diff --git a/.prow.yaml b/.prow.yaml
index b95c190bcda..101f055335a 100644
--- a/.prow.yaml
+++ b/.prow.yaml
@@ -5,7 +5,7 @@ presubmits:
   run_if_changed: '^(\.prow|prow/(config|plugins|cluster/jobs/.*))\.yaml$'
   spec:
     containers:
-    - image: gcr.io/k8s-prow/checkconfig:v20210531-03cf33ddeb
+    - image: gcr.io/k8s-prow/checkconfig:v20210607-a3457f6e65
       command:
       - /checkconfig
       args:
diff --git a/prow/cluster/cherrypicker_deployment.yaml b/prow/cluster/cherrypicker_deployment.yaml
index a7842f55bd3..17d2949693e 100644
--- a/prow/cluster/cherrypicker_deployment.yaml
+++ b/prow/cluster/cherrypicker_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: cherrypicker
-        image: gcr.io/k8s-prow/cherrypicker:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/cherrypicker:v20210607-a3457f6e65
         args:
         - --create-issue-on-conflict
         - --dry-run=false
diff --git a/prow/cluster/crier_deployment.yaml b/prow/cluster/crier_deployment.yaml
index 27e00303448..05242c6a645 100644
--- a/prow/cluster/crier_deployment.yaml
+++ b/prow/cluster/crier_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: crier
-        image: gcr.io/k8s-prow/crier:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/crier:v20210607-a3457f6e65
         args:
         - --blob-storage-workers=1
         - --config-path=/etc/config/config.yaml
diff --git a/prow/cluster/deck_deployment.yaml b/prow/cluster/deck_deployment.yaml
index 79e63064eff..b2893ba76c4 100644
--- a/prow/cluster/deck_deployment.yaml
+++ b/prow/cluster/deck_deployment.yaml
@@ -24,7 +24,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck
-        image: gcr.io/k8s-prow/deck:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/deck:v20210607-a3457f6e65
         ports:
         - name: http
           containerPort: 8080
diff --git a/prow/cluster/deck_private_deployment.yaml b/prow/cluster/deck_private_deployment.yaml
index 7cc2e28bc4f..f06126c7c54 100644
--- a/prow/cluster/deck_private_deployment.yaml
+++ b/prow/cluster/deck_private_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck-private
-        image: gcr.io/k8s-prow/deck:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/deck:v20210607-a3457f6e65
         ports:
         - name: http
           containerPort: 8080
diff --git a/prow/cluster/ghproxy.yaml b/prow/cluster/ghproxy.yaml
index dd2967b9828..cb5ce229c4a 100644
--- a/prow/cluster/ghproxy.yaml
+++ b/prow/cluster/ghproxy.yaml
@@ -34,7 +34,7 @@ spec:
     spec:
       containers:
       - name: ghproxy
-        image: gcr.io/k8s-prow/ghproxy:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/ghproxy:v20210607-a3457f6e65
         args:
         - --cache-dir=/cache
         - --cache-sizeGB=99
diff --git a/prow/cluster/hook_deployment.yaml b/prow/cluster/hook_deployment.yaml
index 23241243df6..8bf07b2b0c4 100644
--- a/prow/cluster/hook_deployment.yaml
+++ b/prow/cluster/hook_deployment.yaml
@@ -24,7 +24,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: hook
-        image: gcr.io/k8s-prow/hook:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/hook:v20210607-a3457f6e65
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/horologium_deployment.yaml b/prow/cluster/horologium_deployment.yaml
index 1e9d1315fec..7ed94b245c0 100644
--- a/prow/cluster/horologium_deployment.yaml
+++ b/prow/cluster/horologium_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: horologium
-        image: gcr.io/k8s-prow/horologium:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/horologium:v20210607-a3457f6e65
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml b/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
index bb6814235c2..5cac6421622 100644
--- a/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
+++ b/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
@@ -9,7 +9,7 @@ presubmits:
       testgrid-create-test-group: "false"
     spec:
       containers:
-      - image: gcr.io/k8s-prow/transfigure:v20210531-03cf33ddeb
+      - image: gcr.io/k8s-prow/transfigure:v20210607-a3457f6e65
         command:
         - /transfigure.sh
         args:
diff --git a/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml b/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
index 19e2fb0ec6c..95896ac586f 100644
--- a/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
+++ b/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
@@ -46,7 +46,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/branchprotector:v20210531-03cf33ddeb
+    - image: gcr.io/k8s-prow/branchprotector:v20210607-a3457f6e65
