diff --git a/.github/actions/image-builder/action.yml b/.github/actions/image-builder/action.yml
index 6852997a1660..13e6cf7eb234 100644
--- a/.github/actions/image-builder/action.yml
+++ b/.github/actions/image-builder/action.yml
@@ -82,7 +82,7 @@ runs:
       id: prepare-tags
       shell: bash
     
-    - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250320-5988cad1
+    - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250321-935679ce
       id: build
       with:
         args: --name=${{ inputs.image-name }} --context=${{ inputs.context }} --dockerfile=${{ inputs.dockerfile }} --azure-access-token=${{ inputs.ado-token }} --oidc-token=${{ inputs.oidc-token }} ${{ steps.prepare-build-args.outputs.build-args }} ${{ steps.prepare-tags.outputs.tags }} --export-tags=${{ inputs.export-tags }} --config=${{ inputs.config }} --env-file=${{ inputs.env-file }} --build-in-ado=true --use-go-internal-sap-modules=${{ inputs.use-go-internal-sap-modules }}
\ No newline at end of file
diff --git a/.github/workflows/autobump-docs-index-md.yml b/.github/workflows/autobump-docs-index-md.yml
index 1725daf34c68..624f8ed9e1fb 100644
--- a/.github/workflows/autobump-docs-index-md.yml
+++ b/.github/workflows/autobump-docs-index-md.yml
@@ -59,6 +59,6 @@ jobs:
             --workdir /github/test-infra \
             --privileged \
             --cap-drop ALL \
-            europe-docker.pkg.dev/kyma-project/prod/markdown-index:v20250320-5988cad1 \
+            europe-docker.pkg.dev/kyma-project/prod/markdown-index:v20250321-935679ce \
             --config=${{ env.AUTOBUMP_CONFIG_PATH }} \
             --labels-override=kind/chore,area/documentation
diff --git a/.github/workflows/autobump-security-config.yaml b/.github/workflows/autobump-security-config.yaml
index 9ad17ed62e02..dd527f4b8f17 100644
--- a/.github/workflows/autobump-security-config.yaml
+++ b/.github/workflows/autobump-security-config.yaml
@@ -72,7 +72,7 @@ jobs:
             --rm \
             --privileged \
             --cap-drop ALL \
-            europe-docker.pkg.dev/kyma-project/prod/image-detector:v20250320-5988cad1 \
+            europe-docker.pkg.dev/kyma-project/prod/image-detector:v20250321-0d21ee73 \
             --terraform-dir=${{ env.TERRAFORM_CONFIGS_DIR }} \
             --sec-scanner-config=${{ env.SEC_SCANNERS_CONFIG_PATH }} \
             --autobump-config=${{ env.AUTOBUMP_CONFIG_PATH }}
diff --git a/.github/workflows/image-autobumper.yml b/.github/workflows/image-autobumper.yml
index ba0db861a11e..cff5985000a7 100644
--- a/.github/workflows/image-autobumper.yml
+++ b/.github/workflows/image-autobumper.yml
@@ -4,7 +4,7 @@ on:
     inputs:
       docker-image:
         description: 'Docker image with tag to be used'
-        default: 'europe-docker.pkg.dev/kyma-project/prod/image-autobumper:v20250320-5988cad1'
+        default: 'europe-docker.pkg.dev/kyma-project/prod/image-autobumper:v20250321-935679ce'
         type: string
       autobump-config-path:
         description: 'Path to the autobump config file, relative to the repository root'
diff --git a/.github/workflows/image-syncer.yml b/.github/workflows/image-syncer.yml
index f9a542f54e73..8048fd9f14a3 100644
--- a/.github/workflows/image-syncer.yml
+++ b/.github/workflows/image-syncer.yml
@@ -100,7 +100,7 @@ jobs:
           --workdir /github/workspace
           --rm
           --volume "$GITHUB_WORKSPACE:/github/workspace"
-          europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20250320-5988cad1
+          europe-docker.pkg.dev/kyma-project/prod/image-syncer:v20250321-935679ce
           --images-file=/github/workspace/external-images.yaml
           --access-token=${{ steps.authenticate_in_gcp.outputs.access_token }}
           --dry-run=${{ steps.set_dry_run_flag.outputs.DRY_RUN }}
diff --git a/.github/workflows/pull-validate-kaniko-build-config.yml b/.github/workflows/pull-validate-kaniko-build-config.yml
index 361570af9b5a..4b6ddc8a350b 100644
--- a/.github/workflows/pull-validate-kaniko-build-config.yml
+++ b/.github/workflows/pull-validate-kaniko-build-config.yml
@@ -50,7 +50,7 @@ jobs:
           secrets: |-
             ado-pat:${{ vars.GCP_KYMA_PROJECT_PROJECT_ID }}/${{ vars.IMAGE_BUILDER_ADO_PAT_GCP_SECRET_NAME }}
 
-      - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250320-5988cad1
+      - uses: docker://europe-docker.pkg.dev/kyma-project/prod/image-builder:v20250321-935679ce
         id: build
         with:
