diff --git a/.github/workflows/ci-master-pr.yml b/.github/workflows/ci-master-pr.yml
index b9c8205..5192be2 100644
--- a/.github/workflows/ci-master-pr.yml
+++ b/.github/workflows/ci-master-pr.yml
@@ -754,10 +754,10 @@ jobs:
         rm -rf /tmp/.buildx-cache
         mv /tmp/.buildx-cache-new /tmp/.buildx-cache
 
-  build-v1-25-11-alpine-3-15:
+  build-v1-25-13-alpine-3-15:
     runs-on: ubuntu-latest
     env:
-      VARIANT: v1.25.11-alpine-3.15
+      VARIANT: v1.25.13-alpine-3.15
     steps:
     - name: Checkout
       uses: actions/checkout@v3
@@ -829,7 +829,7 @@ jobs:
       if: github.event_name == 'pull_request'
       uses: docker/build-push-action@v3
       with:
-        context: variants/v1.25.11-alpine-3.15
+        context: variants/v1.25.13-alpine-3.15
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
         push: false
         tags: |
@@ -843,7 +843,7 @@ jobs:
       if: github.ref == 'refs/heads/master'
       uses: docker/build-push-action@v3
       with:
-        context: variants/v1.25.11-alpine-3.15
+        context: variants/v1.25.13-alpine-3.15
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
         push: true
         tags: |
@@ -856,7 +856,7 @@ jobs:
       if: startsWith(github.ref, 'refs/tags/')
       uses: docker/build-push-action@v3
       with:
-        context: variants/v1.25.11-alpine-3.15
+        context: variants/v1.25.13-alpine-3.15
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
         push: true
         tags: |
@@ -874,10 +874,10 @@ jobs:
         rm -rf /tmp/.buildx-cache
         mv /tmp/.buildx-cache-new /tmp/.buildx-cache
 
-  build-v1-25-11-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15:
+  build-v1-25-13-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15:
     runs-on: ubuntu-latest
     env:
-      VARIANT: v1.25.11-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
+      VARIANT: v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
     steps:
     - name: Checkout
       uses: actions/checkout@v3
@@ -949,7 +949,7 @@ jobs:
       if: github.event_name == 'pull_request'
       uses: docker/build-push-action@v3
       with:
-        context: variants/v1.25.11-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
+        context: variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
         push: false
         tags: |
@@ -963,7 +963,7 @@ jobs:
       if: github.ref == 'refs/heads/master'
       uses: docker/build-push-action@v3
       with:
-        context: variants/v1.25.11-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
+        context: variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
         push: true
         tags: |
@@ -976,7 +976,7 @@ jobs:
       if: startsWith(github.ref, 'refs/tags/')
       uses: docker/build-push-action@v3
       with:
-        context: variants/v1.25.11-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
+        context: variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15
         platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/s390x
         push: true
         tags: |
@@ -3642,8 +3642,8 @@ jobs:
       - build-v1-27-5-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-26-8-alpine-3-15
       - build-v1-26-8-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
-      - build-v1-25-11-alpine-3-15
-      - build-v1-25-11-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
+      - build-v1-25-13-alpine-3-15
+      - build-v1-25-13-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-24-15-alpine-3-15
       - build-v1-24-15-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-23-17-alpine-3-15
@@ -3685,8 +3685,8 @@ jobs:
       - build-v1-27-5-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-26-8-alpine-3-15
       - build-v1-26-8-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
-      - build-v1-25-11-alpine-3-15
-      - build-v1-25-11-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
+      - build-v1-25-13-alpine-3-15
+      - build-v1-25-13-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-24-15-alpine-3-15
       - build-v1-24-15-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-23-17-alpine-3-15
@@ -3730,8 +3730,8 @@ jobs:
       - build-v1-27-5-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-26-8-alpine-3-15
       - build-v1-26-8-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
-      - build-v1-25-11-alpine-3-15
-      - build-v1-25-11-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
+      - build-v1-25-13-alpine-3-15
+      - build-v1-25-13-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-24-15-alpine-3-15
       - build-v1-24-15-envsubst-git-jq-kustomize-sops-ssh-alpine-3-15
       - build-v1-23-17-alpine-3-15
diff --git a/README.md b/README.md
index 824228f..755e462 100644
--- a/README.md
+++ b/README.md
@@ -16,8 +16,8 @@ Dockerized `kubectl` with useful tools.
