diff --git a/hack/kbld/go.mod b/hack/kbld/go.mod
index c6c300d..29d6161 100644
--- a/hack/kbld/go.mod
+++ b/hack/kbld/go.mod
@@ -2,7 +2,7 @@ module github.com/servicebinding/runtime/hack/kbld
 
 go 1.26.3
 
-require carvel.dev/kbld v0.49.1
+require carvel.dev/kbld v0.49.2
 
 require (
 	carvel.dev/imgpkg v0.48.1 // indirect
@@ -37,7 +37,7 @@ require (
 	github.com/vito/go-interact v1.0.1 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
-	golang.org/x/net v0.53.0 // indirect
+	golang.org/x/net v0.55.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.45.0 // indirect
 	golang.org/x/term v0.43.0 // indirect
diff --git a/hack/kbld/go.sum b/hack/kbld/go.sum
index b5acbec..7fce30b 100644
--- a/hack/kbld/go.sum
+++ b/hack/kbld/go.sum
@@ -1,7 +1,7 @@
 carvel.dev/imgpkg v0.48.1 h1:Ea6UufZKqSg9S6Bf1s83ye9GoLTnnAudIEDLSww3C7w=
 carvel.dev/imgpkg v0.48.1/go.mod h1:5+V0WDTaVOxnUosJ/6btoL7rXvmDCWYlBYV3BS9LBhg=
-carvel.dev/kbld v0.49.1 h1:MTzlYsE8jh5NgO8jXPmviet7PxAj9YLvF4AUWeYcbY8=
-carvel.dev/kbld v0.49.1/go.mod h1:BZ4NjHPebN2Di9fepOK5RsE92+BKxddOfRTFnCWOO/Q=
+carvel.dev/kbld v0.49.2 h1:mA6WfLJALpwifNbDdzf9woG6kf+l57DUx3apqYV7CbU=
+carvel.dev/kbld v0.49.2/go.mod h1:DLIUCB58nNWc6HtedKbUOvrE0+GRcf0CxLfN8EkQ/f4=
 carvel.dev/vendir v0.45.4 h1:FO6JVnr0aA0Qd8Ews2baIjYRAejyBSxVvLMuSqVvwTk=
 carvel.dev/vendir v0.45.4/go.mod h1:ArnuY2g3wXtY4okBnJ4PpU7GyJGTot0w9hsuwXP0Rvw=
 github.com/carvel-dev/semver/v4 v4.0.1 h1:tGL+KPLJ/fnZTz7ssct0PO+HmiJLZYG+h6Im7KMcNFY=
@@ -136,8 +136,8 @@ golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
-golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA=
-golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs=
+golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
+golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=