diff --git a/.prow.yaml b/.prow.yaml
index 8acf41edf25..4d85ee18d6e 100644
--- a/.prow.yaml
+++ b/.prow.yaml
@@ -5,7 +5,7 @@ presubmits:
   run_if_changed: '^(\.prow|prow/(config|plugins|cluster/jobs/.*))\.yaml$'
   spec:
     containers:
-    - image: gcr.io/k8s-prow/checkconfig:v20210625-e1bdf10806
+    - image: gcr.io/k8s-prow/checkconfig:v20210628-e1fb22ef3f
       command:
       - /checkconfig
       args:
diff --git a/prow/cluster/cherrypicker_deployment.yaml b/prow/cluster/cherrypicker_deployment.yaml
index 41f64abd289..67e52280fe9 100644
--- a/prow/cluster/cherrypicker_deployment.yaml
+++ b/prow/cluster/cherrypicker_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: cherrypicker
-        image: gcr.io/k8s-prow/cherrypicker:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/cherrypicker:v20210628-e1fb22ef3f
         args:
         - --create-issue-on-conflict
         - --dry-run=false
diff --git a/prow/cluster/crier_deployment.yaml b/prow/cluster/crier_deployment.yaml
index e7dad861836..797ad7d1dc0 100644
--- a/prow/cluster/crier_deployment.yaml
+++ b/prow/cluster/crier_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: crier
-        image: gcr.io/k8s-prow/crier:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/crier:v20210628-e1fb22ef3f
         args:
         - --blob-storage-workers=1
         - --config-path=/etc/config/config.yaml
diff --git a/prow/cluster/deck_deployment.yaml b/prow/cluster/deck_deployment.yaml
index d9abd6974df..0b1c272889a 100644
--- a/prow/cluster/deck_deployment.yaml
+++ b/prow/cluster/deck_deployment.yaml
@@ -24,7 +24,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck
-        image: gcr.io/k8s-prow/deck:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/deck:v20210628-e1fb22ef3f
         ports:
         - name: http
           containerPort: 8080
diff --git a/prow/cluster/deck_private_deployment.yaml b/prow/cluster/deck_private_deployment.yaml
index 2e824db4a65..83965113af4 100644
--- a/prow/cluster/deck_private_deployment.yaml
+++ b/prow/cluster/deck_private_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck-private
-        image: gcr.io/k8s-prow/deck:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/deck:v20210628-e1fb22ef3f
         ports:
         - name: http
           containerPort: 8080
diff --git a/prow/cluster/ghproxy.yaml b/prow/cluster/ghproxy.yaml
index 27d7850e139..893f7b329c9 100644
--- a/prow/cluster/ghproxy.yaml
+++ b/prow/cluster/ghproxy.yaml
@@ -34,7 +34,7 @@ spec:
     spec:
       containers:
       - name: ghproxy
-        image: gcr.io/k8s-prow/ghproxy:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/ghproxy:v20210628-e1fb22ef3f
         args:
         - --cache-dir=/cache
         - --cache-sizeGB=99
diff --git a/prow/cluster/hook_deployment.yaml b/prow/cluster/hook_deployment.yaml
index 3dc82f27252..e2c30d881c6 100644
--- a/prow/cluster/hook_deployment.yaml
+++ b/prow/cluster/hook_deployment.yaml
@@ -24,7 +24,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: hook
-        image: gcr.io/k8s-prow/hook:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/hook:v20210628-e1fb22ef3f
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/horologium_deployment.yaml b/prow/cluster/horologium_deployment.yaml
index 95d7f9056bf..f72929067fe 100644
--- a/prow/cluster/horologium_deployment.yaml
+++ b/prow/cluster/horologium_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: horologium
-        image: gcr.io/k8s-prow/horologium:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/horologium:v20210628-e1fb22ef3f
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml b/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
index dbbc6f2e453..718a7d460c0 100644
--- a/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
+++ b/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
@@ -9,7 +9,7 @@ presubmits:
       testgrid-create-test-group: "false"
     spec:
       containers:
-      - image: gcr.io/k8s-prow/transfigure:v20210625-e1bdf10806
+      - image: gcr.io/k8s-prow/transfigure:v20210628-e1fb22ef3f
         command:
         - /transfigure.sh
         args:
diff --git a/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml b/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
index e7470993b92..3fc44ff86d8 100644
--- a/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
+++ b/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
@@ -46,7 +46,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/branchprotector:v20210625-e1bdf10806
+    - image: gcr.io/k8s-prow/branchprotector:v20210628-e1fb22ef3f
       command:
       - /app/prow/cmd/branchprotector/app.binary
       args:
@@ -76,7 +76,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/generic-autobumper:v20210625-e1bdf10806