           args: --name=test-infra/ginkgo --context=. --dockerfile=images/ginkgo/Dockerfile --azure-access-token=${{ steps.secrets.outputs.ado-pat }} --oidc-token=${{ steps.get_oidc.outputs.jwt }} --env-file='envs' --build-in-ado=true --test-kaniko-build-config=true --config="./configs/image-builder-client-config.yaml"
\ No newline at end of file
diff --git a/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars b/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars
index 822cdff2c223..0498d5354eee 100644
--- a/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars
+++ b/configs/terraform/environments/dev/secrets-rotator/terraform.tfvars
@@ -1,8 +1,8 @@
 project_id                                           = "sap-kyma-neighbors-dev"
 region                                               = "europe-west3"
 service_account_keys_rotator_service_name            = "service-account-keys-rotator"
-service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250320-5988cad1" #gitleaks:allow
+service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250321-935679ce" #gitleaks:allow
 service_account_keys_cleaner_service_name            = "service-account-keys-cleaner"
-service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250320-5988cad1" #gitleaks:allow
+service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250321-935679ce" #gitleaks:allow
 service_account_key_latest_version_min_age           = 24
 service_account_keys_cleaner_scheduler_cron_schedule = "0 0 * * 1-5"
diff --git a/configs/terraform/environments/prod/terraform.tfvars b/configs/terraform/environments/prod/terraform.tfvars
index 0165e310bce7..c8f5f7acd1e6 100644
--- a/configs/terraform/environments/prod/terraform.tfvars
+++ b/configs/terraform/environments/prod/terraform.tfvars
@@ -8,9 +8,9 @@ kyma_project_artifact_registry_collection = {
   },
 }
 service_account_keys_rotator_service_name            = "service-account-keys-rotator"
-service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250320-5988cad1" #gitleaks:allow
+service_account_keys_rotator_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/rotate-service-account:v20250321-935679ce" #gitleaks:allow
 service_account_keys_cleaner_service_name            = "service-account-keys-cleaner"
-service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250320-5988cad1" #gitleaks:allow
+service_account_keys_cleaner_image                   = "europe-docker.pkg.dev/kyma-project/prod/test-infra/service-account-keys-cleaner:v20250321-935679ce" #gitleaks:allow
 service_account_key_latest_version_min_age           = 24
 service_account_keys_cleaner_scheduler_cron_schedule = "0 0 * * 1-5"
 
diff --git a/configs/terraform/modules/cors-proxy/cors-proxy.tf b/configs/terraform/modules/cors-proxy/cors-proxy.tf
index fe78a04a33df..1ec1629c6f73 100644
--- a/configs/terraform/modules/cors-proxy/cors-proxy.tf
+++ b/configs/terraform/modules/cors-proxy/cors-proxy.tf
@@ -28,7 +28,7 @@ resource "google_cloud_run_service" "cors_proxy" {
   template {
     spec {
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20250320-5988cad1"
+        image = "europe-docker.pkg.dev/kyma-project/prod/cors-proxy:v20250321-935679ce"
         env {
           name  = "COMPONENT_NAME"
           value = "cors-proxy"
diff --git a/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf b/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf
index a30eeada6be2..fa3cb2e51963 100644
--- a/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf
+++ b/configs/terraform/modules/github-webhook-gateway/github-webhook-gateway.tf
@@ -67,7 +67,7 @@ resource "google_cloud_run_service" "github_webhook_gateway" {
     spec {
       service_account_name = google_service_account.github_webhook_gateway.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20250320-5988cad1"
+        image = "europe-docker.pkg.dev/kyma-project/prod/github-webhook-gateway:v20250321-0d21ee73"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf b/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf
index 30ead9e72e97..16103b2ec621 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/gcs-bucket-mover.tf
@@ -47,7 +47,7 @@ resource "google_cloud_run_service" "gcs_bucket_mover" {
     spec {
       service_account_name = google_service_account.gcs_bucket_mover.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20250320-5988cad1"
+        image = "europe-docker.pkg.dev/kyma-project/prod/move-gcs-bucket:v20250321-0d21ee73"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf
index 5528623ca7bc..b5650ae7388e 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-creator.tf
@@ -24,7 +24,7 @@ resource "google_cloud_run_service" "github_issue_creator" {
     spec {
