diff --git a/images/base-monitoring/melange-cortex.yaml b/images/base-monitoring/melange-cortex.yaml
index 8b13cb1..29db12b 100644
--- a/images/base-monitoring/melange-cortex.yaml
+++ b/images/base-monitoring/melange-cortex.yaml
@@ -46,8 +46,8 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/conduktor/cortex
-      tag: cdk-cortex-1.21-prom-3.8-2026.08.10-8e5fc5644e
-      expected-commit: 8e5fc5644e83c6874b0e5bc142c8c2ee89f660be
+      tag: cdk-cortex-1.21-prom-3.8-2026.08.17-507fbb05d2
+      expected-commit: 507fbb05d2fdf2a5233559e8a5171a253961e14b
 
   # Stale-proto guardrail: our melange env deliberately omits protoc +
   # protoc-gen-gogoslick (Cortex's build-image ships them, but the
diff --git a/images/base-monitoring/melange-prometheus.yaml b/images/base-monitoring/melange-prometheus.yaml
index ebcfc52..c5d389b 100644
--- a/images/base-monitoring/melange-prometheus.yaml
+++ b/images/base-monitoring/melange-prometheus.yaml
@@ -48,8 +48,8 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/conduktor/prometheus
-      tag: cdk-3.8-2026.08.10-3a8bfc3237
-      expected-commit: 3a8bfc323793778eed59b6476834c4b6b4e52ea1
+      tag: cdk-3.8-2026.08.17-2d30a70171
+      expected-commit: 2d30a70171a6a87e977b09c68be822585a9fc8a0
 
   - name: Build tarball
     runs: |