diff --git a/go.mod b/go.mod
index 3d5bdacb4..e8c55b3bb 100644
--- a/go.mod
+++ b/go.mod
@@ -20,7 +20,7 @@ require (
 	github.com/gofrs/flock v0.12.1
 	github.com/google/cel-go v0.25.0
 	github.com/google/go-cmp v0.7.0
-	github.com/google/go-github/v71 v71.0.0
+	github.com/google/go-github/v72 v72.0.0
 	github.com/google/gofuzz v1.2.0
 	github.com/google/uuid v1.6.0
 	github.com/gorilla/securecookie v1.1.2
diff --git a/go.sum b/go.sum
index 70e951785..0794a6a50 100644
--- a/go.sum
+++ b/go.sum
@@ -245,8 +245,8 @@ github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/go-github/v71 v71.0.0 h1:Zi16OymGKZZMm8ZliffVVJ/Q9YZreDKONCr+WUd0Z30=
-github.com/google/go-github/v71 v71.0.0/go.mod h1:URZXObp2BLlMjwu0O8g4y6VBneUj2bCHgnI8FfgZ51M=
+github.com/google/go-github/v72 v72.0.0 h1:FcIO37BLoVPBO9igQQ6tStsv2asG4IPcYFi655PPvBM=
+github.com/google/go-github/v72 v72.0.0/go.mod h1:WWtw8GMRiL62mvIquf1kO3onRHeWWKmK01qdCY8c5fg=
 github.com/google/go-github/v73 v73.0.0 h1:aR+Utnh+Y4mMkS+2qLQwcQ/cF9mOTpdwnzlaw//rG24=
 github.com/google/go-github/v73 v73.0.0/go.mod h1:fa6w8+/V+edSU0muqdhCVY7Beh1M8F1IlQPZIANKIYw=
 github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
diff --git a/hack/lib/kube-versions.txt b/hack/lib/kube-versions.txt
index 43b06aaad..4c90de8a8 100644
--- a/hack/lib/kube-versions.txt
+++ b/hack/lib/kube-versions.txt
@@ -12,10 +12,10 @@
 # Whenever a new version is added to this file, or when a version number
 # is edited in this file, please run hack/update.sh.
 #
-1.33.0
-1.32.4
-1.31.8
-1.30.12
+1.33.2
+1.32.6
+1.31.10
+1.30.14
 1.29.14
 1.28.15
 1.27.16
diff --git a/hack/lib/lint-version.txt b/hack/lib/lint-version.txt
index 399088bf4..c043eea77 100644
--- a/hack/lib/lint-version.txt
+++ b/hack/lib/lint-version.txt
@@ -1 +1 @@
-2.1.6
+2.2.1
diff --git a/hack/update-go-mod/go.mod b/hack/update-go-mod/go.mod
index a3dfb8cee..2f80387e2 100644
--- a/hack/update-go-mod/go.mod
+++ b/hack/update-go-mod/go.mod
@@ -4,4 +4,4 @@ go 1.23.0
 
 toolchain go1.24.4
 
-require golang.org/x/mod v0.24.0
+require golang.org/x/mod v0.25.0
diff --git a/hack/update-go-mod/go.sum b/hack/update-go-mod/go.sum
index eb2dd0fc2..4a865ec50 100644
--- a/hack/update-go-mod/go.sum
+++ b/hack/update-go-mod/go.sum
@@ -1,2 +1,2 @@
-golang.org/x/mod v0.24.0 h1:ZfthKaKaT4NrhGVZHO1/WDTwGES4De8KtWO0SIbNJMU=
-golang.org/x/mod v0.24.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
+golang.org/x/mod v0.25.0 h1:n7a+ZbQKQA/Ysbyb0/6IbB1H/X41mKgbhfv7AfG/44w=
+golang.org/x/mod v0.25.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
diff --git a/internal/githubclient/githubclient.go b/internal/githubclient/githubclient.go
index 1484d5161..34bad2aeb 100644
--- a/internal/githubclient/githubclient.go
+++ b/internal/githubclient/githubclient.go
@@ -12,7 +12,7 @@ import (
 	"slices"
 	"strings"
 
-	"github.com/google/go-github/v71/github"
+	"github.com/google/go-github/v72/github"
 	"k8s.io/apimachinery/pkg/util/sets"
 
 	"go.pinniped.dev/internal/plog"
diff --git a/internal/githubclient/githubclient_test.go b/internal/githubclient/githubclient_test.go
index 2f4afa7d7..e18ab83cd 100644
--- a/internal/githubclient/githubclient_test.go
+++ b/internal/githubclient/githubclient_test.go
@@ -9,7 +9,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/google/go-github/v71/github"
+	"github.com/google/go-github/v72/github"
 	"github.com/migueleliasweb/go-github-mock/src/mock"
 	"github.com/stretchr/testify/require"
 	"k8s.io/client-go/util/cert"
diff --git a/internal/kubeclient/roundtrip.go b/internal/kubeclient/roundtrip.go
index cbfd6babe..bc4a5bd0d 100644
--- a/internal/kubeclient/roundtrip.go
+++ b/internal/kubeclient/roundtrip.go
@@ -1,4 +1,4 @@
-// Copyright 2021-2024 the Pinniped contributors. All Rights Reserved.
+// Copyright 2021-2025 the Pinniped contributors. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
 
 package kubeclient
@@ -250,7 +250,7 @@ func handleCreateOrUpdate(
 	}
 
 	// simplest way to reuse the body creation logic
-	newReqForBody, err := http.NewRequest(req.Method, reqURL.String(), bytes.NewReader(newData))
+	newReqForBody, err := http.NewRequestWithContext(req.Context(), req.Method, reqURL.String(), bytes.NewReader(newData))
 	if err != nil {
 		return true, nil, fmt.Errorf("failed to create new req for body: %w", err) // this should never happen
 	}