diff --git a/bind/external-dns-k-space.yaml b/bind/external-dns-k-space.yaml
index bbf9d06..91edc05 100644
--- a/bind/external-dns-k-space.yaml
+++ b/bind/external-dns-k-space.yaml
@@ -17,7 +17,7 @@ spec:
       serviceAccountName: external-dns
       containers:
         - name: external-dns
-          image: registry.k8s.io/external-dns/external-dns:v0.14.2
+          image: registry.k8s.io/external-dns/external-dns:v0.16.1
           resources:
             limits:
               cpu: 100m
diff --git a/bind/external-dns-k6.yaml b/bind/external-dns-k6.yaml
index b84fc8e..b2371ec 100644
--- a/bind/external-dns-k6.yaml
+++ b/bind/external-dns-k6.yaml
@@ -17,7 +17,7 @@ spec:
       serviceAccountName: external-dns
       containers:
         - name: external-dns
-          image: registry.k8s.io/external-dns/external-dns:v0.14.2
+          image: registry.k8s.io/external-dns/external-dns:v0.16.1
           resources:
             limits:
               cpu: 100m
diff --git a/bind/external-dns-kspace.yaml b/bind/external-dns-kspace.yaml
index 6a8b358..957191e 100644
--- a/bind/external-dns-kspace.yaml
+++ b/bind/external-dns-kspace.yaml
@@ -17,7 +17,7 @@ spec:
       serviceAccountName: external-dns
       containers:
         - name: external-dns
-          image: registry.k8s.io/external-dns/external-dns:v0.14.2
+          image: registry.k8s.io/external-dns/external-dns:v0.16.1
           resources:
             limits:
               cpu: 100m
diff --git a/freescout/application.yml b/freescout/application.yml
index a5a6516..bac7b66 100644
--- a/freescout/application.yml
+++ b/freescout/application.yml
@@ -45,8 +45,7 @@ spec:
           emptyDir: {}
       initContainers:
         - name: jq
-          image: >-
-            alpine/k8s:1.24.16@sha256:06f8942d87fa17b40795bb9a8eff029a9be3fc3c9bcc13d62071de4cc3324153
+          image: alpine/k8s:1.31.76@sha256:2a3fdd639c71c6cad69fbc8cac2467648855dac29961efec3b155466cc4fa730
           command:
             - /bin/bash
             - '-c'
diff --git a/gitea/application.yaml b/gitea/application.yaml
index 92df9ac..28df46f 100644
--- a/gitea/application.yaml
+++ b/gitea/application.yaml
@@ -66,7 +66,7 @@ spec:
           emptyDir: {}
       initContainers:
         - name: jq
-          image: alpine/k8s:1.24.16@sha256:06f8942d87fa17b40795bb9a8eff029a9be3fc3c9bcc13d62071de4cc3324153
+          image: alpine/k8s:1.31.76@sha256:2a3fdd639c71c6cad69fbc8cac2467648855dac29961efec3b155466cc4fa730
           imagePullPolicy: IfNotPresent
           volumeMounts:
             - mountPath: /tmp
diff --git a/grafana/application.yml b/grafana/application.yml
index a7de8ad..8d11041 100644
--- a/grafana/application.yml
+++ b/grafana/application.yml
@@ -85,7 +85,7 @@ spec:
         fsGroup: 472
       containers:
         - name: grafana
-          image: grafana/grafana:11.1.0
+          image: grafana/grafana:11.6.0
           securityContext:
             readOnlyRootFilesystem: true
             runAsNonRoot: true
diff --git a/monitoring/blackbox-exporter.yaml b/monitoring/blackbox-exporter.yaml
index 9592992..c4e2805 100644
--- a/monitoring/blackbox-exporter.yaml
+++ b/monitoring/blackbox-exporter.yaml
@@ -169,7 +169,7 @@ spec:
     spec:
       containers:
       - name: blackbox-exporter
-        image: mirror.gcr.io/prom/blackbox-exporter:v0.25.0
+        image: mirror.gcr.io/prom/blackbox-exporter:v0.26.0
         ports:
           - name: http
