diff --git a/.prow.yaml b/.prow.yaml
index b0ef6c4baee..9969dba0f8c 100644
--- a/.prow.yaml
+++ b/.prow.yaml
@@ -5,7 +5,7 @@ presubmits:
   run_if_changed: '^(\.prow|prow/(config|plugins|cluster/jobs/.*))\.yaml$'
   spec:
     containers:
-    - image: gcr.io/k8s-prow/checkconfig:v20210705-6238fe35f8
+    - image: gcr.io/k8s-prow/checkconfig:v20210707-3e989f60ab
       command:
       - /checkconfig
       args:
diff --git a/prow/cluster/cherrypicker_deployment.yaml b/prow/cluster/cherrypicker_deployment.yaml
index a00886c1136..1014b286f45 100644
--- a/prow/cluster/cherrypicker_deployment.yaml
+++ b/prow/cluster/cherrypicker_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: cherrypicker
-        image: gcr.io/k8s-prow/cherrypicker:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/cherrypicker:v20210707-3e989f60ab
         args:
         - --create-issue-on-conflict
         - --dry-run=false
diff --git a/prow/cluster/crier_deployment.yaml b/prow/cluster/crier_deployment.yaml
index a16b509be3e..6c2c80e216a 100644
--- a/prow/cluster/crier_deployment.yaml
+++ b/prow/cluster/crier_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: crier
-        image: gcr.io/k8s-prow/crier:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/crier:v20210707-3e989f60ab
         args:
         - --blob-storage-workers=1
         - --config-path=/etc/config/config.yaml
diff --git a/prow/cluster/deck_deployment.yaml b/prow/cluster/deck_deployment.yaml
index f659ab1b91d..806910aa1c4 100644
--- a/prow/cluster/deck_deployment.yaml
+++ b/prow/cluster/deck_deployment.yaml
@@ -24,7 +24,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck
-        image: gcr.io/k8s-prow/deck:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/deck:v20210707-3e989f60ab
         ports:
         - name: http
           containerPort: 8080
diff --git a/prow/cluster/deck_private_deployment.yaml b/prow/cluster/deck_private_deployment.yaml
index 3ee630d950b..ccaafbf1c1a 100644
--- a/prow/cluster/deck_private_deployment.yaml
+++ b/prow/cluster/deck_private_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck-private
-        image: gcr.io/k8s-prow/deck:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/deck:v20210707-3e989f60ab
         ports:
         - name: http
           containerPort: 8080
diff --git a/prow/cluster/ghproxy.yaml b/prow/cluster/ghproxy.yaml
index 198a137d6de..26239209b50 100644
--- a/prow/cluster/ghproxy.yaml
+++ b/prow/cluster/ghproxy.yaml
@@ -34,7 +34,7 @@ spec:
     spec:
       containers:
       - name: ghproxy
-        image: gcr.io/k8s-prow/ghproxy:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/ghproxy:v20210707-3e989f60ab
         args:
         - --cache-dir=/cache
         - --cache-sizeGB=99
diff --git a/prow/cluster/hook_deployment.yaml b/prow/cluster/hook_deployment.yaml
index 53970e3ff77..b978ddc174c 100644
--- a/prow/cluster/hook_deployment.yaml
+++ b/prow/cluster/hook_deployment.yaml
@@ -24,7 +24,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: hook
-        image: gcr.io/k8s-prow/hook:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/hook:v20210707-3e989f60ab
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/horologium_deployment.yaml b/prow/cluster/horologium_deployment.yaml
index 43cd1b89eaf..0b8f8a6a9f7 100644
--- a/prow/cluster/horologium_deployment.yaml
+++ b/prow/cluster/horologium_deployment.yaml
@@ -19,7 +19,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: horologium
-        image: gcr.io/k8s-prow/horologium:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/horologium:v20210707-3e989f60ab
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml b/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
index 852bc0bb9e2..d199e0230ec 100644
--- a/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
+++ b/prow/cluster/jobs/istio/test-infra/istio.test-infra.master.yaml
@@ -9,7 +9,7 @@ presubmits:
       testgrid-create-test-group: "false"
     spec:
       containers:
-      - image: gcr.io/k8s-prow/transfigure:v20210705-6238fe35f8
+      - image: gcr.io/k8s-prow/transfigure:v20210707-3e989f60ab
         command:
         - /transfigure.sh
         args:
diff --git a/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml b/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
index 4a9f82c0f85..14963381b5d 100644
--- a/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
+++ b/prow/cluster/jobs/istio/test-infra/istio.test-infra.trusted.master.yaml
@@ -46,7 +46,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/branchprotector:v20210705-6238fe35f8
+    - image: gcr.io/k8s-prow/branchprotector:v20210707-3e989f60ab
       command:
       - /app/prow/cmd/branchprotector/app.binary
       args:
@@ -76,7 +76,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/generic-autobumper:v20210705-6238fe35f8