 | `:v1.27.5-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15` | [View](variants/v1.27.5-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15) |
 | `:v1.26.8-alpine-3.15` | [View](variants/v1.26.8-alpine-3.15) |
 | `:v1.26.8-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15` | [View](variants/v1.26.8-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15) |
-| `:v1.25.11-alpine-3.15` | [View](variants/v1.25.11-alpine-3.15) |
-| `:v1.25.11-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15` | [View](variants/v1.25.11-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15) |
+| `:v1.25.13-alpine-3.15` | [View](variants/v1.25.13-alpine-3.15) |
+| `:v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15` | [View](variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15) |
 | `:v1.24.15-alpine-3.15` | [View](variants/v1.24.15-alpine-3.15) |
 | `:v1.24.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15` | [View](variants/v1.24.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15) |
 | `:v1.23.17-alpine-3.15` | [View](variants/v1.23.17-alpine-3.15) |
diff --git a/generate/definitions/versions.json b/generate/definitions/versions.json
index a43adf1..be0467a 100644
--- a/generate/definitions/versions.json
+++ b/generate/definitions/versions.json
@@ -2,7 +2,7 @@
   "1.28.1",
   "1.27.5",
   "1.26.8",
-  "1.25.11",
+  "1.25.13",
   "1.24.15",
   "1.23.17",
   "1.22.17",
diff --git a/variants/v1.25.13-alpine-3.15/Dockerfile b/variants/v1.25.13-alpine-3.15/Dockerfile
new file mode 100644
index 0000000..f1f861d
--- /dev/null
+++ b/variants/v1.25.13-alpine-3.15/Dockerfile
@@ -0,0 +1,19 @@
+FROM alpine:3.15
+ARG TARGETPLATFORM
+ARG BUILDPLATFORM
+RUN echo "I am running on $BUILDPLATFORM, building for $TARGETPLATFORM"
+
+RUN apk add --no-cache ca-certificates
+
+# When $TARGETPLATFORM is linux/arm/v7, strip out the '/v6' or '/v7' from it
+RUN BIN_URL=https://storage.googleapis.com/kubernetes-release/release/v1.25.13/bin/$( echo $TARGETPLATFORM | sed 's@/v[67]$@@' )/kubectl \
+    && SHA512=$( wget -qO- "$BIN_URL.sha512" ) \
+    && wget -qO- "$BIN_URL"  > /usr/local/bin/kubectl \
+    && chmod +x /usr/local/bin/kubectl \
+    && sha512sum /usr/local/bin/kubectl | grep "^$SHA512 " \
+    && kubectl version --client
+
+COPY docker-entrypoint.sh /docker-entrypoint.sh
+RUN chmod +x /docker-entrypoint.sh
+
+ENTRYPOINT [ "/docker-entrypoint.sh" ]
diff --git a/variants/v1.25.13-alpine-3.15/docker-entrypoint.sh b/variants/v1.25.13-alpine-3.15/docker-entrypoint.sh
new file mode 100644
index 0000000..2cbc6d4
--- /dev/null
+++ b/variants/v1.25.13-alpine-3.15/docker-entrypoint.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+set -eu
+
+if [ $# -gt 0 ] && [ "${1#-}" != "$1" ]; then
+    set -- kubectl "$@"
+elif [ $# -gt 0 ] && kubectl "$1" --help > /dev/null 2>&1; then
+    set -- kubectl "$@"
+fi
+
+exec "$@"
\ No newline at end of file
diff --git a/variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15/Dockerfile b/variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15/Dockerfile
new file mode 100644
index 0000000..8379fa1
--- /dev/null
+++ b/variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15/Dockerfile
@@ -0,0 +1,57 @@
+FROM alpine:3.15
+ARG TARGETPLATFORM
+ARG BUILDPLATFORM
+RUN echo "I am running on $BUILDPLATFORM, building for $TARGETPLATFORM"
+
+RUN apk add --no-cache ca-certificates
+
+# When $TARGETPLATFORM is linux/arm/v7, strip out the '/v6' or '/v7' from it
+RUN BIN_URL=https://storage.googleapis.com/kubernetes-release/release/v1.25.13/bin/$( echo $TARGETPLATFORM | sed 's@/v[67]$@@' )/kubectl \
+    && SHA512=$( wget -qO- "$BIN_URL.sha512" ) \
+    && wget -qO- "$BIN_URL"  > /usr/local/bin/kubectl \
+    && chmod +x /usr/local/bin/kubectl \
+    && sha512sum /usr/local/bin/kubectl | grep "^$SHA512 " \
+    && kubectl version --client
+
+# From: https://github.com/nginxinc/docker-nginx/blob/1.17.0/stable/alpine/Dockerfile
+# Bring in gettext so we can get `envsubst`, then throw
+# the rest away. To do this, we need to install `gettext`
+# then move `envsubst` out of the way so `gettext` can
+# be deleted completely, then move `envsubst` back.
+RUN apk add --no-cache --virtual .gettext gettext \
+    && mv /usr/bin/envsubst /tmp/ \
+    \
+    && runDeps="$( \
+        scanelf --needed --nobanner /tmp/envsubst \
+            | awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
+            | sort -u \
+            | xargs -r apk info --installed \
+            | sort -u \
+    )" \
+    && apk add --no-cache $runDeps \
+    && apk del .gettext \
+    && mv /tmp/envsubst /usr/local/bin/
+
+RUN apk add --no-cache git
+
+RUN apk add --no-cache jq
+
+RUN apk add --no-cache curl \
+    && curl -L https://github.com/kubernetes-sigs/kustomize/releases/download/v2.0.3/kustomize_2.0.3_linux_amd64 -o /usr/local/bin/kustomize \
+    && chmod +x /usr/local/bin/kustomize \
+    && apk del curl
+
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
+
+RUN apk add --no-cache gnupg
+
+RUN apk add --no-cache openssh-client
+
+COPY docker-entrypoint.sh /docker-entrypoint.sh
+RUN chmod +x /docker-entrypoint.sh
+
+ENTRYPOINT [ "/docker-entrypoint.sh" ]
diff --git a/variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15/docker-entrypoint.sh b/variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15/docker-entrypoint.sh
new file mode 100644
index 0000000..2cbc6d4
--- /dev/null
+++ b/variants/v1.25.13-envsubst-git-jq-kustomize-sops-ssh-alpine-3.15/docker-entrypoint.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+set -eu
+
+if [ $# -gt 0 ] && [ "${1#-}" != "$1" ]; then
+    set -- kubectl "$@"
+elif [ $# -gt 0 ] && kubectl "$1" --help > /dev/null 2>&1; then
+    set -- kubectl "$@"
+fi
+
+exec "$@"
\ No newline at end of file