diff --git a/devenv/Containerfile.c10s b/devenv/Containerfile.c10s
index 1e3e542..0090f7a 100644
--- a/devenv/Containerfile.c10s
+++ b/devenv/Containerfile.c10s
@@ -27,21 +27,21 @@ EORUN
 
 FROM base as tools
 # renovate: datasource=github-releases depName=astral-sh/uv
-ARG uvversion=0.12.13
+ARG uvversion=0.12.17
 COPY fetch-tools.py tool-versions.txt install-uv.sh /run/src/
 RUN /run/src/fetch-tools.py
 RUN uvversion=$uvversion /run/src/install-uv.sh
 
 FROM base as rust
 # renovate: datasource=custom.rust-nightly depName=rust-nightly versioning=rust-release-channel
-ARG rust_nightly=nightly-2026-09-14
+ARG rust_nightly=nightly-2026-09-20
 COPY install-rust.sh /run/src/
 RUN rust_nightly=$rust_nightly /run/src/install-rust.sh
 
 # Kani formal verification tool - requires rustup for toolchain management
 FROM rust as kani
 # renovate: datasource=crate depName=kani-verifier
-ARG kaniversion=0.67.0
+ARG kaniversion=0.68.0
 COPY install-kani.sh /run/src/
 RUN kaniversion=$kaniversion /run/src/install-kani.sh
 
diff --git a/devenv/Containerfile.debian b/devenv/Containerfile.debian
index 3dbced5..dc2c50a 100644
--- a/devenv/Containerfile.debian
+++ b/devenv/Containerfile.debian
@@ -30,21 +30,21 @@ EORUN
 
 FROM base AS tools
 # renovate: datasource=github-releases depName=astral-sh/uv
-ARG uvversion=0.12.13
+ARG uvversion=0.12.17
 COPY fetch-tools.py tool-versions.txt install-uv.sh /run/src/
 RUN apt -y install python3 && /run/src/fetch-tools.py && apt -y purge python3 && apt -y autoremove
 RUN uvversion=$uvversion /run/src/install-uv.sh
 
 FROM base AS rust
 # renovate: datasource=custom.rust-nightly depName=rust-nightly versioning=rust-release-channel
-ARG rust_nightly=nightly-2026-09-14
+ARG rust_nightly=nightly-2026-09-20
 COPY install-rust.sh /run/src/
 RUN rust_nightly=$rust_nightly /run/src/install-rust.sh
 
 # Kani formal verification tool - requires rustup for toolchain management
 FROM rust AS kani
 # renovate: datasource=crate depName=kani-verifier
-ARG kaniversion=0.67.0
+ARG kaniversion=0.68.0
 COPY install-kani.sh /run/src/
 RUN kaniversion=$kaniversion /run/src/install-kani.sh
 
diff --git a/devenv/Containerfile.ubuntu b/devenv/Containerfile.ubuntu
index a4ba23d..44c8379 100644
--- a/devenv/Containerfile.ubuntu
+++ b/devenv/Containerfile.ubuntu
@@ -42,21 +42,21 @@ EORUN
 
 FROM base AS tools
 # renovate: datasource=github-releases depName=astral-sh/uv
-ARG uvversion=0.12.13
+ARG uvversion=0.12.17
 COPY fetch-tools.py tool-versions.txt install-uv.sh /run/src/
 RUN apt -y install python3 && /run/src/fetch-tools.py && apt -y purge python3 && apt -y autoremove
 RUN uvversion=$uvversion /run/src/install-uv.sh
 
 FROM base AS rust
 # renovate: datasource=custom.rust-nightly depName=rust-nightly versioning=rust-release-channel
-ARG rust_nightly=nightly-2026-09-14
+ARG rust_nightly=nightly-2026-09-20
 COPY install-rust.sh /run/src/
 RUN rust_nightly=$rust_nightly /run/src/install-rust.sh
 
 # Kani formal verification tool - requires rustup for toolchain management
 FROM rust AS kani
 # renovate: datasource=crate depName=kani-verifier
-ARG kaniversion=0.67.0
+ARG kaniversion=0.68.0
 COPY install-kani.sh /run/src/
 RUN kaniversion=$kaniversion /run/src/install-kani.sh
 
diff --git a/devenv/tool-versions.txt b/devenv/tool-versions.txt
index d02cddf..0d97e53 100644
--- a/devenv/tool-versions.txt
+++ b/devenv/tool-versions.txt
@@ -11,6 +11,6 @@ nushell@0.115.1
 # renovate: datasource=github-releases depName=jj-vcs/jj
 jj@0.45.1
 # renovate: datasource=github-releases depName=nextest-rs/nextest
-cargo-nextest@0.9.144
+cargo-nextest@0.9.145
 # renovate: datasource=github-releases depName=block/goose
-goose@v1.50.1
+goose@v1.51.0