diff --git a/.github/workflows/diagram.yml b/.github/workflows/diagram.yml
index abd74b7..ff7c75d 100644
--- a/.github/workflows/diagram.yml
+++ b/.github/workflows/diagram.yml
@@ -26,7 +26,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Update diagram
         uses: githubocto/repo-visualizer@a999615bdab757559bf94bda1fe6eef232765f85 # 0.9.1
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 37e188a..407136c 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -17,13 +17,13 @@ jobs:
   check-broken-links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Check broken links
         uses: gaurav-nelson/github-action-markdown-link-check@4a1af151f4d7cf4d8f8ac5780597672a3671b88b # 1.0.17
   check-super-linter:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Check super-linter
         uses: github/super-linter@b807e99ddd37e444d189cfd2c2ca1274d8ae8ef1 # 7
         env:
@@ -36,7 +36,7 @@ jobs:
   check-tox:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Install tox
         run: pip install tox --break-system-packages
       - name: Run tox validation
diff --git a/.github/workflows/on_demand.yml b/.github/workflows/on_demand.yml
index 7552c17..109cdd9 100644
--- a/.github/workflows/on_demand.yml
+++ b/.github/workflows/on_demand.yml
@@ -27,7 +27,7 @@ jobs:
     if: >-
       ( github.event_name == 'pull_request_review' && github.event.review.state == 'approved' ) || github.event_name != 'pull_request_review'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Run the sh-checker
         uses: luizm/action-sh-checker@17bd25a6ee188d2b91f677060038f4ba37ba14b2 # 0.9.0
         env:
@@ -43,7 +43,7 @@ jobs:
     outputs:
       demos: ${{ steps.filter.outputs.changes }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # 3.0.2
         if: ${{ !env.ACT }}
         id: filter
@@ -69,8 +69,8 @@ jobs:
       matrix:
         demo: ${{ fromJSON(needs.changes.outputs.demos) }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
-      - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # 5.5.0
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # 6.1.0
         with:
           go-version: "1.24"
           check-latest: true
@@ -81,7 +81,7 @@ jobs:
     name: Run BDD shell specs for Bash demo
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - name: Install ShellSpec
         run: curl -fsSL https://github.com/shellspec/shellspec/releases/latest/download/shellspec-dist.tar.gz | tar -xz -C ..
       - name: Run Shellspec
diff --git a/.github/workflows/spell.yml b/.github/workflows/spell.yml
index 5f67428..d05bb66 100644
--- a/.github/workflows/spell.yml
+++ b/.github/workflows/spell.yml
@@ -22,14 +22,14 @@ jobs:
     name: Check spelling (reviewdog)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
-      - uses: reviewdog/action-misspell@8f4203d27a6896ebd5cd8bdd861b36bd18c37978 # 1.26.3
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
+      - uses: reviewdog/action-misspell@e7ea17f144822818706c7e579de7927d59384575 # 1.27.0
         with:
           github_token: ${{ secrets.github_token }}
   check-spellcheck:
     name: Check spelling (pyspelling)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
-      - uses: igsekor/pyspelling-any@155eb06641bb9259cab59b5126a40be943ecb4f7 # 1.0.4
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
+      - uses: igsekor/pyspelling-any@44278deea34ea69d8f0d5179ac409c140b0a2f5a # 1.0.5
         name: Spellcheck
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index af915cc..63814b7 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write # for technote-space/create-pr-action to create a PR
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
         with:
           # Fine-grained PAT with contents:write and workflows:write scopes
           token: ${{ secrets.WORKFLOW_TOKEN }}
@@ -35,7 +35,7 @@ jobs:
   check-dictionary:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # 6.0.0
       - uses: technote-space/create-pr-action@91114507cf92349bec0a9a501c2edf1635427bc5 # 2.1.4
         with:
           EXECUTE_COMMANDS: |
diff --git a/bash/Dockerfile b/bash/Dockerfile
index 251ef66..cc3c660 100644
--- a/bash/Dockerfile
+++ b/bash/Dockerfile
@@ -1,4 +1,4 @@
-FROM kindest/node:v1.33.1
+FROM kindest/node:v1.34.0
 
