diff --git a/test/Dockerfile.distro b/test/Dockerfile.distro
index 2d9152c4fc..39f7948bd6 100644
--- a/test/Dockerfile.distro
+++ b/test/Dockerfile.distro
@@ -126,7 +126,7 @@ RUN install-tool vendir v0.44.0
 RUN install-tool wally 0.3.2
 
 # renovate: datasource=github-releases packageName=protocolbuffers/protobuf versioning=docker
-RUN install-tool protoc 29.2
+RUN install-tool protoc 32.1
 
 #--------------------------------------
 # Image: test-erlang
diff --git a/test/latest/Dockerfile b/test/latest/Dockerfile
index e7c400603e..262a4208da 100644
--- a/test/latest/Dockerfile
+++ b/test/latest/Dockerfile
@@ -241,7 +241,7 @@ RUN install-tool skopeo 1.20.0
 RUN install-tool sops v3.10.2
 
 # renovate: datasource=github-releases packageName=protocolbuffers/protobuf versioning=docker
-RUN install-tool protoc 29.2
+RUN install-tool protoc 32.1
 
 # renovate: datasource=github-releases depName=vendir packageName=vmware-tanzu/carvel-vendir
 ARG VENDIR_VERSION=v0.44.0
@@ -289,7 +289,7 @@ RUN kustomize version | grep "${KUSTOMIZE_VERSION}"
 FROM base AS testf
 
 # renovate: datasource=github-releases depName=protoc packageName=protocolbuffers/protobuf versioning=docker
-ARG PROTOC_VERSION=29.2
+ARG PROTOC_VERSION=32.1
 
 RUN set -ex; \
   ls -lah /opt/containerbase/; \
diff --git a/test/latest/Dockerfile.arm64 b/test/latest/Dockerfile.arm64
index 21cf61757c..d5a8265dc5 100644
--- a/test/latest/Dockerfile.arm64
+++ b/test/latest/Dockerfile.arm64
@@ -146,7 +146,7 @@ RUN install-tool sops v3.10.2
 RUN install-tool wally 0.3.2
 
 # renovate: datasource=github-releases packageName=protocolbuffers/protobuf versioning=docker
-RUN install-tool protoc 29.2
+RUN install-tool protoc 32.1
 
 # renovate: datasource=github-releases packageName=prefix-dev/pixi
 RUN install-tool pixi v0.54.2