diff --git a/k8s/apps/media/arr/torrent/deployment.yaml b/k8s/apps/media/arr/torrent/deployment.yaml
index 0beca04..28adb56 100644
--- a/k8s/apps/media/arr/torrent/deployment.yaml
+++ b/k8s/apps/media/arr/torrent/deployment.yaml
@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: git-sync-vuetorrent
-          image: registry.k8s.io/git-sync/git-sync:v4.2.3 # renovate: docker=registry.k8s.io/git-sync/git-sync
+          image: registry.k8s.io/git-sync/git-sync:v4.2.4 # renovate: docker=registry.k8s.io/git-sync/git-sync
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
diff --git a/k8s/infra/controllers/argocd/kustomization.yaml b/k8s/infra/controllers/argocd/kustomization.yaml
index efca633..ea2069a 100644
--- a/k8s/infra/controllers/argocd/kustomization.yaml
+++ b/k8s/infra/controllers/argocd/kustomization.yaml
@@ -8,7 +8,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: 7.4.3
+    version: 7.4.4
     releaseName: "argocd"
     namespace: argocd
     valuesFile: values.yaml
diff --git a/k8s/infra/controllers/cert-manager/kustomization.yaml b/k8s/infra/controllers/cert-manager/kustomization.yaml
index a513eba..3f57f19 100644
--- a/k8s/infra/controllers/cert-manager/kustomization.yaml
+++ b/k8s/infra/controllers/cert-manager/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: cert-manager
     repo: https://charts.jetstack.io
-    version: v1.15.2
+    version: v1.15.3
     releaseName: cert-manager
     namespace: cert-manager
     valuesFile: values.yaml
diff --git a/k8s/infra/crossplane-crds/config/keycloak/functions.yaml b/k8s/infra/crossplane-crds/config/keycloak/functions.yaml
index 104df18..de5cbe8 100644
--- a/k8s/infra/crossplane-crds/config/keycloak/functions.yaml
+++ b/k8s/infra/crossplane-crds/config/keycloak/functions.yaml
@@ -17,5 +17,5 @@ kind: Function
 metadata:
   name: function-keycloak-builtin-objects
 spec:
-  package: registry.gitlab.com/corewire/images/crossplane/function-keycloak-builtin-objects:v1.0.0 # renovate: gitlab-releases=corewire/images/crossplane/function-keycloak-builtin-objects
+  package: registry.gitlab.com/corewire/images/crossplane/function-keycloak-builtin-objects:v2.0.0 # renovate: gitlab-releases=corewire/images/crossplane/function-keycloak-builtin-objects
   packagePullPolicy: Always
diff --git a/k8s/infra/network/dns/adguard/deployment.yaml b/k8s/infra/network/dns/adguard/deployment.yaml
index 27a9cd4..7927ebe 100644
--- a/k8s/infra/network/dns/adguard/deployment.yaml
+++ b/k8s/infra/network/dns/adguard/deployment.yaml
@@ -49,7 +49,7 @@ spec:
               mountPath: /opt/adguardhome/conf
       containers:
         - name: adguard
-          image: docker.io/adguard/adguardhome:v0.107.48 # renovate: docker=docker.io/adguard/adguardhome
+          image: docker.io/adguard/adguardhome:v0.107.52 # renovate: docker=docker.io/adguard/adguardhome
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true