diff --git a/k8s/apps/media/arr/prowlarr/deployment.yaml b/k8s/apps/media/arr/prowlarr/deployment.yaml
index 20964ec..94510db 100644
--- a/k8s/apps/media/arr/prowlarr/deployment.yaml
+++ b/k8s/apps/media/arr/prowlarr/deployment.yaml
@@ -30,7 +30,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: prowlarr
-          image: ghcr.io/onedr0p/prowlarr:1.29.2 # renovate: docker=ghcr.io/onedr0p/prowlarr
+          image: ghcr.io/onedr0p/prowlarr:1.30.2 # renovate: docker=ghcr.io/onedr0p/prowlarr
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
diff --git a/k8s/apps/media/jellyfin/deployment.yaml b/k8s/apps/media/jellyfin/deployment.yaml
index b469ebe..af6c121 100644
--- a/k8s/apps/media/jellyfin/deployment.yaml
+++ b/k8s/apps/media/jellyfin/deployment.yaml
@@ -25,7 +25,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jellyfin
-          image: ghcr.io/jellyfin/jellyfin:10.10.3 # renovate: docker=ghcr.io/jellyfin/jellyfin
+          image: ghcr.io/jellyfin/jellyfin:10.10.5 # renovate: docker=ghcr.io/jellyfin/jellyfin
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
diff --git a/k8s/infra/auth/keycloak/kustomization.yaml b/k8s/infra/auth/keycloak/kustomization.yaml
index 7659c76..7264b9b 100644
--- a/k8s/infra/auth/keycloak/kustomization.yaml
+++ b/k8s/infra/auth/keycloak/kustomization.yaml
@@ -15,5 +15,5 @@ helmCharts:
     repo: oci://registry-1.docker.io/bitnamicharts
     releaseName: keycloak
     namespace: keycloak
-    version: 24.4.0
+    version: 24.4.6
     valuesFile: values.yaml
diff --git a/k8s/infra/controllers/argocd/kustomization.yaml b/k8s/infra/controllers/argocd/kustomization.yaml
index 4343ed7..e6051a9 100644
--- a/k8s/infra/controllers/argocd/kustomization.yaml
+++ b/k8s/infra/controllers/argocd/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: 7.7.15
+    version: 7.7.17
     releaseName: "argocd"
     namespace: argocd
     valuesFile: values.yaml
diff --git a/k8s/infra/controllers/cert-manager/kustomization.yaml b/k8s/infra/controllers/cert-manager/kustomization.yaml
index 3713973..d32f262 100644
--- a/k8s/infra/controllers/cert-manager/kustomization.yaml
+++ b/k8s/infra/controllers/cert-manager/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: cert-manager
     repo: https://charts.jetstack.io
-    version: v1.16.2 # renovate: github-releases=cert-manager/cert-manager
+    version: v1.16.3 # renovate: github-releases=cert-manager/cert-manager
     releaseName: cert-manager
     namespace: cert-manager
     valuesFile: values.yaml
diff --git a/k8s/infra/controllers/node-feature-discovery/kustomization.yaml b/k8s/infra/controllers/node-feature-discovery/kustomization.yaml
index b2fb786..ca03c47 100644
--- a/k8s/infra/controllers/node-feature-discovery/kustomization.yaml
+++ b/k8s/infra/controllers/node-feature-discovery/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: node-feature-discovery
     repo: https://kubernetes-sigs.github.io/node-feature-discovery/charts
-    version: 0.17.0
+    version: 0.17.1
     releaseName: nfd
     includeCRDs: true
     namespace: node-feature-discovery
diff --git a/k8s/infra/controllers/sealed-secrets/kustomization.yaml b/k8s/infra/controllers/sealed-secrets/kustomization.yaml
index 2cc2a54..8a55219 100644
--- a/k8s/infra/controllers/sealed-secrets/kustomization.yaml
+++ b/k8s/infra/controllers/sealed-secrets/kustomization.yaml
@@ -4,7 +4,7 @@ kind: Kustomization
 helmCharts:
   - name: sealed-secrets
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 2.5.0
+    version: 2.5.4
     releaseName: sealed-secrets-controller
     namespace: sealed-secrets
     includeCRDs: true
