diff --git a/.github/workflows/tidy.yml b/.github/workflows/tidy.yml
index a00b4a803..c6f9ef54b 100644
--- a/.github/workflows/tidy.yml
+++ b/.github/workflows/tidy.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v3.0.0
+        uses: actions/checkout@v3.0.2
       -
         # https://github.com/actions/checkout/issues/6
         name: Fix detached HEAD
diff --git a/Dockerfile b/Dockerfile
index 0646fb419..7d94a99de 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@ RUN K8SCCPATH=$(go list -m -f '{{.Path}}' github.com/giantswarm/k8scloudconfig/.
     && K8SCCROOT=$(go list -m -f '{{.Dir}}' github.com/giantswarm/k8scloudconfig/...) \
     && mv $K8SCCROOT /opt/k8scloudconfig
 
-FROM alpine:3.14.0
+FROM alpine:3.16.1
 
 RUN apk add --no-cache ca-certificates
 
diff --git a/go.mod b/go.mod
index 87400b553..aad7b85e7 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/giantswarm/kvm-operator/v4
 
-go 1.16
+go 1.19
 
 require (
 	github.com/giantswarm/apiextensions/v3 v3.27.1
@@ -19,10 +19,10 @@ require (
 	github.com/giantswarm/tenantcluster/v4 v4.1.0
 	github.com/giantswarm/to v0.3.0
 	github.com/giantswarm/versionbundle v0.2.0
-	github.com/google/go-cmp v0.5.6
-	github.com/prometheus/client_golang v1.11.0
-	github.com/spf13/viper v1.8.1
-	golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
+	github.com/google/go-cmp v0.5.8
+	github.com/prometheus/client_golang v1.12.2
+	github.com/spf13/viper v1.12.0
+	golang.org/x/sync 886fb9371eb4
 	k8s.io/api v0.18.19
 	k8s.io/apimachinery v0.18.19
 	k8s.io/client-go v0.18.19