diff --git a/.github/workflows/call-ansible-collection.yaml b/.github/workflows/call-ansible-collection.yaml
index 49fd4e9..508b9db 100644
--- a/.github/workflows/call-ansible-collection.yaml
+++ b/.github/workflows/call-ansible-collection.yaml
@@ -21,7 +21,7 @@ on:
       dagger-module-version:
         required: false
         type: string
-        default: v0.132.0
+        default: v0.136.3
       environment-name:
         required: false
         type: string
diff --git a/.github/workflows/call-argocd-bootstrap.yaml b/.github/workflows/call-argocd-bootstrap.yaml
index 6033185..6c93ea6 100644
--- a/.github/workflows/call-argocd-bootstrap.yaml
+++ b/.github/workflows/call-argocd-bootstrap.yaml
@@ -201,7 +201,7 @@ on:
         description: "Version of stuttgart-things/dagger/sops (for kubeconfig decrypt step)"
         required: false
         type: string
-        default: v0.132.0
+        default: v0.136.3
 
 permissions:
   contents: read
diff --git a/.github/workflows/call-dagger-govulncheck.yaml b/.github/workflows/call-dagger-govulncheck.yaml
index 988bfed..f28bf9f 100644
--- a/.github/workflows/call-dagger-govulncheck.yaml
+++ b/.github/workflows/call-dagger-govulncheck.yaml
@@ -11,7 +11,7 @@ on:
         type: string
         description: "Directory containing Go source to scan (passed as --src)"
       dagger-module:
-        default: "github.com/stuttgart-things/dagger/go@v0.132.0"
+        default: "github.com/stuttgart-things/dagger/go@v0.136.3"
         type: string
       dagger-version:
         default: "0.21.9"
diff --git a/.github/workflows/call-dagger-ko-build.yaml b/.github/workflows/call-dagger-ko-build.yaml
index ce4748f..a92d60d 100644
--- a/.github/workflows/call-dagger-ko-build.yaml
+++ b/.github/workflows/call-dagger-ko-build.yaml
@@ -27,7 +27,7 @@ on:
         default: "true"
         type: string
       dagger-module:
-        default: "github.com/stuttgart-things/dagger/go@v0.132.0"
+        default: "github.com/stuttgart-things/dagger/go@v0.136.3"
         type: string
       dagger-version:
         default: "0.21.9"
diff --git a/.github/workflows/call-dagger-security-scan.yaml b/.github/workflows/call-dagger-security-scan.yaml
index e57ae51..27236dc 100644
--- a/.github/workflows/call-dagger-security-scan.yaml
+++ b/.github/workflows/call-dagger-security-scan.yaml
@@ -11,7 +11,7 @@ on:
         type: string
         description: "Directory containing Go source to scan (passed as --src)"
       dagger-module:
-        default: "github.com/stuttgart-things/dagger/go@v0.132.0"
+        default: "github.com/stuttgart-things/dagger/go@v0.136.3"
         type: string
       dagger-version:
         default: "0.21.9"
diff --git a/.github/workflows/call-dagger-trivy-image-scan.yaml b/.github/workflows/call-dagger-trivy-image-scan.yaml
index 2341354..a27e846 100644
--- a/.github/workflows/call-dagger-trivy-image-scan.yaml
+++ b/.github/workflows/call-dagger-trivy-image-scan.yaml
@@ -21,7 +21,7 @@ on:
         default: "0.64.1"
         type: string
       dagger-module:
-        default: "github.com/stuttgart-things/dagger/trivy@v0.132.0"
+        default: "github.com/stuttgart-things/dagger/trivy@v0.136.3"
         type: string
       dagger-version:
         default: "0.21.9"
diff --git a/.github/workflows/call-flux-bootstrap.yaml b/.github/workflows/call-flux-bootstrap.yaml
index e3dafc4..6df7b96 100644
--- a/.github/workflows/call-flux-bootstrap.yaml
+++ b/.github/workflows/call-flux-bootstrap.yaml
@@ -61,7 +61,7 @@ on:
         description: "SOPS Dagger module version"
         required: false
         type: string
-        default: v0.132.0
+        default: v0.136.3
 
