diff --git a/gcb/makestage/cloudbuild.yaml b/gcb/makestage/cloudbuild.yaml
index 5a5ee84..1887995 100644
--- a/gcb/makestage/cloudbuild.yaml
+++ b/gcb/makestage/cloudbuild.yaml
@@ -25,7 +25,7 @@ timeout: 2700s # 45m
 steps:
 # cert-manager relies on the git checkout to determine release version, among other things
 # By default, gcb only does a shallow clone, so we need to "unshallow" to get more details
-- name: gcr.io/cloud-builders/git@sha256:f959828c674284bbd5931f7d1cc032f706f6106431212c7b4b45a15b2f285ee0
+- name: gcr.io/cloud-builders/git@sha256:a0040ee3b9751c1f7532a09bb4a1cf24987359990547830293cf85a81fd7a82f
   dir: "go/src/github.com/cert-manager/cert-manager"
   entrypoint: bash
   args:
diff --git a/gcb/publish/cloudbuild.yaml b/gcb/publish/cloudbuild.yaml
index 9ef79be..ebd5a24 100644
--- a/gcb/publish/cloudbuild.yaml
+++ b/gcb/publish/cloudbuild.yaml
@@ -31,7 +31,7 @@ steps:
   - github.com/sigstore/cosign/cmd/cosign@${_COSIGN_REPO_REF}
 
 ## Write DOCKER_CONFIG file to $HOME/.docker/config.json
-- name: gcr.io/cloud-builders/docker:24.0.9@sha256:11725daa24f72d647a67dee9c472b4fbb39ef55c2df268bf6be923333d375923
+- name: gcr.io/cloud-builders/docker:24.0.9@sha256:911e89d1c48ec842569acfd158e68da3fbfb457a78a33102b1f09a42cadf3f9f
   entrypoint: bash
   secretEnv:
   - DOCKER_CONFIG
@@ -42,7 +42,7 @@ steps:
     echo "$${DOCKER_CONFIG}" > $$HOME/.docker/config.json
 
 ## Build and push the release artifacts
-- name: gcr.io/cloud-builders/docker:24.0.9@sha256:11725daa24f72d647a67dee9c472b4fbb39ef55c2df268bf6be923333d375923
+- name: gcr.io/cloud-builders/docker:24.0.9@sha256:911e89d1c48ec842569acfd158e68da3fbfb457a78a33102b1f09a42cadf3f9f
   dir: "go/src/github.com/cert-manager/cert-manager"
   entrypoint: /go/bin/cmrel
   secretEnv:
diff --git a/gcb/stage/cloudbuild.yaml b/gcb/stage/cloudbuild.yaml
index d6cbafb..cb34d34 100644
--- a/gcb/stage/cloudbuild.yaml
+++ b/gcb/stage/cloudbuild.yaml
@@ -3,7 +3,7 @@ timeout: 14400s
 steps:
 
 ## Clone & checkout the cert-manager repository
-- name: gcr.io/cloud-builders/git@sha256:f959828c674284bbd5931f7d1cc032f706f6106431212c7b4b45a15b2f285ee0
+- name: gcr.io/cloud-builders/git@sha256:a0040ee3b9751c1f7532a09bb4a1cf24987359990547830293cf85a81fd7a82f
   dir: "go/src/github.com/cert-manager/cert-manager"
   entrypoint: bash
   args: