diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 7aa08a043b..d77125e690 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -65,6 +65,17 @@ updates:
       - dependency-name: "axllent/mailpit"
       - dependency-name: "darthsim/imgproxy"
       - dependency-name: "timberio/vector"
+      # Held back: v2.109.0+ adds a setup_supabase_realtime_admin migration
+      # that fails against the CLI's local Postgres and breaks `supabase start`.
+      # Remove once the CLI's local stack is compatible with the new migration.
+      - dependency-name: "supabase/realtime"
+        versions:
+          - ">= 2.109.0"
+      # Held back: 1.45.0 is not mirrored to the ghcr registry CI pulls from
+      # ("manifest unknown"). Remove once a mirrored tag is available.
+      - dependency-name: "supabase/logflare"
+        versions:
+          - ">= 1.45.0"
     cooldown:
       default-days: 7
       exclude:
diff --git a/apps/cli-go/pkg/config/templates/Dockerfile b/apps/cli-go/pkg/config/templates/Dockerfile
index 9738c7abf3..c808592a61 100644
--- a/apps/cli-go/pkg/config/templates/Dockerfile
+++ b/apps/cli-go/pkg/config/templates/Dockerfile
@@ -11,9 +11,9 @@ FROM supabase/edge-runtime:v1.74.1 AS edgeruntime
 FROM timberio/vector:0.53.0-alpine AS vector
 FROM supabase/supavisor:2.9.7 AS supavisor
 FROM supabase/gotrue:v2.190.0 AS gotrue
-FROM supabase/realtime:v2.109.1 AS realtime
+FROM supabase/realtime:v2.108.0 AS realtime
 FROM supabase/storage-api:v1.60.21 AS storage
-FROM supabase/logflare:1.45.0 AS logflare
+FROM supabase/logflare:1.44.3 AS logflare
 # Append to JobImages when adding new dependencies below
 FROM supabase/pgadmin-schema-diff:cli-0.0.5 AS differ
 FROM supabase/migra:3.0.1663481299 AS migra