             containerPort: 9115
diff --git a/monitoring/node-exporter.yaml b/monitoring/node-exporter.yaml
index 8eb9bbc..0044662 100644
--- a/monitoring/node-exporter.yaml
+++ b/monitoring/node-exporter.yaml
@@ -390,7 +390,7 @@ spec:
             - --collector.netclass.ignored-devices=^(veth|cali|vxlan|cni|vnet|tap|lo|wg)
             - --collector.netdev.device-exclude=^(veth|cali|vxlan|cni|vnet|tap|lo|wg)
             - --collector.diskstats.ignored-devices=^(sr|loop)[0-9][0-9]*$
-          image: mirror.gcr.io/prom/node-exporter:v1.8.2
+          image: mirror.gcr.io/prom/node-exporter:v1.9.1
           resources:
             limits:
               cpu: 50m
diff --git a/monitoring/snmp-exporter.yaml b/monitoring/snmp-exporter.yaml
index 1f5721b..62bf8d2 100644
--- a/monitoring/snmp-exporter.yaml
+++ b/monitoring/snmp-exporter.yaml
@@ -14,7 +14,7 @@ spec:
         app: snmp-exporter
     spec:
       containers:
-        - image: mirror.gcr.io/prom/snmp-exporter:v0.22.0
+        - image: mirror.gcr.io/prom/snmp-exporter:v0.28.0
           name: snmp-exporter
           imagePullPolicy: IfNotPresent
           securityContext:
diff --git a/nvidia/nvidia-device-plugin.yml b/nvidia/nvidia-device-plugin.yml
index fdaaa16..e1eba8e 100644
--- a/nvidia/nvidia-device-plugin.yml
+++ b/nvidia/nvidia-device-plugin.yml
@@ -43,7 +43,7 @@ spec:
       # See https://kubernetes.io/docs/tasks/administer-cluster/guaranteed-scheduling-critical-addon-pods/
       priorityClassName: "system-node-critical"
       containers:
-      - image: nvcr.io/nvidia/k8s-device-plugin:v0.17.0
+      - image: nvcr.io/nvidia/k8s-device-plugin:v0.17.1
         name: nvidia-device-plugin-ctr
         env:
           - name: FAIL_ON_INIT_ERROR
diff --git a/shared/mongo.yml b/shared/mongo.yml
index 6062505..d60263b 100644
--- a/shared/mongo.yml
+++ b/shared/mongo.yml
@@ -43,7 +43,7 @@ spec:
         - name: mongo-data
           mountPath: /data/db
       - name: exporter
-        image: percona/mongodb_exporter:0.30.0
+        image: percona/mongodb_exporter:0.44
         args:
           - --compatible-mode
           - --mongodb.direct-connect=false
@@ -102,7 +102,7 @@ spec:
     spec:
       containers:
       - name: mongo-rs0-init
-        image: mongo
+        image: mirror.gcr.io/library/mongo
         command: ["mongo", "--eval", "rs.initiate();", "mongodb://mongo-0.mongo"]
       restartPolicy: OnFailure
   backoffLimit: 4
diff --git a/wiki/application.yml b/wiki/application.yml
index 79a81d1..1719e7e 100644
--- a/wiki/application.yml
+++ b/wiki/application.yml
@@ -31,7 +31,7 @@ spec:
           emptyDir: {}
       initContainers:
         - name: jq
-          image: alpine/k8s:1.24.16@sha256:06f8942d87fa17b40795bb9a8eff029a9be3fc3c9bcc13d62071de4cc3324153
+          image: alpine/k8s:1.31.76@sha256:2a3fdd639c71c6cad69fbc8cac2467648855dac29961efec3b155466cc4fa730
           imagePullPolicy: IfNotPresent
           volumeMounts:
             - mountPath: /tmp
diff --git a/wildduck/clamav.yaml b/wildduck/clamav.yaml
index 79fb73d..ec59269 100644
--- a/wildduck/clamav.yaml
+++ b/wildduck/clamav.yaml
@@ -14,9 +14,8 @@ spec:
         app.kubernetes.io/name: clamav
     spec:
       containers:
-        # TODO: Figure out how to trigger update
         - name: clamd
-          image: mirror.gcr.io/clamav/clamav:1.1
+          image: mirror.gcr.io/clamav/clamav:1.4
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 3310