diff --git a/charts/chart_versions.yaml b/charts/chart_versions.yaml
index 2b1b97baaa..d5c5a2e383 100644
--- a/charts/chart_versions.yaml
+++ b/charts/chart_versions.yaml
@@ -2,7 +2,7 @@ charts:
   - version: 1.16.303
     filename: /charts/rke2-cilium.yaml
     bootstrap: true
-  - version: v3.28.2-build2024101601
+  - version: v3.29.0-build2024110400
     filename: /charts/rke2-canal.yaml
     bootstrap: true
   - version: v3.28.200
diff --git a/scripts/build-images b/scripts/build-images
index 6a687dd51e..513af14b20 100755
--- a/scripts/build-images
+++ b/scripts/build-images
@@ -34,8 +34,8 @@ xargs -n1 -t docker image pull --quiet << EOF > build/images-traefik.txt
 EOF
 
 xargs -n1 -t docker image pull --quiet << EOF > build/images-canal.txt
-    ${REGISTRY}/rancher/hardened-calico:v3.28.2-build20241016
-    ${REGISTRY}/rancher/hardened-flannel:v0.25.7-build20241008
+    ${REGISTRY}/rancher/hardened-calico:v3.29.0-build20241104
+    ${REGISTRY}/rancher/hardened-flannel:v0.26.0-build20241024
 EOF
 
 if [ "${GOARCH}" != "s390x" ]; then