diff --git a/.github/workflows/call-argocd-bootstrap.yaml b/.github/workflows/call-argocd-bootstrap.yaml
index 90d3edb..1f43134 100644
--- a/.github/workflows/call-argocd-bootstrap.yaml
+++ b/.github/workflows/call-argocd-bootstrap.yaml
@@ -197,7 +197,7 @@ on:
         required: false
         type: string
         # renovate: datasource=github-releases depName=stuttgart-things/blueprints
-        default: v2.4.0
+        default: v3.11.0
       sops-module-version:
         description: "Version of stuttgart-things/dagger/sops (for kubeconfig decrypt step)"
         required: false
diff --git a/.github/workflows/call-create-vault-issuer.yaml b/.github/workflows/call-create-vault-issuer.yaml
index 3dd9c81..fe0b723 100644
--- a/.github/workflows/call-create-vault-issuer.yaml
+++ b/.github/workflows/call-create-vault-issuer.yaml
@@ -78,7 +78,7 @@ on:
         required: false
         type: string
         # renovate: datasource=github-releases depName=stuttgart-things/blueprints
-        default: v2.4.0
+        default: v3.11.0
 
 permissions:
   contents: read
diff --git a/.github/workflows/call-create-vault-k8s-auth.yaml b/.github/workflows/call-create-vault-k8s-auth.yaml
index 5feb841..985f5cf 100644
--- a/.github/workflows/call-create-vault-k8s-auth.yaml
+++ b/.github/workflows/call-create-vault-k8s-auth.yaml
@@ -105,7 +105,7 @@ on:
         # --bound-service-account-names. On anything older the four inputs above
         # are silently rejected by the module, so they move together.
         # renovate: datasource=github-releases depName=stuttgart-things/blueprints
-        default: v2.7.0
+        default: v3.11.0
 
 permissions:
   contents: read
diff --git a/.github/workflows/call-flux-bootstrap.yaml b/.github/workflows/call-flux-bootstrap.yaml
index ce3788f..13a9380 100644
--- a/.github/workflows/call-flux-bootstrap.yaml
+++ b/.github/workflows/call-flux-bootstrap.yaml
@@ -51,7 +51,7 @@ on:
         required: false
         type: string
         # renovate: datasource=github-releases depName=stuttgart-things/blueprints
-        default: v3.10.3
+        default: v3.11.0
       flux-cli-image:
         description: "Flux CLI image used for the reconciliation wait"
         required: false
diff --git a/.github/workflows/call-flux-destroy.yaml b/.github/workflows/call-flux-destroy.yaml
index 7ec3810..c4f67f0 100644
--- a/.github/workflows/call-flux-destroy.yaml
+++ b/.github/workflows/call-flux-destroy.yaml
@@ -44,7 +44,7 @@ on:
         required: false
         type: string
         # renovate: datasource=github-releases depName=stuttgart-things/blueprints
-        default: v3.10.3
+        default: v3.11.0
       sops-module-version:
         description: "SOPS Dagger module version"
         required: false
diff --git a/.github/workflows/call-repository-linting.yaml b/.github/workflows/call-repository-linting.yaml
index 14c9c6b..c88b533 100644
--- a/.github/workflows/call-repository-linting.yaml
+++ b/.github/workflows/call-repository-linting.yaml
@@ -31,7 +31,7 @@ on:
         required: false
         type: string
         # renovate: datasource=github-releases depName=stuttgart-things/blueprints
-        default: v1.15.0
+        default: v3.11.0
       environment-name:
         required: false
         type: string
diff --git a/.github/workflows/this-lint-repo.yaml b/.github/workflows/this-lint-repo.yaml
index 3d8af44..c48cd14 100644
--- a/.github/workflows/this-lint-repo.yaml
+++ b/.github/workflows/this-lint-repo.yaml
@@ -23,6 +23,6 @@ jobs:
       continue-error: "true"
       dagger-version: v0.21.10
       # renovate: datasource=github-releases depName=stuttgart-things/blueprints
-      dagger-module-version: v1.17.0
+      dagger-module-version: v3.11.0
       branch-name: ${{ github.head_ref || github.ref_name }}
     secrets: inherit # pragma: allowlist secret