diff --git a/test/Dockerfile.distro b/test/Dockerfile.distro
index 20ef9337b5..227dd2e155 100644
--- a/test/Dockerfile.distro
+++ b/test/Dockerfile.distro
@@ -126,7 +126,7 @@ RUN install-tool vendir v0.45.0
 RUN install-tool wally 0.3.2
 
 # renovate: datasource=github-releases packageName=protocolbuffers/protobuf versioning=docker
-RUN install-tool protoc 33.1
+RUN install-tool protoc 33.2
 
 #--------------------------------------
 # Image: test-docker
diff --git a/test/latest/Dockerfile b/test/latest/Dockerfile
index 61e334af62..8ef98560a1 100644
--- a/test/latest/Dockerfile
+++ b/test/latest/Dockerfile
@@ -247,7 +247,7 @@ RUN install-tool sops v3.11.0
 RUN install-tool tofu 1.10.7
 
 # renovate: datasource=github-releases packageName=protocolbuffers/protobuf versioning=docker
-RUN install-tool protoc 33.1
+RUN install-tool protoc 33.2
 
 # renovate: datasource=github-releases depName=vendir packageName=vmware-tanzu/carvel-vendir
 ARG VENDIR_VERSION=v0.45.0
@@ -295,7 +295,7 @@ RUN kustomize version | grep "${KUSTOMIZE_VERSION}"
 FROM base AS testf
 
 # renovate: datasource=github-releases depName=protoc packageName=protocolbuffers/protobuf versioning=docker
-ARG PROTOC_VERSION=33.1
+ARG PROTOC_VERSION=33.2
 
 RUN set -ex; \
   ls -lah /opt/containerbase/; \
diff --git a/test/latest/Dockerfile.arm64 b/test/latest/Dockerfile.arm64
index 6255048815..28c5efc2fa 100644
--- a/test/latest/Dockerfile.arm64
+++ b/test/latest/Dockerfile.arm64
@@ -173,7 +173,7 @@ RUN install-tool sops v3.11.0
 RUN install-tool wally 0.3.2
 
 # renovate: datasource=github-releases packageName=protocolbuffers/protobuf versioning=docker
-RUN install-tool protoc 33.1
+RUN install-tool protoc 33.2
 
 # renovate: datasource=github-releases packageName=prefix-dev/pixi
 RUN install-tool pixi v0.60.0