diff --git a/MODULE.bazel b/MODULE.bazel
index 32f4a4d..2a166c1 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -17,7 +17,7 @@ bazel_dep(name = "buildifier_prebuilt", version = "8.5.1.2", dev_dependency = Tr
 bazel_dep(name = "stardoc", version = "0.8.1", dev_dependency = True, repo_name = "io_bazel_stardoc")
 
 toolchain = use_extension("//apko:extensions.bzl", "apko")
-toolchain.toolchain(apko_version = "v1.2.11")
+toolchain.toolchain(apko_version = "v1.2.13")
 use_repo(toolchain, "apko_toolchains")
 
 register_toolchains("@apko_toolchains//:all")
diff --git a/apko/private/versions.bzl b/apko/private/versions.bzl
index 10b6a17..6e2e8fd 100644
--- a/apko/private/versions.bzl
+++ b/apko/private/versions.bzl
@@ -3,11 +3,11 @@
 # Add new versions by running
 # ./scripts/mirror_apko.sh
 APKO_VERSIONS = {
-    "v1.2.11": {
-        "darwin_amd64": "sha256-dVq/EOOgQFETJgIlzXWt5ImoiMcAgirWsJRJFmXunB0=",
-        "darwin_arm64": "sha256-dd+H9BWnkiHEy3Q7WpJ6wCBwr4pXFYwAFVqHN+SuYtE=",
-        "linux_386": "sha256-1PUmqy+zd1G6DOYFbE/J3mABUwbAo6aO41JKBJWTpkE=",
-        "linux_amd64": "sha256-W2WEuGD8GbDprzEOI4BWx3S5j3Qvk5b62X6Sv2DsIwc=",
-        "linux_arm64": "sha256-TqdiuBvYLXcj/tWWvyNQm3tXAVBju1OLgcLNCG2imHk=",
+    "v1.2.13": {
+        "darwin_amd64": "sha256-Xb4Yfh4NcEstmtaRUL7GtZ5XXX1YLE+WXFJLsyY9ee8=",
+        "darwin_arm64": "sha256-X2Qov4zJEpyfq8dAs++YTc4GLF95o+UviNsbOVF10xs=",
+        "linux_386": "sha256-rVTMOevqSu7FulZIb3Zo/ak1gyLebYRaFbxkauD2oEE=",
+        "linux_amd64": "sha256-ebJfjTEDCKepaWeAoc8OPpocqJr7mBGBolLVsROjJFQ=",
+        "linux_arm64": "sha256-BPeXj5sK2rHRWHxVpOR/VH+Ue4vde8aed2EtmNYHTxk=",
     },
 }
diff --git a/apko/tests/versions_test.bzl b/apko/tests/versions_test.bzl
index c04e4be..557b8cc 100644
--- a/apko/tests/versions_test.bzl
+++ b/apko/tests/versions_test.bzl
@@ -7,7 +7,7 @@ load("//apko/private:versions.bzl", "APKO_VERSIONS")
 
 def _smoke_test_impl(ctx):
     env = unittest.begin(ctx)
-    asserts.equals(env, "v1.2.11", APKO_VERSIONS.keys()[0])
+    asserts.equals(env, "v1.2.13", APKO_VERSIONS.keys()[0])
     return unittest.end(env)
 
 # The unittest library requires that we export the test cases as named test rules,