diff --git a/bosh-cli-v2-cf-cli/Dockerfile b/bosh-cli-v2-cf-cli/Dockerfile
index d13dea0e..40349c47 100644
--- a/bosh-cli-v2-cf-cli/Dockerfile
+++ b/bosh-cli-v2-cf-cli/Dockerfile
@@ -7,7 +7,7 @@ ENV PAAS_TEMPLATES_PACKAGES="zip bind9-host openssh-client"
 # renovate: datasource=github-releases depName=cloudfoundry/cli
 ENV CF_CLI_VERSION="8.18.3"
 # renovate: datasource=github-releases depName=geofffranks/spruce
-ENV SPRUCE_VERSION="1.35.7"
+ENV SPRUCE_VERSION="1.35.17"
 
 # we also use apt-get as we use an Ubuntu image, not an Alpine
 RUN apt-get update \
diff --git a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
index 0e1e769b..b32251e6 100644
--- a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
+++ b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
@@ -5,7 +5,7 @@
 BOSH_CLI_VERSION="7.10.5" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
 CF_CLI_VERSION="8.18.3" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
-SPRUCE_VERSION = "1.35.7" # renovate: datasource=github-releases depName=geofffranks/spruce
+SPRUCE_VERSION = "1.35.17" # renovate: datasource=github-releases depName=geofffranks/spruce
 BOSH_ENV_DEPS = "build-essential zlib1g-dev openssl libxslt1-dev libxml2-dev \
     libssl-dev libreadline8 libreadline-dev libyaml-dev libsqlite3-dev sqlite3"
 CF_ENV_DEPS = "unzip curl openssl ca-certificates git libc6 bash jq gettext make"
diff --git a/cf-cli/Dockerfile b/cf-cli/Dockerfile
index a01a8cde..858df504 100644
--- a/cf-cli/Dockerfile
+++ b/cf-cli/Dockerfile
@@ -4,7 +4,7 @@ ENV PACKAGES="unzip curl openssl ca-certificates git libc6-compat bash jq gettex
 # renovate: datasource=github-releases depName=cloudfoundry/cli
 ENV CF_CLI_VERSION="8.18.3"
 # renovate: datasource=github-releases depName=geofffranks/spruce
-ENV SPRUCE_VERSION="1.35.7"
+ENV SPRUCE_VERSION="1.35.17"
 
 RUN apk add --no-cache $PACKAGES
 
diff --git a/cf-cli/cf-cli_spec.rb b/cf-cli/cf-cli_spec.rb
index cd6db114..9f8ceb6d 100644
--- a/cf-cli/cf-cli_spec.rb
+++ b/cf-cli/cf-cli_spec.rb
@@ -4,7 +4,7 @@
 
 CF_CLI_VERSION="8.18.3" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
-SPRUCE_VERSION = "1.35.7" # renovate: datasource=github-releases depName=geofffranks/spruce
+SPRUCE_VERSION = "1.35.17" # renovate: datasource=github-releases depName=geofffranks/spruce
 RUBY_VERSION = "3.4"
 
 describe "cf-cli image" do