diff --git a/apps/prow/cluster/crier_deployment.yaml b/apps/prow/cluster/crier_deployment.yaml
index 0338bb31876..b582ace327c 100644
--- a/apps/prow/cluster/crier_deployment.yaml
+++ b/apps/prow/cluster/crier_deployment.yaml
@@ -33,7 +33,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: crier
-        image: gcr.io/k8s-prow/crier:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/crier:v20230412-a86d65c3c2
         args:
         - --blob-storage-workers=1
         - --config-path=/etc/config/config.yaml
diff --git a/apps/prow/cluster/deck_deployment.yaml b/apps/prow/cluster/deck_deployment.yaml
index 391af7bd106..baeac8e1881 100644
--- a/apps/prow/cluster/deck_deployment.yaml
+++ b/apps/prow/cluster/deck_deployment.yaml
@@ -38,7 +38,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: deck
-        image: gcr.io/k8s-prow/deck:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/deck:v20230412-a86d65c3c2
         imagePullPolicy: Always
         ports:
         - name: http
diff --git a/apps/prow/cluster/ghproxy_deployment.yaml b/apps/prow/cluster/ghproxy_deployment.yaml
index 01b5b9e45bb..91b9090f3b2 100644
--- a/apps/prow/cluster/ghproxy_deployment.yaml
+++ b/apps/prow/cluster/ghproxy_deployment.yaml
@@ -51,7 +51,7 @@ spec:
     spec:
       containers:
         - name: ghproxy
-          image: gcr.io/k8s-prow/ghproxy:v20230411-7b4f9b177a
+          image: gcr.io/k8s-prow/ghproxy:v20230412-a86d65c3c2
           args:
             - --cache-dir=/cache
             - --cache-sizeGB=99
diff --git a/apps/prow/cluster/hook_deployment.yaml b/apps/prow/cluster/hook_deployment.yaml
index 97293fe5299..516637d1567 100644
--- a/apps/prow/cluster/hook_deployment.yaml
+++ b/apps/prow/cluster/hook_deployment.yaml
@@ -24,7 +24,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: hook
-        image: gcr.io/k8s-prow/hook:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/hook:v20230412-a86d65c3c2
         imagePullPolicy: Always
         args:
         - --config-path=/etc/config/config.yaml
diff --git a/apps/prow/cluster/horologium_deployment.yaml b/apps/prow/cluster/horologium_deployment.yaml
index d5eb431ee08..cd737d73f07 100644
--- a/apps/prow/cluster/horologium_deployment.yaml
+++ b/apps/prow/cluster/horologium_deployment.yaml
@@ -35,7 +35,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
       - name: horologium
-        image: gcr.io/k8s-prow/horologium:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/horologium:v20230412-a86d65c3c2
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/apps/prow/cluster/prow_controller_manager_deployment.yaml b/apps/prow/cluster/prow_controller_manager_deployment.yaml
index ef64eda0ced..b0ad3d98f22 100644
--- a/apps/prow/cluster/prow_controller_manager_deployment.yaml
+++ b/apps/prow/cluster/prow_controller_manager_deployment.yaml
@@ -34,7 +34,7 @@ spec:
       serviceAccountName: prow-controller-manager
       containers:
       - name: prow-controller-manager
-        image: gcr.io/k8s-prow/prow-controller-manager:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/prow-controller-manager:v20230412-a86d65c3c2
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/apps/prow/cluster/sinker_deployment.yaml b/apps/prow/cluster/sinker_deployment.yaml
index 058c9f3cc18..92f5b2eaf06 100644
--- a/apps/prow/cluster/sinker_deployment.yaml
+++ b/apps/prow/cluster/sinker_deployment.yaml
@@ -23,7 +23,7 @@ spec:
         - --dry-run=false
         - --job-config-path=/etc/job-config
         - --kubeconfig=/etc/kubeconfig/kubeconfig
-        image: gcr.io/k8s-prow/sinker:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/sinker:v20230412-a86d65c3c2
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
diff --git a/apps/prow/cluster/statusreconciler_deployment.yaml b/apps/prow/cluster/statusreconciler_deployment.yaml
index 4de6b404bb7..5e7b692c5a2 100644
--- a/apps/prow/cluster/statusreconciler_deployment.yaml
+++ b/apps/prow/cluster/statusreconciler_deployment.yaml
@@ -33,7 +33,7 @@ spec:
       terminationGracePeriodSeconds: 180
       containers:
       - name: statusreconciler
-        image: gcr.io/k8s-prow/status-reconciler:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/status-reconciler:v20230412-a86d65c3c2
         imagePullPolicy: Always
         args:
         - --config-path=/etc/config/config.yaml
diff --git a/apps/prow/cluster/tide_deployment.yaml b/apps/prow/cluster/tide_deployment.yaml
index d0e42b46eae..80ab0a3d808 100644
--- a/apps/prow/cluster/tide_deployment.yaml
+++ b/apps/prow/cluster/tide_deployment.yaml
@@ -34,7 +34,7 @@ spec:
       serviceAccountName: tide
       containers:
       - name: tide
-        image: gcr.io/k8s-prow/tide:v20230411-7b4f9b177a
+        image: gcr.io/k8s-prow/tide:v20230412-a86d65c3c2
         args:
         - --config-path=/etc/config/config.yaml
         - --dry-run=false
diff --git a/apps/prow/config.yaml b/apps/prow/config.yaml
index 5d5608c218a..494ca17c2bb 100644
--- a/apps/prow/config.yaml
+++ b/apps/prow/config.yaml
@@ -16,10 +16,10 @@ plank:
       timeout: 2h
       grace_period: 15s
       utility_images:
-        clonerefs: "gcr.io/k8s-prow/clonerefs:v20230411-7b4f9b177a"
-        initupload: "gcr.io/k8s-prow/initupload:v20230411-7b4f9b177a"
-        entrypoint: "gcr.io/k8s-prow/entrypoint:v20230411-7b4f9b177a"
-        sidecar: "gcr.io/k8s-prow/sidecar:v20230411-7b4f9b177a"
+        clonerefs: "gcr.io/k8s-prow/clonerefs:v20230412-a86d65c3c2"
+        initupload: "gcr.io/k8s-prow/initupload:v20230412-a86d65c3c2"
+        entrypoint: "gcr.io/k8s-prow/entrypoint:v20230412-a86d65c3c2"
+        sidecar: "gcr.io/k8s-prow/sidecar:v20230412-a86d65c3c2"
       default_service_account_name: "prowjob-default-sa"
       gcs_configuration:
         bucket: k8s-infra-prow-results
diff --git a/infra/gcp/terraform/k8s-infra-prow-build-trusted/prow-build-trusted/resources/default/ghproxy-deployment.yaml b/infra/gcp/terraform/k8s-infra-prow-build-trusted/prow-build-trusted/resources/default/ghproxy-deployment.yaml
index c6fa1d0a3d3..f350eb7e27d 100644
--- a/infra/gcp/terraform/k8s-infra-prow-build-trusted/prow-build-trusted/resources/default/ghproxy-deployment.yaml
+++ b/infra/gcp/terraform/k8s-infra-prow-build-trusted/prow-build-trusted/resources/default/ghproxy-deployment.yaml
@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: ghproxy
-          image: gcr.io/k8s-prow/ghproxy:v20230411-7b4f9b177a
+          image: gcr.io/k8s-prow/ghproxy:v20230412-a86d65c3c2
           args:
             - --cache-dir=/cache
             - --cache-sizeGB=99