diff --git a/k8s/infra/crossplane-crds/providers/keycloak.yaml b/k8s/infra/crossplane-crds/providers/keycloak.yaml
index 8074e77..616f000 100644
--- a/k8s/infra/crossplane-crds/providers/keycloak.yaml
+++ b/k8s/infra/crossplane-crds/providers/keycloak.yaml
@@ -3,4 +3,4 @@ kind: Provider
 metadata:
   name: provider-keycloak
 spec:
-  package: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v1.9.2 # renovate: github-releases=crossplane-contrib/provider-keycloak
+  package: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v1.10.1 # renovate: github-releases=crossplane-contrib/provider-keycloak
diff --git a/k8s/infra/network/cilium/kustomization.yaml b/k8s/infra/network/cilium/kustomization.yaml
index cc43294..700417b 100644
--- a/k8s/infra/network/cilium/kustomization.yaml
+++ b/k8s/infra/network/cilium/kustomization.yaml
@@ -8,7 +8,7 @@ resources:
 helmCharts:
   - name: cilium
     repo: https://helm.cilium.io
-    version: 1.16.5 # renovate: github-releases=cilium/cilium
+    version: 1.16.6 # renovate: github-releases=cilium/cilium
     releaseName: "cilium"
     includeCRDs: true
     namespace: kube-system
diff --git a/k8s/infra/network/dns/adguard/deployment.yaml b/k8s/infra/network/dns/adguard/deployment.yaml
index f56b173..89ce4e0 100644
--- a/k8s/infra/network/dns/adguard/deployment.yaml
+++ b/k8s/infra/network/dns/adguard/deployment.yaml
@@ -49,7 +49,7 @@ spec:
               mountPath: /opt/adguardhome/conf
       containers:
         - name: adguard
-          image: docker.io/adguard/adguardhome:v0.107.55 # renovate: docker=docker.io/adguard/adguardhome
+          image: docker.io/adguard/adguardhome:v0.107.56 # renovate: docker=docker.io/adguard/adguardhome
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
diff --git a/k8s/infra/storage/proxmox-csi/kustomization.yaml b/k8s/infra/storage/proxmox-csi/kustomization.yaml
index 95854a8..065e641 100644
--- a/k8s/infra/storage/proxmox-csi/kustomization.yaml
+++ b/k8s/infra/storage/proxmox-csi/kustomization.yaml
@@ -4,7 +4,7 @@ kind: Kustomization
 helmCharts:
   - name: proxmox-csi-plugin
     repo: oci://ghcr.io/sergelogvinov/charts
-    version: 0.3.1
+    version: 0.3.4
     releaseName: proxmox-csi-plugin
     includeCRDs: true
     namespace: csi-proxmox
diff --git a/k8s/infra/vpn/netbird/agent/daemon-set.yaml b/k8s/infra/vpn/netbird/agent/daemon-set.yaml
index 95a4038..8d59efa 100644
--- a/k8s/infra/vpn/netbird/agent/daemon-set.yaml
+++ b/k8s/infra/vpn/netbird/agent/daemon-set.yaml
@@ -22,7 +22,7 @@ spec:
             value: "1"
       containers:
         - name: agent
-          image: docker.io/netbirdio/netbird:0.35.2 # renovate: docker=docker.io/netbirdio/netbird
+          image: docker.io/netbirdio/netbird:0.36.3 # renovate: docker=docker.io/netbirdio/netbird
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false
diff --git a/k8s/infra/vpn/netbird/dashboard/deployment.yaml b/k8s/infra/vpn/netbird/dashboard/deployment.yaml
index eea46d5..a15d722 100644
--- a/k8s/infra/vpn/netbird/dashboard/deployment.yaml
+++ b/k8s/infra/vpn/netbird/dashboard/deployment.yaml
@@ -17,7 +17,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: dashboard
-          image: docker.io/netbirdio/dashboard:v2.8.2 # renovate: docker=docker.io/netbirdio/dashboard
+          image: docker.io/netbirdio/dashboard:v2.9.0 # renovate: docker=docker.io/netbirdio/dashboard
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false
diff --git a/k8s/infra/vpn/netbird/management/deployment.yaml b/k8s/infra/vpn/netbird/management/deployment.yaml
index cdf75d1..b2773be 100644
--- a/k8s/infra/vpn/netbird/management/deployment.yaml
