diff --git a/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile b/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
index 8abab812..3f69568b 100644
--- a/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/ng-monitoring/centos7/Dockerfile
@@ -22,7 +22,6 @@ RUN yum update --nogpgcheck -y && \
     yum clean all
 
 # install golang toolchain
-# renovate: datasource=docker depName=golang
 ARG GOLANG_VERSION=1.21.13
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
diff --git a/dockerfiles/cd/builders/pd/centos7/Dockerfile b/dockerfiles/cd/builders/pd/centos7/Dockerfile
index 8706484e..cef0045a 100644
--- a/dockerfiles/cd/builders/pd/centos7/Dockerfile
+++ b/dockerfiles/cd/builders/pd/centos7/Dockerfile
@@ -21,8 +21,7 @@ RUN yum update --nogpgcheck -y && \
     yum clean all
 
 # install golang toolchain
-# renovate: datasource=docker depName=golang
-ARG GOLANG_VERSION=1.21.6
+ARG GOLANG_VERSION=1.21.13
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     curl -fsSL https://dl.google.com/go/go${GOLANG_VERSION}.linux-${ARCH}.tar.gz | tar -C /usr/local -xz
 ENV PATH /usr/local/go/bin/:$PATH
diff --git a/dockerfiles/cd/utils/release/Dockerfile b/dockerfiles/cd/utils/release/Dockerfile
index bb703b94..7ef3ca3e 100644
--- a/dockerfiles/cd/utils/release/Dockerfile
+++ b/dockerfiles/cd/utils/release/Dockerfile
@@ -29,7 +29,7 @@ RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
 
 # install tools: tiup
 # renovate: datasource=github-release depName=pingcap/tiup
-ARG TIUP_VER=1.15.2
+ARG TIUP_VER=1.16.1
 RUN OS=linux; ARCH=$([ "$(arch)" = "x86_64" ] && echo amd64 || echo arm64); \
     wget -q -O - https://tiup-mirrors.pingcap.com/tiup-v${TIUP_VER}-${OS}-${ARCH}.tar.gz | tar -zxvf - -C /usr/local/bin && \
     chmod 755 /usr/local/bin/tiup && \
diff --git a/dockerfiles/ci/release-build-base/Dockerfile b/dockerfiles/ci/release-build-base/Dockerfile
index e37e5fc6..94b50fb8 100644
--- a/dockerfiles/ci/release-build-base/Dockerfile
+++ b/dockerfiles/ci/release-build-base/Dockerfile
@@ -1,5 +1,4 @@
 # Base image
-# renovate: datasource=docker depName=centos
 FROM centos:7.9.2009
 # CentOS 7 has reached EOL
 RUN sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/*.repo \
diff --git a/packages/packages.yaml.tmpl b/packages/packages.yaml.tmpl
index 1f06b286..8c79b05e 100644
--- a/packages/packages.yaml.tmpl
+++ b/packages/packages.yaml.tmpl
@@ -204,7 +204,7 @@ components:
     # binary builder, also we need it when build for mac to get build tools versions and other informations.
     builders:
       - if: {{ semver.CheckConstraint ">= 8.4.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/ng-monitoring:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/ng-monitoring:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint ">= 7.4.0-0, < 8.4.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/ng-monitoring:v2024.10.8-12-gb9ffe36-centos7-go1.21
       - if: {{ semver.CheckConstraint ">= 7.0.0-0, < 7.4.0-0" .Release.version }}
@@ -350,7 +350,7 @@ components:
         - {{ .Release.version }}
     builders:
       - if: {{ semver.CheckConstraint ">= 8.4.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/ng-monitoring:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/ng-monitoring:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint ">= 7.4.0-0, < 8.4.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/ng-monitoring:v2024.10.8-12-gb9ffe36-centos7-go1.21
       - if: {{ semver.CheckConstraint ">= 7.0.0-0, < 7.4.0-0" .Release.version }}
@@ -473,7 +473,7 @@ components:
     # binary builder, also we need it when build for mac to get build tools versions and other informations.
     builders:
       - if: {{ semver.CheckConstraint ">= 8.4.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/pd:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/pd:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint ">= 7.4.0-0, < 8.4.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/pd:v2024.10.8-12-gb9ffe36-centos7-go1.21
       - if: {{ semver.CheckConstraint ">= 7.0.0-0, < 7.4.0-0" .Release.version }}
@@ -740,7 +740,7 @@ components:
     # binary builder, also we need it when build for mac to get build tools versions and other informations.
     builders:
       - if: {{ semver.CheckConstraint ">= 8.4.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint ">= 7.4.0-0, < 8.4.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-12-gb9ffe36-centos7-go1.21
       - if: {{ semver.CheckConstraint ">= 7.0.0-0, < 7.4.0-0" .Release.version }}
@@ -1210,7 +1210,7 @@ components:
     builders:
       # BUG: tidb-tools has not release branches and all tags taged on master branch.
       - if: {{ eq "experiment" .Release.profile }}
-        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ ne "experiment" .Release.profile }}
         image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-12-gb9ffe36-centos7-go1.21
     routers:
@@ -1257,7 +1257,7 @@ components:
     builders:
       # BUG: tidb-ctl has not release branches and all tags taged on master branch.
       - if: (eq "experiment" .Release.profile)
-        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-38-g7bd274e-go1.23
       - if: (ne "experiment" .Release.profile)
         image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-12-gb9ffe36-centos7-go1.21
     routers:
@@ -1383,7 +1383,7 @@ components:
         - {{ .Release.version }}
     builders:
       - if: {{ semver.CheckConstraint ">= 1.6.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/tidb-operator:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/tidb-operator:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint "< 1.6.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/tidb-operator:v2024.10.8-14-g52a7228-go1.21
     routers:
@@ -1499,7 +1499,7 @@ components:
         - {{ .Release.version }}
     builders:
       - if: {{ semver.CheckConstraint ">= 8.4.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/tidb-dashboard:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/tidb-dashboard:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint ">= 6.5.0-0, < 8.4.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/tidb-dashboard:v2024.10.8-12-gb9ffe36-centos7-go1.21
     routers:
@@ -1836,7 +1836,7 @@ components:
     # binary builder, also we need it when build for mac to get build tools versions and other informations.
     builders:
       - if: {{ semver.CheckConstraint ">= 8.4.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/tiflow:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/tiflow:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint ">= 7.4.0-0, < 8.4.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/tiflow:v2024.10.8-12-gb9ffe36-centos7-go1.21
       - if: {{ semver.CheckConstraint ">= 7.0.0-0, < 7.4.0-0" .Release.version }}
@@ -2347,7 +2347,7 @@ components:
     # binary builder, also we need it when build for mac to get build tools versions and other informations.
     builders:
       - if: {{ semver.CheckConstraint ">= 1.3.0-0" .Release.version }}
-        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-14-g52a7228-go1.23
+        image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-38-g7bd274e-go1.23
       - if: {{ semver.CheckConstraint ">= 0.1.2-0, < 1.3.0-0" .Release.version }}
         image: ghcr.io/pingcap-qe/cd/builders/tidb:v2024.10.8-12-gb9ffe36-centos7-go1.21
     routers: