diff --git a/bosh-cli-v2-cf-cli/Dockerfile b/bosh-cli-v2-cf-cli/Dockerfile
index 53717a5c..cbe4ec2e 100644
--- a/bosh-cli-v2-cf-cli/Dockerfile
+++ b/bosh-cli-v2-cf-cli/Dockerfile
@@ -5,7 +5,7 @@ ENV CF_PACKAGES "unzip curl openssl ca-certificates git libc6 bash jq gettext ma
 # dedicated packages required by osb-cmdb or kubectl/svcat tests
 ENV PAAS_TEMPLATES_PACKAGES "zip bind9-host openssh-client"
 # renovate: datasource=github-releases depName=cloudfoundry/cli
-ENV CF_CLI_VERSION "8.9.0"
+ENV CF_CLI_VERSION "8.16.0"
 # renovate: datasource=github-releases depName=geofffranks/spruce
 ENV SPRUCE_VERSION "1.31.1"
 
diff --git a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
index cee47b86..1a6d120f 100644
--- a/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
+++ b/bosh-cli-v2-cf-cli/bosh-cli-v2-cf-cli_spec.rb
@@ -3,7 +3,7 @@
 require 'serverspec'
 
 BOSH_CLI_VERSION="7.7.1" # renovate: datasource=github-releases depName=cloudfoundry/bosh-cli
-CF_CLI_VERSION="8.9.0" # renovate: datasource=github-releases depName=cloudfoundry/cli
+CF_CLI_VERSION="8.16.0" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
 SPRUCE_VERSION = "1.31.1" # renovate: datasource=github-releases depName=geofffranks/spruce
 BOSH_ENV_DEPS = "build-essential zlib1g-dev openssl libxslt1-dev libxml2-dev \
diff --git a/cf-cli/Dockerfile b/cf-cli/Dockerfile
index c03f7c0a..a9af9714 100644
--- a/cf-cli/Dockerfile
+++ b/cf-cli/Dockerfile
@@ -2,7 +2,7 @@ FROM ruby:3.4-alpine3.22
 
 ENV PACKAGES "unzip curl openssl ca-certificates git libc6-compat bash jq gettext make"
 # renovate: datasource=github-releases depName=cloudfoundry/cli
-ENV CF_CLI_VERSION "8.9.0"
+ENV CF_CLI_VERSION "8.16.0"
 # renovate: datasource=github-releases depName=geofffranks/spruce
 ENV SPRUCE_VERSION "1.31.1"
 
diff --git a/cf-cli/cf-cli_spec.rb b/cf-cli/cf-cli_spec.rb
index 75ae3a62..2e7c6f7b 100644
--- a/cf-cli/cf-cli_spec.rb
+++ b/cf-cli/cf-cli_spec.rb
@@ -2,7 +2,7 @@
 require 'docker'
 require 'serverspec'
 
-CF_CLI_VERSION="8.9.0" # renovate: datasource=github-releases depName=cloudfoundry/cli
+CF_CLI_VERSION="8.16.0" # renovate: datasource=github-releases depName=cloudfoundry/cli
 SPRUCE_BIN = "/usr/local/bin/spruce"
 SPRUCE_VERSION = "1.31.1" # renovate: datasource=github-releases depName=geofffranks/spruce
 RUBY_VERSION = "3.4"