diff --git a/.devcontainer/Dockerfile.conan b/.devcontainer/Dockerfile.conan
index 6bc27a7a2b..013746139e 100644
--- a/.devcontainer/Dockerfile.conan
+++ b/.devcontainer/Dockerfile.conan
@@ -1,6 +1,6 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
-FROM ubuntu:24.04@sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac
+FROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c
 
 RUN apt update && apt install -y \
 	build-essential \
diff --git a/.devcontainer/Dockerfile.dev b/.devcontainer/Dockerfile.dev
index d0e99fcdcd..e9582faf1c 100644
--- a/.devcontainer/Dockerfile.dev
+++ b/.devcontainer/Dockerfile.dev
@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM ubuntu:24.04@sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac
+FROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c
 
 ARG USER_UID=1000
 ARG USER_GID=1000
diff --git a/MODULE.bazel b/MODULE.bazel
index 881da4595e..f99e32fa41 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -9,7 +9,7 @@ module(
 
 bazel_dep(name = "abseil-cpp", version = "20260817.0", repo_name = "com_google_absl")
 bazel_dep(name = "bazel_skylib", version = "1.9.2")
-bazel_dep(name = "curl", version = "8.22.0")
+bazel_dep(name = "curl", version = "8.22.0.bcr.1")
 bazel_dep(name = "grpc", version = "1.84.0", repo_name = "com_github_grpc_grpc")
 bazel_dep(name = "nlohmann_json", version = "3.12.0.bcr.2", repo_name = "github_nlohmann_json")
 bazel_dep(name = "opentelemetry-proto", version = "1.8.0", repo_name = "com_github_opentelemetry_proto")
@@ -21,7 +21,7 @@ bazel_dep(name = "rapidyaml", version = "0.15.2")
 bazel_dep(name = "rules_cc", version = "0.2.27")
 bazel_dep(name = "rules_foreign_cc", version = "0.17.0")
 bazel_dep(name = "rules_proto", version = "7.1.0")
-bazel_dep(name = "zlib", version = "1.3.2.bcr.2")
+bazel_dep(name = "zlib", version = "1.3.2.bcr.3")
 
 bazel_dep(name = "google_benchmark", version = "1.10.0", dev_dependency = True, repo_name = "com_github_google_benchmark")
 bazel_dep(name = "googletest", version = "1.18.0.bcr.1", dev_dependency = True, repo_name = "com_google_googletest")
diff --git a/docker/Dockerfile.ubuntu-latest.base b/docker/Dockerfile.ubuntu-latest.base
index 465f4c1c19..5a1c5c60c9 100644
--- a/docker/Dockerfile.ubuntu-latest.base
+++ b/docker/Dockerfile.ubuntu-latest.base
@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-ARG BASE_IMAGE=ubuntu:26.04@sha256:c098726dd9b9733f3e885f8de0ef375206a311b0a317eadc40d347b1115fb944
+ARG BASE_IMAGE=ubuntu:26.04@sha256:19fcd1bf268f02b60aca3bd30bd8a6d9a11759a430e32921833e65f16d87348a
 
 FROM ${BASE_IMAGE} AS final
 
diff --git a/ext/test/w3c_tracecontext_http_test_server/Dockerfile b/ext/test/w3c_tracecontext_http_test_server/Dockerfile
index 78091860c6..5a19796c31 100644
--- a/ext/test/w3c_tracecontext_http_test_server/Dockerfile
+++ b/ext/test/w3c_tracecontext_http_test_server/Dockerfile
@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM python:3.15.1@sha256:dc005c4de6908d750269a5ee683da95b4cfb5bf419f69b8e95d98d9e44bb2841
+FROM python:3.15.2@sha256:903cb0a6ea2fb0aff701912a249023565979932372cca63a50c53d649737a0ed
 
 RUN pip install aiohttp
 RUN git clone https://github.com/w3c/trace-context