diff --git a/.ko.yaml b/.ko.yaml
index d7787f42b..1df8c970d 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1,7 +1,7 @@
 ---
 defaultBaseImage: gcr.io/distroless/static-debian12:nonroot
 baseImageOverrides:
-  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.8.2-alpine
+  github.com/sigstore/scaffolding/cmd/cloudsqlproxy: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.9.0-alpine
 
 builds:
   - id: ctlog-createctconfig
diff --git a/Dockerfile.deps b/Dockerfile.deps
index c1e612aac..7bc46d359 100644
--- a/Dockerfile.deps
+++ b/Dockerfile.deps
@@ -1,4 +1,9 @@
 # This Dockerfile simply serves as a trigger for dependabot to notify when a new upstream release of a component is available
+#
+# !!!!!!!!!!!!!!
+# ! READ BELOW !
+# !!!!!!!!!!!!!!
+#
 # If dependabot proposes an update to the container listed below, you should also update the value listed in '.ko.yaml' and cut a new release of scaffolding
 FROM gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.9.0-alpine as cloud-sql-proxy
 ENV FOO=BAR