+    - image: gcr.io/k8s-prow/generic-autobumper:v20210707-3e989f60ab
       command:
       - /app/prow/cmd/generic-autobumper/app.binary
       args:
@@ -107,7 +107,7 @@ periodics:
     testgrid-create-test-group: "false"
   spec:
     containers:
-    - image: gcr.io/k8s-prow/generic-autobumper:v20210705-6238fe35f8
+    - image: gcr.io/k8s-prow/generic-autobumper:v20210707-3e989f60ab
       command:
       - /app/prow/cmd/generic-autobumper/app.binary
       args:
diff --git a/prow/cluster/needs-rebase_deployment.yaml b/prow/cluster/needs-rebase_deployment.yaml
index 36081b81091..b3fc84091cb 100644
--- a/prow/cluster/needs-rebase_deployment.yaml
+++ b/prow/cluster/needs-rebase_deployment.yaml
@@ -32,7 +32,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: needs-rebase
-        image: gcr.io/k8s-prow/needs-rebase:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/needs-rebase:v20210707-3e989f60ab
         args:
         - --dry-run=false
         - --github-endpoint=http://ghproxy
diff --git a/prow/cluster/prow-controller-manager.yaml b/prow/cluster/prow-controller-manager.yaml
index 51ed8e081e8..0f46e3500a9 100644
--- a/prow/cluster/prow-controller-manager.yaml
+++ b/prow/cluster/prow-controller-manager.yaml
@@ -20,7 +20,7 @@ spec:
       serviceAccountName: prow-controller-manager
       containers:
       - name: prow-controller-manager
-        image: gcr.io/k8s-prow/prow-controller-manager:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/prow-controller-manager:v20210707-3e989f60ab
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/sinker_deployment.yaml b/prow/cluster/sinker_deployment.yaml
index 670f4dad2bb..f8230440e4e 100644
--- a/prow/cluster/sinker_deployment.yaml
+++ b/prow/cluster/sinker_deployment.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: sinker
       containers:
       - name: sinker
-        image: gcr.io/k8s-prow/sinker:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/sinker:v20210707-3e989f60ab
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/cluster/statusreconciler_deployment.yaml b/prow/cluster/statusreconciler_deployment.yaml
index d4ec0be891a..68a9dd39492 100644
--- a/prow/cluster/statusreconciler_deployment.yaml
+++ b/prow/cluster/statusreconciler_deployment.yaml
@@ -20,7 +20,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: statusreconciler
-        image: gcr.io/k8s-prow/status-reconciler:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/status-reconciler:v20210707-3e989f60ab
         imagePullPolicy: Always
         args:
         - --config-path=/etc/config/config.yaml
diff --git a/prow/cluster/tide_deployment.yaml b/prow/cluster/tide_deployment.yaml
index ebf0af60182..4614ef404db 100644
--- a/prow/cluster/tide_deployment.yaml
+++ b/prow/cluster/tide_deployment.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: tide
       containers:
       - name: tide
-        image: gcr.io/k8s-prow/tide:v20210705-6238fe35f8
+        image: gcr.io/k8s-prow/tide:v20210707-3e989f60ab
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/prow/config.yaml b/prow/config.yaml
index 86ec8204e68..1d00e8e702e 100644
--- a/prow/config.yaml
+++ b/prow/config.yaml
@@ -11,10 +11,10 @@ plank:
       timeout: 2h
       grace_period: 15s
       utility_images:
-        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210705-6238fe35f8"
-        initupload: "gcr.io/k8s-prow/initupload:v20210705-6238fe35f8"
-        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210705-6238fe35f8"
-        sidecar: "gcr.io/k8s-prow/sidecar:v20210705-6238fe35f8"
+        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210707-3e989f60ab"
+        initupload: "gcr.io/k8s-prow/initupload:v20210707-3e989f60ab"
+        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210707-3e989f60ab"
+        sidecar: "gcr.io/k8s-prow/sidecar:v20210707-3e989f60ab"
       gcs_configuration:
         bucket: "istio-prow"
         path_strategy: "explicit"
@@ -23,10 +23,10 @@ plank:
       timeout: 2h
       grace_period: 15s
       utility_images:
-        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210705-6238fe35f8"
-        initupload: "gcr.io/k8s-prow/initupload:v20210705-6238fe35f8"
-        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210705-6238fe35f8"
-        sidecar: "gcr.io/k8s-prow/sidecar:v20210705-6238fe35f8"
+        clonerefs: "gcr.io/k8s-prow/clonerefs:v20210707-3e989f60ab"
+        initupload: "gcr.io/k8s-prow/initupload:v20210707-3e989f60ab"
+        entrypoint: "gcr.io/k8s-prow/entrypoint:v20210707-3e989f60ab"
+        sidecar: "gcr.io/k8s-prow/sidecar:v20210707-3e989f60ab"
       gcs_configuration:
         bucket: "istio-private-build"
         path_strategy: "explicit"