diff --git a/ansible/group_vars/all/defaults.yaml b/ansible/group_vars/all/defaults.yaml
index 655e902e8..9f3d1fdbf 100644
--- a/ansible/group_vars/all/defaults.yaml
+++ b/ansible/group_vars/all/defaults.yaml
@@ -5,11 +5,11 @@ python_path: ""
 # If it's not there, the kubernetes_full_version will have "None" for a version number.
 #
 # IMPORTANT When you update kubernetes_version, also update crictl_version.
-kubernetes_version: "1.30.5"
+kubernetes_version: "1.31.4"
 kubernetes_major_minor: "{{ (kubernetes_version.split('.') | map('trim'))[:2] | join('.') }}"
 kubernetes_semver: "v{{ kubernetes_version }}"
 
-kubernetes_cni_version: "1.4.0"
+kubernetes_cni_version: "1.5.1"
 
 # The crictl CLI is released as part of the http://sigs.k8s.io/cri-tools project.
 # The project release closely follows the Kubernetes release cycle, and uses a
@@ -21,7 +21,7 @@ crictl_version: "{{ kubernetes_major_minor }}.1"
 # The url points to the linux/amd64 release artifact.
 crictl_url: https://github.com/kubernetes-sigs/cri-tools/releases/download/v{{ crictl_version }}/crictl-v{{ crictl_version }}-linux-amd64.tar.gz
 # The sha256 sum verifies the integrity of the release artifact.
-crictl_sha256: 71873cdeeeb6c9ee0f79c27b45db38066da81f0c30dcda909b4eedc3aff63f59
+crictl_sha256: 0a03ba6b1e4c253d63627f8d210b2ea07675a8712587e697657b236d06d7d231
 
 
 # The critools deb and rpm package versions. While the version derives directly from
@@ -32,7 +32,7 @@ critools_deb: "{{ crictl_version }}-1.1"
 critools_rpm: "{{ crictl_version }}-0"
 
 # Containerd container runtime version.
-containerd_version: "1.7.22"
+containerd_version: "1.7.24"
 
 # NOTE(jkoelker) `nvidia_cuda_version` is set via an override, it is listed
 #                empty here for documentation.
diff --git a/images/common.yaml b/images/common.yaml
index a1cb5b353..41e878a9f 100644
--- a/images/common.yaml
+++ b/images/common.yaml
@@ -1,5 +1,5 @@
 ---
-kubernetes_version: "1.30.5"
+kubernetes_version: "1.31.4"
 
 packer:
   goss_arch: amd64