diff --git a/glab/Containerfile b/glab/Containerfile
index 2df1a44..6719431 100644
--- a/glab/Containerfile
+++ b/glab/Containerfile
@@ -1,6 +1,7 @@
 # syntax=docker/dockerfile:1
 # Currently there are only amd64 packages, so we install via python for now
 ARG BASE_IMAGE=docker.io/ubuntu:jammy-20240911.1
+# hadolint ignore=DL3006
 FROM $BASE_IMAGE AS base
 
 ARG GLAB_URL_AMD64
@@ -32,7 +33,7 @@ RUN <<EOF
       ;; \
     *) echo "unsupported architecture"; exit 1 ;; \
   esac 
-  curl -fsSL -o glab.deb ${GLAB_URL}
+  curl -fsSL -o glab.deb "${GLAB_URL}"
   echo "${GLAB_SHA256} glab.deb" | sha256sum -c -
 EOF
 
@@ -47,7 +48,7 @@ RUN <<EOF
       ;;
     *) echo "unsupported architecture"; exit 1 ;; \
   esac
-  curl -fsSL -o docker.tgz  ${DOCKER_URL}
+  curl -fsSL -o docker.tgz "${DOCKER_URL}"
   tar --extract \
 		--file docker.tgz \
 		--strip-components 1 \
diff --git a/glab/docker-bake.hcl b/glab/docker-bake.hcl
index dae9053..f7ce643 100644
--- a/glab/docker-bake.hcl
+++ b/glab/docker-bake.hcl
@@ -3,7 +3,7 @@ variable "TAG_PREFIX" {
 }
 
 variable "VERSION" {
-  default = "1.47.0"
+  default = "1.49.0"
 }
 
 # There's no darwin-based Docker, so if we're running on macOS, change the platform to linux
@@ -14,10 +14,10 @@ variable "LOCAL_PLATFORM" {
 target "_common" {
   args = {
     GLAB_VERSION = "${VERSION}"
-    GLAB_URL_AMD64 = "https://gitlab.com/gitlab-org/cli/-/releases/v1.48.0/downloads/glab_1.48.0_linux_amd64.deb"
-    GLAB_SHA256_AMD64 = "ddc82c30aec8620f762f705d37d217cc9283c14eb8f93d6e80f2f24126b4a2ab"
-    GLAB_URL_ARM64 = "https://gitlab.com/gitlab-org/cli/-/releases/v1.48.0/downloads/glab_1.48.0_linux_arm64.deb"
-    GLAB_SHA256_ARM64 = "b1293cd1cef8ca13b4a28c86dcf750cbc362b5fdfaf453c7a1e7273d2707f20b"
+    GLAB_URL_AMD64 = "https://gitlab.com/gitlab-org/cli/-/releases/v1.49.0/downloads/glab_1.49.0_linux_amd64.deb"
+    GLAB_SHA256_AMD64 = "f42cc13a1ba6913bde8acd6b03bcd9a081199d9cbfff5fe152147e92ef433c6b"
+    GLAB_URL_ARM64 = "https://gitlab.com/gitlab-org/cli/-/releases/v1.49.0/downloads/glab_1.49.0_linux_arm64.deb"
+    GLAB_SHA256_ARM64 = "136d7f0d65e402247f0f1aca420e60497fcd020c80f7e475235bf95ff3b467a0"
     DOCKER_URL_AMD64 = "https://download.docker.com/linux/static/stable/x86_64/docker-27.3.1.tgz"
     DOCKER_URL_ARM64 = "https://download.docker.com/linux/static/stable/aarch64/docker-27.3.1.tgz"
   }