       service_account_name = google_service_account.github_issue_creator.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20250320-5988cad1"
+        image = "europe-docker.pkg.dev/kyma-project/prod/create-github-issue:v20250321-0d21ee73"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf
index 00dc802a361f..36b382f3bb75 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/github-issue-finder.tf
@@ -24,7 +24,7 @@ resource "google_cloud_run_service" "github_issue_finder" {
     spec {
       service_account_name = google_service_account.github_issue_finder.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20250320-5988cad1"
+        image = "europe-docker.pkg.dev/kyma-project/prod/search-github-issue:v20250321-0d21ee73"
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id
diff --git a/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf b/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf
index e30ad0acdf40..dccd4dcf5961 100644
--- a/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf
+++ b/configs/terraform/modules/secrets-leaks-log-scanner/secrets-leak-log-scanner.tf
@@ -23,7 +23,7 @@ resource "google_cloud_run_service" "secrets_leak_log_scanner" {
     spec {
       service_account_name = google_service_account.secrets_leak_log_scanner.email
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20250320-5988cad1" #gitleaks:allow
+        image = "europe-docker.pkg.dev/kyma-project/prod/scan-logs-for-secrets:v20250321-0d21ee73" #gitleaks:allow
         env {
           name  = "PROJECT_ID"
           value = var.gcp_project_id
diff --git a/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf b/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf
index 27b0419b370f..fb11763a91ea 100644
--- a/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf
+++ b/configs/terraform/modules/security-dashboard-token/security-dashboard-token.tf
@@ -31,7 +31,7 @@ resource "google_cloud_run_service" "security_dashboard_token" {
   template {
     spec {
       containers {
-        image = "europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20250320-5988cad1" #gitleaks:allow ignore gitleaks detection
+        image = "europe-docker.pkg.dev/kyma-project/prod/dashboard-token-proxy:v20250321-935679ce" #gitleaks:allow ignore gitleaks detection
         env {
           name = "CLIENT_SECRET"
           value_from {
diff --git a/prow/cluster/components/automated-approver_external-plugin.yaml b/prow/cluster/components/automated-approver_external-plugin.yaml
index cd6d021b0594..9bed635b527f 100644
--- a/prow/cluster/components/automated-approver_external-plugin.yaml
+++ b/prow/cluster/components/automated-approver_external-plugin.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: automated-approver
-        image: europe-docker.pkg.dev/kyma-project/prod/automated-approver:v20250320-5988cad1
+        image: europe-docker.pkg.dev/kyma-project/prod/automated-approver:v20250321-0d21ee73
         imagePullPolicy: Always
         args:
         - --dry-run=false
diff --git a/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml b/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml
index 9e74213feae1..53f413f8e5b2 100644
--- a/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml
+++ b/prow/cluster/resources/external-secrets/external_secrets_checker_prow.yaml
@@ -13,7 +13,7 @@ spec:
         spec:
           containers:
             - name: secret-checker-untrusted
-              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250320-5988cad1 #gitleaks:allow
+              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250321-935679ce #gitleaks:allow
               imagePullPolicy: IfNotPresent
               command:
                 - /externalsecretschecker
@@ -49,7 +49,7 @@ spec:
         spec:
           containers:
             - name: secret-checker-trusted
-              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250320-5988cad1 #gitleaks:allow
+              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250321-935679ce #gitleaks:allow
               imagePullPolicy: IfNotPresent
               command:
                 - /externalsecretschecker
@@ -85,7 +85,7 @@ spec:
         spec:
           containers:
             - name: secret-checker-prow
-              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250320-5988cad1 #gitleaks:allow
+              image: europe-docker.pkg.dev/kyma-project/prod/externalsecretschecker:v20250321-935679ce #gitleaks:allow
               imagePullPolicy: IfNotPresent
               command:
                 - /externalsecretschecker