       command:
       - /app/prow/cmd/branchprotector/app.binary
       args:
@@ -76,7 +76,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/generic-autobumper:v20210531-03cf33ddeb
+    - image: gcr.io/k8s-prow/generic-autobumper:v20210607-a3457f6e65
       command:
       - /app/prow/cmd/generic-autobumper/app.binary
       args:
diff --git a/prow/cluster/needs-rebase_deployment.yaml b/prow/cluster/needs-rebase_deployment.yaml
index bd2b9bda88a..1d9fcca0fdd 100644
--- a/prow/cluster/needs-rebase_deployment.yaml
+++ b/prow/cluster/needs-rebase_deployment.yaml
@@ -32,7 +32,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: needs-rebase
-        image: gcr.io/k8s-prow/needs-rebase:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/needs-rebase:v20210607-a3457f6e65
         args:
         - --dry-run=false
         - --github-endpoint=http://ghproxy
diff --git a/prow/cluster/prow-controller-manager.yaml b/prow/cluster/prow-controller-manager.yaml
index c712f81eed7..ccb497fe8ad 100644
--- a/prow/cluster/prow-controller-manager.yaml
+++ b/prow/cluster/prow-controller-manager.yaml
@@ -20,7 +20,7 @@ spec:
       serviceAccountName: prow-controller-manager
       containers:
       - name: prow-controller-manager
-        image: gcr.io/k8s-prow/prow-controller-manager:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/prow-controller-manager:v20210607-a3457f6e65
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/sinker_deployment.yaml b/prow/cluster/sinker_deployment.yaml
index 62e9bc8d4e4..60276205329 100644
--- a/prow/cluster/sinker_deployment.yaml
+++ b/prow/cluster/sinker_deployment.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: sinker
       containers:
       - name: sinker
-        image: gcr.io/k8s-prow/sinker:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/sinker:v20210607-a3457f6e65
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/statusreconciler_deployment.yaml b/prow/cluster/statusreconciler_deployment.yaml
index 54469c308c7..49107731870 100644
--- a/prow/cluster/statusreconciler_deployment.yaml
+++ b/prow/cluster/statusreconciler_deployment.yaml
@@ -20,7 +20,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: statusreconciler
-        image: gcr.io/k8s-prow/status-reconciler:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/status-reconciler:v20210607-a3457f6e65
         imagePullPolicy: Always
         args:
         - --config-path=/etc/config/config.yaml
diff --git a/prow/cluster/tide_deployment.yaml b/prow/cluster/tide_deployment.yaml
index dab41df4668..baec9b3866f 100644
--- a/prow/cluster/tide_deployment.yaml
+++ b/prow/cluster/tide_deployment.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: tide
       containers:
       - name: tide
-        image: gcr.io/k8s-prow/tide:v20210531-03cf33ddeb
+        image: gcr.io/k8s-prow/tide:v20210607-a3457f6e65
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/config.yaml b/prow/config.yaml
index a6263f2e0c1..7446da7f00f 100644
--- a/prow/config.yaml
+++ b/prow/config.yaml
@@ -11,10 +11,10 @@ plank:
       timeout: 2h
       grace_period: 15s
       utility_images:
-        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210531-03cf33ddeb"
-        initupload: "gcr.io/k8s-prow/initupload:v20210531-03cf33ddeb"
-        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210531-03cf33ddeb"
-        sidecar: "gcr.io/k8s-prow/sidecar:v20210531-03cf33ddeb"
+        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210607-a3457f6e65"
+        initupload: "gcr.io/k8s-prow/initupload:v20210607-a3457f6e65"
+        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210607-a3457f6e65"
+        sidecar: "gcr.io/k8s-prow/sidecar:v20210607-a3457f6e65"
       gcs_configuration:
         bucket: "istio-prow"
         path_strategy: "explicit"
@@ -23,10 +23,10 @@ plank:
       timeout: 2h
       grace_period: 15s
       utility_images:
-        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210531-03cf33ddeb"
-        initupload: "gcr.io/k8s-prow/initupload:v20210531-03cf33ddeb"
-        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210531-03cf33ddeb"
-        sidecar: "gcr.io/k8s-prow/sidecar:v20210531-03cf33ddeb"
+        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210607-a3457f6e65"
+        initupload: "gcr.io/k8s-prow/initupload:v20210607-a3457f6e65"
+        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210607-a3457f6e65"
+        sidecar: "gcr.io/k8s-prow/sidecar:v20210607-a3457f6e65"
       gcs_configuration:
         bucket: "istio-private-build"
         path_strategy: "explicit"