 COPY bin/plugin.sh /opt/cni/bin/bash-cni
 
diff --git a/flannel/Dockerfile b/flannel/Dockerfile
index 8c1440b..0d2ffe1 100644
--- a/flannel/Dockerfile
+++ b/flannel/Dockerfile
@@ -1,4 +1,4 @@
-FROM kindest/node:v1.33.1
+FROM kindest/node:v1.34.0
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN echo "wireshark-common wireshark-common/install-setuid boolean true" | debconf-set-selections && \
diff --git a/flannel/install.sh b/flannel/install.sh
index 9fd64b6..630885c 100755
--- a/flannel/install.sh
+++ b/flannel/install.sh
@@ -13,7 +13,7 @@ set -o xtrace
 set -o errexit
 set -o nounset
 
-export PKG_FLANNEL_VERSION=${PKG_FLANNEL_VERSION:-1.7.1-flannel1}
+export PKG_FLANNEL_VERSION=${PKG_FLANNEL_VERSION:-1.8.0-flannel2}
 export PKG_CNI_PLUGINS_INSTALL_FLANNEL=true
 export PKG="cni-plugins"
 export PKG_COMMANDS_LIST="docker,kind,kubectl"
diff --git a/flannel/kube-flannel.yaml b/flannel/kube-flannel.yaml
index 29dc567..ae5c98e 100644
--- a/flannel/kube-flannel.yaml
+++ b/flannel/kube-flannel.yaml
@@ -133,7 +133,7 @@ spec:
       serviceAccountName: flannel
       initContainers:
         - name: install-cni-plugin
-          image: ghcr.io/flannel-io/flannel-cni-plugin:v1.7.1-flannel1
+          image: ghcr.io/flannel-io/flannel-cni-plugin:v1.8.0-flannel1
           command:
             - cp
           args:
@@ -144,7 +144,7 @@ spec:
             - name: cni-plugin
               mountPath: /opt/cni/bin
         - name: install-cni
-          image: ghcr.io/flannel-io/flannel:v0.26.7
+          image: ghcr.io/flannel-io/flannel:v0.27.4
           command:
             - cp
           args:
@@ -158,7 +158,7 @@ spec:
               mountPath: /etc/kube-flannel/
       containers:
         - name: kube-flannel
-          image: ghcr.io/flannel-io/flannel:v0.26.7
+          image: ghcr.io/flannel-io/flannel:v0.27.4
           command:
             - /opt/bin/flanneld
           args:
@@ -183,6 +183,8 @@ spec:
                   fieldPath: metadata.namespace
             - name: EVENT_QUEUE_DEPTH
               value: "5000"
+            - name: CONT_WHEN_CACHE_NOT_READY
+              value: "false"
           volumeMounts:
             - name: run
               mountPath: /run/flannel
diff --git a/pause/install.sh b/pause/install.sh
index 283e85b..927ca5f 100755
--- a/pause/install.sh
+++ b/pause/install.sh
@@ -46,7 +46,7 @@ fi
 
 # umoci - Modifies Open Container Images
 if ! command -v umoci; then
-    sudo curl -o /usr/bin/umoci -sL https://github.com/opencontainers/umoci/releases/download/v0.5.0/umoci.linux.amd64
+    sudo curl -o /usr/bin/umoci -sL https://github.com/opencontainers/umoci/releases/download/v0.6.0/umoci.amd64
     sudo chmod +x /usr/bin/umoci
 fi
 
@@ -57,8 +57,8 @@ if ! command -v cnitool; then
 fi
 
 # runc - CLI tool for spawning and running containers according to the OCI specification.
-if ! command -v runc || [ "$(runc --version | awk 'NR==1{print $3}')" != "1.3.0" ]; then
-    sudo curl -o /usr/bin/runc -L https://github.com/opencontainers/runc/releases/download/v1.3.0/runc.amd64
+if ! command -v runc || [ "$(runc --version | awk 'NR==1{print $3}')" != "1.3.3" ]; then
+    sudo curl -o /usr/bin/runc -L https://github.com/opencontainers/runc/releases/download/v1.3.3/runc.amd64
     sudo chmod +x /usr/bin/runc
 fi