diff --git a/.cirrus.yml b/.cirrus.yml
index e2f552cbd20..5309343fd65 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -11,8 +11,8 @@ task:
   env:
     HOME: /root
     CIRRUS_WORKING_DIR: /home/runc
-    GO_VER_PREFIX: "1.24."
-    BATS_VERSION: "v1.11.1"
+    GO_VER_PREFIX: "1.25."
+    BATS_VERSION: "v1.12.0"
     RPMS: gcc git-core iptables jq glibc-static libseccomp-devel make criu fuse-sshfs container-selinux
     # yamllint disable rule:key-duplicates
     matrix:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b9295bf04aa..5ec5bafa2fd 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -108,7 +108,7 @@ jobs:
     - name: Setup Bats and bats libs
       uses: bats-core/bats-action@3.0.1
       with:
-        bats-version: 1.11.1 # Known as BATS_VERSION in other places.
+        bats-version: 1.12.0 # Known as BATS_VERSION in other places.
         support-install: false
         assert-install: false
         detik-install: false
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 1bf393c0b7b..0522874bad3 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -114,9 +114,9 @@ jobs:
       - uses: actions/checkout@v6
       - name: install shellcheck
         env:
-          VERSION: v0.10.0
+          VERSION: v0.11.0
           BASEURL: https://github.com/koalaman/shellcheck/releases/download
-          SHA256: f35ae15a4677945428bdfe61ccc297490d89dd1e544cc06317102637638c6deb
+          SHA256: 4da528ddb3a4d1b7b24a59d4e16eb2f5fd960f4bd9a3708a15baddbdf1d5a55b
         run: |
           mkdir ~/bin
           curl -sSfL --retry 5 $BASEURL/$VERSION/shellcheck-$VERSION.linux.x86_64.tar.xz |
diff --git a/Dockerfile b/Dockerfile
index ae10e34661f..e4f3df3545b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
-ARG GO_VERSION=1.24
-ARG BATS_VERSION=v1.11.1
-ARG LIBSECCOMP_VERSION=2.5.6
+ARG GO_VERSION=1.25
+ARG BATS_VERSION=v1.12.0
+ARG LIBSECCOMP_VERSION=2.6.0
 
 FROM golang:${GO_VERSION}-bookworm
 ARG DEBIAN_FRONTEND=noninteractive
diff --git a/script/release_build.sh b/script/release_build.sh
index 98b07f23f0e..0e0a221839e 100755
--- a/script/release_build.sh
+++ b/script/release_build.sh
@@ -19,7 +19,7 @@ set -e
 ## --->
 # Project-specific options and functions. In *theory* you shouldn't need to
 # touch anything else in this script in order to use this elsewhere.
-: "${LIBSECCOMP_VERSION:=2.5.6}"
+: "${LIBSECCOMP_VERSION:=2.6.0}"
 project="runc"
 root="$(readlink -f "$(dirname "${BASH_SOURCE[0]}")/..")"