Your Convox Rack can be updated via the Convox CLI, or manually via the Terraform CLI.
Every Convox Rack version requires a specific version of k8s (kubernetes), so upgrading Convox will also keep k8s up to date.
Note that the Convox developers need to carefully test each new version of k8s, so the latest version of Convox will sometimes use an older version of k8s.
<aside> ⚠️
Never manually update k8s in your AWS console! It may break your Convox Rack. k8s version upgrades cannot be reverted. If you accidentally update k8s to a version that Convox doesn’t support, you may need to create a new Rack from scratch.
</aside>
First, make sure you have the latest version of the Convox CLI.
Running convox update will update the CLI tool (not the Rack):
$ convox --version
3.19.6
$ convox update
Updating to 3.19.7... OK
$ convox --version
3.19.7
Run convox rack to see what version your Rack is running:
$ convox rack
Name docspring-enterprise
Provider aws
Router router.abcde12345.convox.cloud
Status running
Version 3.19.6
It’s also a good idea to look at the Convox release notes on GitHub:

The release notes will include a lot of technical details, but the important thing to look out for is a k8s version upgrade. Convox is very good at performing zero-downtime upgrades, even when upgrading k8s, but you should be extra careful when a k8s upgrade is involved.
Run convox rack update to update your rack to the latest version.