diff --git a/Cargo.lock b/Cargo.lock
index dd8647df..4546980b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3251,9 +3251,9 @@ checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
 
 [[package]]
 name = "url"
-version = "2.5.5"
+version = "2.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec961601b32b6f5d14ae8dabd35ff2ff2e2c6cb4c0e6641845ff105abe96d958"
+checksum = "08bc136a29a3d1758e07a9cca267be308aeebf5cfd5a10f3f67ab2097683ef5b"
 dependencies = [
  "form_urlencoded",
  "idna",
diff --git a/Cargo.nix b/Cargo.nix
index d36e8bbf..1f793d22 100644
--- a/Cargo.nix
+++ b/Cargo.nix
@@ -10809,9 +10809,9 @@ rec {
       };
       "url" = rec {
         crateName = "url";
-        version = "2.5.5";
+        version = "2.5.7";
         edition = "2018";
-        sha256 = "0n6rjsz5l47z8lc69rn0nin2qbpzy9gx7awdmqa5svrbnc0id5pc";
+        sha256 = "0nzghdv0kcksyvri0npxbjzyx2ihprks5k590y77bld355m17g08";
         authors = [
           "The rust-url developers"
         ];
@@ -10852,7 +10852,7 @@ rec {
         features = {
           "default" = [ "std" ];
           "serde" = [ "dep:serde" ];
-          "std" = [ "idna/std" "percent-encoding/std" "form_urlencoded/std" ];
+          "std" = [ "idna/std" "percent-encoding/std" "form_urlencoded/std" "serde/std" ];
         };
         resolvedDefaultFeatures = [ "default" "serde" "std" ];
       };
diff --git a/Cargo.toml b/Cargo.toml
index c4c62df9..037ed93b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -31,7 +31,7 @@ snafu = "0.8"
 strum = { version = "0.27", features = ["derive"] }
 tokio = { version = "1.40", features = ["full"] }
 tracing = "0.1"
-url = { version = "2.5.2" }
+url = { version = "2.5.7" }
 xml-rs = "0.8"
 
 # [patch."https://github.com/stackabletech/operator-rs.git"]
diff --git a/rust/operator-binary/src/controller.rs b/rust/operator-binary/src/controller.rs
index c3aab1eb..9440566a 100644
--- a/rust/operator-binary/src/controller.rs
+++ b/rust/operator-binary/src/controller.rs
@@ -1064,11 +1064,12 @@ async fn build_node_rolegroup_statefulset(
         );
 
     let nifi_container_name = Container::Nifi.to_string();
-    let mut container_builder = ContainerBuilder::new(&nifi_container_name).with_context(|_| {
-        IllegalContainerNameSnafu {
-            container_name: nifi_container_name,
-        }
-    })?;
+    let mut container_nifi_builder =
+        ContainerBuilder::new(&nifi_container_name).with_context(|_| {
+            IllegalContainerNameSnafu {
+                container_name: nifi_container_name,
+            }
+        })?;
 
     let nifi_args = vec![formatdoc! {"
             {COMMON_BASH_TRAP_FUNCTIONS}
@@ -1084,7 +1085,7 @@ async fn build_node_rolegroup_statefulset(
     create_vector_shutdown_file_command =
         create_vector_shutdown_file_command(STACKABLE_LOG_DIR),
     }];
-    let container_nifi = container_builder
+    let container_nifi = container_nifi_builder
         .image_from_product_image(resolved_product_image)
         .command(vec![
             "/bin/bash".to_string(),
@@ -1226,6 +1227,8 @@ async fn build_node_rolegroup_statefulset(
 
     // We want to add nifi container first for easier defaulting into this container
     pod_builder.add_container(container_nifi.build());
+    // After calling `build()` the ContainerBuilder shouldn't be used anymore, so we drop it
+    drop(container_nifi_builder);
 
     for container in git_sync_resources.git_sync_containers.iter().cloned() {
         pod_builder.add_container(container);
@@ -1294,10 +1297,7 @@ async fn build_node_rolegroup_statefulset(
     }
 
     authentication_config
-        .add_volumes_and_mounts(
-            &mut pod_builder,
-            vec![&mut container_prepare, container_nifi],
-        )
+        .add_volumes_and_mounts(&mut pod_builder, vec![&mut container_prepare])
         .context(AddAuthVolumesSnafu)?;
 
     let metadata = ObjectMetaBuilder::new()