75"
diff --git a/hack/Dockerfile b/hack/Dockerfile
index 260347018c..56665c80b4 100644
--- a/hack/Dockerfile
+++ b/hack/Dockerfile
@@ -14,7 +14,7 @@
 
 # deps builds binaries in an isolated environment to avoid
 # funkiness in the hermetic build.
-FROM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS deps
+FROM google-go.pkg.dev/golang:1.26.5@sha256:5075e8b0e1a7913c2274737c1a8b379ea264322c082bd21d3911d196dce46559 AS deps
 WORKDIR /workspace
 # Have to clone and install this as the go.mod uses replace directives.
 # RUN git clone --depth 1 --branch v0.53.1 https://github.com/prometheus-operator/prometheus-operator  \
@@ -30,7 +30,7 @@ RUN bingo -v get # TODO(bwplotka): It takes 177s in docker container with colima
 
 # hermetic is a lite copy of the repo resources used in building
 # testing in a hermetic, idempotent, and reproducable environment.
-FROM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS hermetic
+FROM google-go.pkg.dev/golang:1.26.5@sha256:5075e8b0e1a7913c2274737c1a8b379ea264322c082bd21d3911d196dce46559 AS hermetic
 
 COPY --from=deps /go/bin /go/bin
 ARG RUNCMD='go fmt ./...'
@@ -75,8 +75,8 @@ COPY --from=hermetic /workspace/e2e e2e
 COPY --from=hermetic /workspace/vendor vendor.tmp
 
 ## kindtest image for running tests against kind cluster in hermetic environment.
-FROM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase
-FROM docker:28.0-cli AS docker
+FROM google-go.pkg.dev/golang:1.26.5@sha256:5075e8b0e1a7913c2274737c1a8b379ea264322c082bd21d3911d196dce46559 AS buildbase
+FROM docker:29.6-cli AS docker
 FROM debian:stable-slim AS kindtest
 
 WORKDIR /build