diff --git a/bin/ci-builder b/bin/ci-builder
index e2aa654ee5ab1..75410e60d0792 100755
--- a/bin/ci-builder
+++ b/bin/ci-builder
@@ -103,7 +103,7 @@ fi
 # *inside* this image. See materialize.git.expand_globs in the Python code for
 # details on this computation.
 files=$(cat \
-        <(git diff --name-only -z 4b825dc642cb6eb9a060e54bf8d69288fbee4904 ci/builder .bazelversion) \
+        <(git diff --name-only -z 4b825dc642cb6eb9a060e54bf8d69288fbee4904 ci/builder .bazelversion WORKSPACE) \
         <(git ls-files --others --exclude-standard -z ci/builder) \
     | LC_ALL=C sort -z \
     | xargs -0 "$shasum")
diff --git a/ci/builder/Dockerfile b/ci/builder/Dockerfile
index 9f7123c2018ce..9d172eba6b0fa 100644
--- a/ci/builder/Dockerfile
+++ b/ci/builder/Dockerfile
@@ -203,10 +203,10 @@ RUN mkdir rust \
     && cargo install --root /usr/local --version ="0.9.28" --locked cargo-hakari \
     && cargo install --root /usr/local --version "=0.9.72" --locked cargo-nextest \
     && cargo install --root /usr/local --version "=0.6.11" --locked cargo-llvm-cov \
-    && cargo install --root /usr/local --version "=0.1.50" --features=vendored-openssl cargo-udeps \
-    && cargo install --root /usr/local --version "=0.2.15" --no-default-features --features=s3,openssl/vendored sccache \
-    && cargo install --root /usr/local --version "=0.3.6" cargo-binutils \
-    && cargo install --root /usr/local --version "=0.13.0" wasm-pack
+    && cargo install --root /usr/local --version "=0.1.50" --locked --features=vendored-openssl cargo-udeps \
+    && cargo install --root /usr/local --version "=0.2.15" --locked --no-default-features --features=s3,openssl/vendored sccache \
+    && cargo install --root /usr/local --version "=0.3.6" --locked cargo-binutils \
+    && cargo install --root /usr/local --version "=0.13.0" --locked wasm-pack
 
 # Link the system lld into the cross-compiling sysroot.
 
diff --git a/ci/builder/requirements.txt b/ci/builder/requirements.txt
index 3b409f05a70b8..748e62e7b199e 100644
--- a/ci/builder/requirements.txt
+++ b/ci/builder/requirements.txt
@@ -71,5 +71,5 @@ fastavro==1.9.4
 websocket-client==1.8.0
 pyarrow-stubs==17.12
 pyarrow==18.0.0
-minio==7.2.10
+minio==7.2.12
 zstandard==0.23.0