+++ b/k8s/infra/vpn/netbird/management/deployment.yaml
@@ -58,7 +58,7 @@ spec:
               mountPath: /tmp/netbird
       containers:
         - name: management
-          image: docker.io/netbirdio/management:0.35.2 # renovate: docker=docker.io/netbirdio/management
+          image: docker.io/netbirdio/management:0.36.3 # renovate: docker=docker.io/netbirdio/management
           args: [ --dns-domain, $(DNS_DOMAIN), --log-level, $(LOG_LEVEL), --log-file, console, --idp-sign-key-refresh-enabled ]
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/k8s/infra/vpn/netbird/relay/deployment.yaml b/k8s/infra/vpn/netbird/relay/deployment.yaml
index f617923..4c40656 100644
--- a/k8s/infra/vpn/netbird/relay/deployment.yaml
+++ b/k8s/infra/vpn/netbird/relay/deployment.yaml
@@ -16,7 +16,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       containers:
-        - image: docker.io/netbirdio/relay:0.35.2 # renovate: docker=netbirdio/relay
+        - image: docker.io/netbirdio/relay:0.36.3 # renovate: docker=netbirdio/relay
           imagePullPolicy: IfNotPresent
           name: relay
           securityContext:
diff --git a/k8s/infra/vpn/netbird/signal/deployment.yaml b/k8s/infra/vpn/netbird/signal/deployment.yaml
index 9799c46..bea81ca 100644
--- a/k8s/infra/vpn/netbird/signal/deployment.yaml
+++ b/k8s/infra/vpn/netbird/signal/deployment.yaml
@@ -21,7 +21,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: signal
-          image: docker.io/netbirdio/signal:0.35.2 # renovate: docker=docker.io/netbirdio/signal
+          image: docker.io/netbirdio/signal:0.36.3 # renovate: docker=docker.io/netbirdio/signal
           args: [ --port, $(PORT), --log-level, $(LOG_LEVEL), --log-file, console ]
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/tofu/home-assistant/main.tf b/tofu/home-assistant/main.tf
index 40fb995..ca1cd1f 100644
--- a/tofu/home-assistant/main.tf
+++ b/tofu/home-assistant/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     proxmox = {
       source  = "bpg/proxmox"
-      version = "0.69.1"
+      version = "0.70.0"
     }
   }
 }
diff --git a/tofu/kubernetes/main.tf b/tofu/kubernetes/main.tf
index 2c9a782..7543b55 100644
--- a/tofu/kubernetes/main.tf
+++ b/tofu/kubernetes/main.tf
@@ -7,7 +7,7 @@ module "talos" {
 
   image = {
     version = "v1.8.1"
-    update_version = "v1.9.1" # renovate: github-releases=siderolabs/talos
+    update_version = "v1.9.2" # renovate: github-releases=siderolabs/talos
     schematic = file("${path.module}/talos/image/schematic.yaml")
   }
 
diff --git a/tofu/kubernetes/providers.tf b/tofu/kubernetes/providers.tf
index 8963ffd..9a658ed 100644
--- a/tofu/kubernetes/providers.tf
+++ b/tofu/kubernetes/providers.tf
@@ -6,11 +6,11 @@ terraform {
     }
     proxmox = {
       source  = "bpg/proxmox"
-      version = "0.69.1"
+      version = "0.70.0"
     }
     talos = {
       source  = "siderolabs/talos"
-      version = "0.7.0"
+      version = "0.7.1"
     }
     restapi = {
       source  = "Mastercard/restapi"
diff --git a/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml b/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml
index 3454e51..a3086f2 100644
--- a/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml
+++ b/tofu/kubernetes/talos/inline-manifests/cilium-install.yaml
@@ -75,7 +75,7 @@ spec:
         command:
           - cilium
           - install
-          - --version=v1.16.5 # renovate: github-releases=cilium/cilium
+          - --version=v1.16.6 # renovate: github-releases=cilium/cilium
           - --set
           - kubeProxyReplacement=true
           - --values