+    - image: gcr.io/k8s-prow/generic-autobumper:v20210628-e1fb22ef3f
       command:
       - /app/prow/cmd/generic-autobumper/app.binary
       args:
@@ -107,7 +107,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/generic-autobumper:v20210625-e1bdf10806
+    - image: gcr.io/k8s-prow/generic-autobumper:v20210628-e1fb22ef3f
       command:
       - /app/prow/cmd/generic-autobumper/app.binary
       args:
diff --git a/prow/cluster/needs-rebase_deployment.yaml b/prow/cluster/needs-rebase_deployment.yaml
index 204a80f2e95..e1ce2d40594 100644
--- a/prow/cluster/needs-rebase_deployment.yaml
+++ b/prow/cluster/needs-rebase_deployment.yaml
@@ -32,7 +32,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: needs-rebase
-        image: gcr.io/k8s-prow/needs-rebase:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/needs-rebase:v20210628-e1fb22ef3f
         args:
         - --dry-run=false
         - --github-endpoint=http://ghproxy
diff --git a/prow/cluster/prow-controller-manager.yaml b/prow/cluster/prow-controller-manager.yaml
index 45174aa65e5..b09584e7cf0 100644
--- a/prow/cluster/prow-controller-manager.yaml
+++ b/prow/cluster/prow-controller-manager.yaml
@@ -20,7 +20,7 @@ spec:
       serviceAccountName: prow-controller-manager
       containers:
       - name: prow-controller-manager
-        image: gcr.io/k8s-prow/prow-controller-manager:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/prow-controller-manager:v20210628-e1fb22ef3f
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/sinker_deployment.yaml b/prow/cluster/sinker_deployment.yaml
index b79883298e1..29bd6346424 100644
--- a/prow/cluster/sinker_deployment.yaml
+++ b/prow/cluster/sinker_deployment.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: sinker
       containers:
       - name: sinker
-        image: gcr.io/k8s-prow/sinker:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/sinker:v20210628-e1fb22ef3f
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/statusreconciler_deployment.yaml b/prow/cluster/statusreconciler_deployment.yaml
index 60c5079855b..67331181d67 100644
--- a/prow/cluster/statusreconciler_deployment.yaml
+++ b/prow/cluster/statusreconciler_deployment.yaml
@@ -20,7 +20,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: statusreconciler
-        image: gcr.io/k8s-prow/status-reconciler:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/status-reconciler:v20210628-e1fb22ef3f
         imagePullPolicy: Always
         args:
         - --config-path=/etc/config/config.yaml
diff --git a/prow/cluster/tide_deployment.yaml b/prow/cluster/tide_deployment.yaml
index 88dd491b24b..d43a06fbea3 100644
--- a/prow/cluster/tide_deployment.yaml
+++ b/prow/cluster/tide_deployment.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: tide
       containers:
       - name: tide
-        image: gcr.io/k8s-prow/tide:v20210625-e1bdf10806
+        image: gcr.io/k8s-prow/tide:v20210628-e1fb22ef3f
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/config.yaml b/prow/config.yaml
index 532a59fbfdb..8b5eb28fceb 100644
--- a/prow/config.yaml
+++ b/prow/config.yaml
@@ -11,10 +11,10 @@ plank:
       timeout: 2h
       grace_period: 15s
       utility_images:
-        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210625-e1bdf10806"
-        initupload: "gcr.io/k8s-prow/initupload:v20210625-e1bdf10806"
-        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210625-e1bdf10806"
-        sidecar: "gcr.io/k8s-prow/sidecar:v20210625-e1bdf10806"
+        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210628-e1fb22ef3f"
+        initupload: "gcr.io/k8s-prow/initupload:v20210628-e1fb22ef3f"
+        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210628-e1fb22ef3f"
+        sidecar: "gcr.io/k8s-prow/sidecar:v20210628-e1fb22ef3f"
       gcs_configuration:
         bucket: "istio-prow"
         path_strategy: "explicit"
@@ -23,10 +23,10 @@ plank:
       timeout: 2h
       grace_period: 15s
       utility_images:
-        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210625-e1bdf10806"
-        initupload: "gcr.io/k8s-prow/initupload:v20210625-e1bdf10806"
-        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210625-e1bdf10806"
-        sidecar: "gcr.io/k8s-prow/sidecar:v20210625-e1bdf10806"
+        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210628-e1fb22ef3f"
+        initupload: "gcr.io/k8s-prow/initupload:v20210628-e1fb22ef3f"
+        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210628-e1fb22ef3f"
+        sidecar: "gcr.io/k8s-prow/sidecar:v20210628-e1fb22ef3f"
       gcs_configuration:
         bucket: "istio-private-build"
         path_strategy: "explicit"