diff --git a/docker/gerrit/base/Dockerfile b/docker/gerrit/base/Dockerfile
index 8f2ccba189..b4787794e3 100644
--- a/docker/gerrit/base/Dockerfile
+++ b/docker/gerrit/base/Dockerfile
@@ -13,7 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-# Mon Nov  1 20:18:08 UTC 2021 - trigger rebuild
+# Tue Nov 30 00:12:50 UTC 2021 - trigger rebuild
 
 FROM docker.io/opendevorg/python-builder:3.9-bullseye as builder
 
diff --git a/zuul.d/docker-images/gerrit.yaml b/zuul.d/docker-images/gerrit.yaml
index 86838fc979..7745323915 100644
--- a/zuul.d/docker-images/gerrit.yaml
+++ b/zuul.d/docker-images/gerrit.yaml
@@ -57,9 +57,9 @@
         override-checkout: stable-3.3
       # Plugins common to every build with branches or refs for every build
       - name: gerrit.googlesource.com/plugins/commit-message-length-validator
-        override-checkout: v3.3.7
+        override-checkout: v3.3.8
       - name: gerrit.googlesource.com/plugins/hooks
-        override-checkout: v3.3.7
+        override-checkout: v3.3.8
       - name: gerrit.googlesource.com/plugins/its-base
         # There is no 3.3 branch
         override-checkout: master
@@ -72,30 +72,30 @@
       - name: gerrit.googlesource.com/plugins/replication
         override-checkout: stable-3.3
       - name: gerrit.googlesource.com/plugins/reviewnotes
-        override-checkout: v3.3.7
+        override-checkout: v3.3.8
       # Plugins common to every build without branches or refs for every build
       - name: gerrit.googlesource.com/plugins/download-commands
-        override-checkout: v3.3.7
+        override-checkout: v3.3.8
       - name: gerrit.googlesource.com/plugins/singleusergroup
         override-checkout: stable-3.3
       # Plugins not common to every build
       - name: gerrit.googlesource.com/plugins/codemirror-editor
         override-checkout: stable-3.3
       - name: gerrit.googlesource.com/plugins/delete-project
-        override-checkout: v3.3.7
+        override-checkout: v3.3.8
       - name: gerrit.googlesource.com/plugins/gitiles
         override-checkout: stable-3.3
       - name: gerrit.googlesource.com/plugins/plugin-manager
-        override-checkout: v3.3.7
+        override-checkout: v3.3.8
       - name: gerrit.googlesource.com/plugins/webhooks
-        override-checkout: v3.3.7
+        override-checkout: stable-3.3
       - name: gerrit.googlesource.com/plugins/zuul-results-summary
         override-checkout: main
       # Non plugin submodules
       - name: gerrit.googlesource.com/jgit
         override-checkout: master
       - name: gerrit.googlesource.com/polymer-bridges
-        override-checkout: v3.3.7
+        override-checkout: v3.3.8
     vars: &gerrit_vars_3_3
       docker_images:
         - context: docker/gerrit/bazel
@@ -152,9 +152,9 @@
         override-checkout: stable-3.4
       # Plugins common to every build with branches or refs for every build
       - name: gerrit.googlesource.com/plugins/commit-message-length-validator
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
       - name: gerrit.googlesource.com/plugins/hooks
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
       - name: gerrit.googlesource.com/plugins/its-base
         # There is no 3.4 branch
         override-checkout: master
@@ -167,30 +167,30 @@
       - name: gerrit.googlesource.com/plugins/replication
         override-checkout: stable-3.4
       - name: gerrit.googlesource.com/plugins/reviewnotes
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
       # Plugins common to every build without branches or refs for every build
       - name: gerrit.googlesource.com/plugins/download-commands
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
       - name: gerrit.googlesource.com/plugins/singleusergroup
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
       # Plugins not common to every build
       - name: gerrit.googlesource.com/plugins/codemirror-editor
         override-checkout: stable-3.4
       - name: gerrit.googlesource.com/plugins/delete-project
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
       - name: gerrit.googlesource.com/plugins/gitiles
         override-checkout: stable-3.4
       - name: gerrit.googlesource.com/plugins/plugin-manager
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
       - name: gerrit.googlesource.com/plugins/webhooks
-        override-checkout: v3.4.1
+        override-checkout: stable-3.4
       - name: gerrit.googlesource.com/plugins/zuul-results-summary
         override-checkout: main
       # Non plugin submodules
       - name: gerrit.googlesource.com/jgit
         override-checkout: master
       - name: gerrit.googlesource.com/polymer-bridges
-        override-checkout: v3.4.1
+        override-checkout: v3.4.2
     vars: &gerrit_vars_3_4
       docker_images:
         - context: docker/gerrit/bazel