diff --git a/aws/autoscaling-workers/autoscaling-workers.env b/aws/autoscaling-workers/autoscaling-workers.env
index b0e780b..43e9ab7 100644
--- a/aws/autoscaling-workers/autoscaling-workers.env
+++ b/aws/autoscaling-workers/autoscaling-workers.env
@@ -5,11 +5,11 @@ export AWS_SSH_KEY_NAME=talos-ssh
 export AWS_VPC_ID=vpc-xxyyyzz
 export AWS_SUBNET=subnet-xxyyzz
 # renovate: datasource=github-releases depName=projectcalico/calico
-export CALICO_VERSION=v3.24.1
+export CALICO_VERSION=v3.26.3
 # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=kubernetes/kubernetes
-export KUBERNETES_VERSION=1.21.0
+export KUBERNETES_VERSION=1.28.2
 # renovate: datasource=github-releases extractVersion=^(?<version>v\d+\.\d+)\.\d+$ depName=siderolabs/talos
-export TALOS_VERSION=v0.10
+export TALOS_VERSION=v0.14
 
 ## Control plane vars
 export CONTROL_PLANE_MACHINE_COUNT=3
diff --git a/aws/multi-az/multi-az.env b/aws/multi-az/multi-az.env
index f6bddcf..51929e4 100644
--- a/aws/multi-az/multi-az.env
+++ b/aws/multi-az/multi-az.env
@@ -13,11 +13,11 @@ export AWS_REGION=us-east-1
 export AWS_SSH_KEY_NAME=talos-ssh
 export AWS_VPC_ID=vpc-xxyyyzz
 # renovate: datasource=github-releases depName=projectcalico/calico
-export CALICO_VERSION=v3.24.1
+export CALICO_VERSION=v3.26.3
 # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=kubernetes/kubernetes
-export KUBERNETES_VERSION=1.21.0
+export KUBERNETES_VERSION=1.28.2
 # renovate: datasource=github-releases extractVersion=^(?<version>v\d+\.\d+)\.\d+$ depName=siderolabs/talos
-export TALOS_VERSION=v0.10
+export TALOS_VERSION=v0.14
 
 ## Control plane vars
 export AWS_CONTROL_PLANE_LB_URL=xxyyzz.elb.us-east-1.amazonaws.com
diff --git a/aws/standard/standard.env b/aws/standard/standard.env
index af30250..da9b91b 100644
--- a/aws/standard/standard.env
+++ b/aws/standard/standard.env
@@ -6,11 +6,11 @@ export AWS_VPC_ID=vpc-xxyyyzz
 export AWS_SUBNET=subnet-xxyyzz
 export AWS_SUBNET_AZ=${AWS_SSH_KEY_NAME}a
 # renovate: datasource=github-releases depName=projectcalico/calico
-export CALICO_VERSION=v3.24.1
+export CALICO_VERSION=v3.26.3
 # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=kubernetes/kubernetes
-export KUBERNETES_VERSION=1.21.0
+export KUBERNETES_VERSION=1.28.2
 # renovate: datasource=github-releases extractVersion=^(?<version>v\d+\.\d+)\.\d+$ depName=siderolabs/talos
-export TALOS_VERSION=v0.10
+export TALOS_VERSION=v0.14
 
 ## Control plane vars
 export CONTROL_PLANE_MACHINE_COUNT=3
diff --git a/gcp/standard/standard.env b/gcp/standard/standard.env
index 609aa34..d51e9d4 100644
--- a/gcp/standard/standard.env
+++ b/gcp/standard/standard.env
@@ -4,9 +4,9 @@ export GCP_PROJECT=my-testbed
 export GCP_REGION=us-central1
 export GCP_NETWORK=default
 # renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=kubernetes/kubernetes
-export KUBERNETES_VERSION=1.20.5
+export KUBERNETES_VERSION=1.28.2
 # renovate: datasource=github-releases extractVersion=^(?<version>v\d+\.\d+)\.\d+$ depName=siderolabs/talos
-export TALOS_VERSION=v0.13
+export TALOS_VERSION=v0.14
 export GCP_VM_SVC_ACCOUNT=mysvcacct@my-testbed.iam.gserviceaccount.com
 
 ## Control plane vars