 jobs:
   Flux-Bootstrap:
diff --git a/.github/workflows/call-flux-check.yaml b/.github/workflows/call-flux-check.yaml
index a81ec3a..fc55547 100644
--- a/.github/workflows/call-flux-check.yaml
+++ b/.github/workflows/call-flux-check.yaml
@@ -33,7 +33,7 @@ on:
         description: "SOPS Dagger module version"
         required: false
         type: string
-        default: v0.132.0
+        default: v0.136.3
       kubectl-image:
         description: "Container image with kubectl"
         required: false
diff --git a/.github/workflows/call-flux-destroy.yaml b/.github/workflows/call-flux-destroy.yaml
index c2cf6f4..ac945da 100644
--- a/.github/workflows/call-flux-destroy.yaml
+++ b/.github/workflows/call-flux-destroy.yaml
@@ -48,7 +48,7 @@ on:
         description: "SOPS Dagger module version"
         required: false
         type: string
-        default: v0.132.0
+        default: v0.136.3
 
 jobs:
   Flux-Destroy:
diff --git a/.github/workflows/call-go-microservice-release.yaml b/.github/workflows/call-go-microservice-release.yaml
index f47289b..9968702 100644
--- a/.github/workflows/call-go-microservice-release.yaml
+++ b/.github/workflows/call-go-microservice-release.yaml
@@ -13,16 +13,16 @@ on:
         default: v0.21.9
         type: string
       dagger-release-module:
-        default: github.com/stuttgart-things/dagger/release@v0.132.0
+        default: github.com/stuttgart-things/dagger/release@v0.136.3
         type: string
       dagger-go-module:
-        default: github.com/stuttgart-things/dagger/go@v0.132.0
+        default: github.com/stuttgart-things/dagger/go@v0.136.3
         type: string
       dagger-crane-module:
-        default: github.com/stuttgart-things/dagger/crane@v0.132.0
+        default: github.com/stuttgart-things/dagger/crane@v0.136.3
         type: string
       dagger-kcl-module:
-        default: github.com/stuttgart-things/dagger/kcl@v0.134.0
+        default: github.com/stuttgart-things/dagger/kcl@v0.136.3
         type: string
       releaser-version:
         default: v2.13.3
diff --git a/.github/workflows/call-go-release.yaml b/.github/workflows/call-go-release.yaml
index a8a3790..2d982f6 100644
--- a/.github/workflows/call-go-release.yaml
+++ b/.github/workflows/call-go-release.yaml
@@ -62,10 +62,10 @@ on:
         type: boolean
         description: Semantic-release dry run only
       dagger-release-module:
-        default: github.com/stuttgart-things/dagger/release@v0.132.0
+        default: github.com/stuttgart-things/dagger/release@v0.136.3
         type: string
       dagger-kcl-module:
-        default: github.com/stuttgart-things/dagger/kcl@v0.134.0
+        default: github.com/stuttgart-things/dagger/kcl@v0.136.3
         type: string
 
 permissions:
diff --git a/.github/workflows/call-push-kustomize.yaml b/.github/workflows/call-push-kustomize.yaml
index 7212a15..c29f9c3 100644
--- a/.github/workflows/call-push-kustomize.yaml
+++ b/.github/workflows/call-push-kustomize.yaml
@@ -56,7 +56,7 @@ on:
           Kept at the version the kcl module installs, so a tag written here and
           an artefact pushed there cannot come from two different oras.
       dagger-kcl-module:
-        default: github.com/stuttgart-things/dagger/kcl@v0.134.0
+        default: github.com/stuttgart-things/dagger/kcl@v0.136.3
         type: string
       dagger-version:
         default: "0.21.9"
diff --git a/.github/workflows/call-python-validation.yaml b/.github/workflows/call-python-validation.yaml
index 26778e4..69246f3 100644
--- a/.github/workflows/call-python-validation.yaml
+++ b/.github/workflows/call-python-validation.yaml
@@ -22,7 +22,7 @@ on:
         required: false
         type: string
       dagger-module-version:
-        default: v0.132.0
+        default: v0.136.3
         required: false
         type: string
       environment-name:
diff --git a/.github/workflows/call-release-artifact.yaml b/.github/workflows/call-release-artifact.yaml
index 3da80ed..ad70130 100644
--- a/.github/workflows/call-release-artifact.yaml
+++ b/.github/workflows/call-release-artifact.yaml
@@ -24,7 +24,7 @@ on:
       dagger-module-version:
         required: false
         type: string
-        default: v0.132.0
+        default: v0.136.3
       dagger-version:
         required: false
         type: string
diff --git a/.github/workflows/call-terraform-vault.yaml b/.github/workflows/call-terraform-vault.yaml
index e8d5e04..29163e0 100644
--- a/.github/workflows/call-terraform-vault.yaml
+++ b/.github/workflows/call-terraform-vault.yaml
@@ -52,7 +52,7 @@ on:
       sops-module-version:
         required: false
         type: string
-        default: v0.132.0
+        default: v0.136.3
       terraform-version:
         required: false
         type: string