diff --git a/.github/workflows/Makefile b/.github/workflows/Makefile
index 159bc0cf..f5742d11 100644
--- a/.github/workflows/Makefile
+++ b/.github/workflows/Makefile
@@ -2,7 +2,7 @@ HELM_VERSION ?= v3.7.2
 KUSTOMIZE_VERSION ?= v5.4.3
 K8S_VERSION ?= v1.28.11
 MINIKUBE_VERSION ?= v1.31.1
-SOPS_VERSION ?= v3.9.0
+SOPS_VERSION ?= v3.9.1
 
 # ---
 CHANGE_MINIKUBE_NONE_USER ?= true
diff --git a/Dockerfile b/Dockerfile
index 7ed13dc1..20c4812d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -77,7 +77,7 @@ RUN set -x && \
     rm "${KUSTOMIZE_FILENAME}" && \
     [ "$(kustomize version)" = "${KUSTOMIZE_VERSION}" ]
 
-ENV SOPS_VERSION="v3.9.0"
+ENV SOPS_VERSION="v3.9.1"
 ARG SOPS_FILENAME="sops-${SOPS_VERSION}.${TARGETOS}.${TARGETARCH}"
 RUN set -x && \
     curl --retry 5 --retry-connrefused -LO "https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/${SOPS_FILENAME}" && \
diff --git a/Dockerfile.debian-stable-slim b/Dockerfile.debian-stable-slim
index a8ced00e..2ecff646 100644
--- a/Dockerfile.debian-stable-slim
+++ b/Dockerfile.debian-stable-slim
@@ -82,7 +82,7 @@ RUN set -x && \
     rm "${KUSTOMIZE_FILENAME}" && \
     [ "$(kustomize version)" = "${KUSTOMIZE_VERSION}" ]
 
-ENV SOPS_VERSION="v3.9.0"
+ENV SOPS_VERSION="v3.9.1"
 ARG SOPS_FILENAME="sops-${SOPS_VERSION}.${TARGETOS}.${TARGETARCH}"
 RUN set -x && \
     curl --retry 5 --retry-connrefused -LO "https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/${SOPS_FILENAME}" && \
diff --git a/Dockerfile.ubuntu b/Dockerfile.ubuntu
index 1395ba42..7dfc6a66 100644
--- a/Dockerfile.ubuntu
+++ b/Dockerfile.ubuntu
@@ -82,7 +82,7 @@ RUN set -x && \
     rm "${KUSTOMIZE_FILENAME}" && \
     [ "$(kustomize version)" = "${KUSTOMIZE_VERSION}" ]
 
-ENV SOPS_VERSION="v3.9.0"
+ENV SOPS_VERSION="v3.9.1"
 ARG SOPS_FILENAME="sops-${SOPS_VERSION}.${TARGETOS}.${TARGETARCH}"
 RUN set -x && \
     curl --retry 5 --retry-connrefused -LO "https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/${SOPS_FILENAME}" && \