diff --git a/package-lock.json b/package-lock.json
index 07d86f4b59..1e39d3c594 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1070,9 +1070,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.8",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
-      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
+      "version": "3.1.9",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
+      "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
       "dev": true,
       "funding": [
         {
diff --git a/roles/svc-db-redis/meta/services.yml b/roles/svc-db-redis/meta/services.yml
index b827cdbfcd..695d038bf9 100644
--- a/roles/svc-db-redis/meta/services.yml
+++ b/roles/svc-db-redis/meta/services.yml
@@ -12,7 +12,7 @@ redis:
   shared: true
   image: redis
   name: redis-central
-  version: 8.10.2-alpine
+  version: 8.10.3-alpine
   min_storage: 238MB
   backup:
     disabled: true
diff --git a/roles/sys-ctl-hlth-csp/meta/services.yml b/roles/sys-ctl-hlth-csp/meta/services.yml
index ba813f69b7..cdc83424a1 100644
--- a/roles/sys-ctl-hlth-csp/meta/services.yml
+++ b/roles/sys-ctl-hlth-csp/meta/services.yml
@@ -8,4 +8,4 @@ csp:
       categories: [web]
 csp-checker:
   image: ghcr.io/kevinveenbirkenbach/csp-checker
-  version: 3.1.0
+  version: 3.2.0
diff --git a/roles/web-app-n8n/meta/services.yml b/roles/web-app-n8n/meta/services.yml
index 90afb54a81..078823fdfc 100644
--- a/roles/web-app-n8n/meta/services.yml
+++ b/roles/web-app-n8n/meta/services.yml
@@ -67,7 +67,7 @@ n8n:
   backup:
     no_stop_required: false
   image: docker.n8n.io/n8nio/n8n
-  version: "2.45.3"
+  version: "2.45.4"
   update:
     type: registry_tags
     image: docker.n8n.io/n8nio/n8n
diff --git a/roles/web-app-nextcloud/meta/services.yml b/roles/web-app-nextcloud/meta/services.yml
index 270fd038fe..1e35ea097a 100644
--- a/roles/web-app-nextcloud/meta/services.yml
+++ b/roles/web-app-nextcloud/meta/services.yml
@@ -141,7 +141,7 @@ context_agent:
   shared: "{{ lookup('config', 'web-app-nextcloud', 'mcp.enabled') | bool }}"
   name: nextcloud-context-agent
   image: ghcr.io/nextcloud/context_agent
-  version: 2.9.1
+  version: 2.10.0
   backup:
     no_stop_required: true
   # nocheck: single-replica
diff --git a/roles/web-app-openbao/meta/services.yml b/roles/web-app-openbao/meta/services.yml
index 1321062f6e..53108ab4cb 100644
--- a/roles/web-app-openbao/meta/services.yml
+++ b/roles/web-app-openbao/meta/services.yml
@@ -51,7 +51,7 @@ openbao:
   pids_limit: 512
   min_storage: 60MB
   image: openbao/openbao
-  version: "2.7.1"
+  version: "2.7.2"
   custom: true
   backup:
     no_stop_required: false
diff --git a/roles/web-app-opentalk/meta/services.yml b/roles/web-app-opentalk/meta/services.yml
index 97a1bfc355..b04ad54131 100644
--- a/roles/web-app-opentalk/meta/services.yml
+++ b/roles/web-app-opentalk/meta/services.yml
@@ -104,7 +104,7 @@ controller:
 livekit:
   name: opentalk-livekit
   image: livekit/livekit-server
-  version: v1.13.10
+  version: v1.13.11
   min_storage: 238MB
   cpus: "2.0"
   mem_reservation: 512m
diff --git a/roles/web-app-peertube/meta/services.yml b/roles/web-app-peertube/meta/services.yml
index d8069066b3..02c451b7a7 100644
--- a/roles/web-app-peertube/meta/services.yml
+++ b/roles/web-app-peertube/meta/services.yml
@@ -61,7 +61,7 @@ peertube:
   enabled: true # nocheck: dynamic-flag
   shared: true
   name: peertube
-  version: v8.3.1
+  version: v8.3.2
   image: chocobozzz/peertube
   min_storage: 841MB
   live:
diff --git a/roles/web-app-penpot/meta/services.yml b/roles/web-app-penpot/meta/services.yml
index cbfb1e0f27..d5520df0f9 100644
--- a/roles/web-app-penpot/meta/services.yml
+++ b/roles/web-app-penpot/meta/services.yml
@@ -79,7 +79,7 @@ penpot:
   lifecycle: beta
 frontend:
   image: penpotapp/frontend
-  version: "2.18.4"
+  version: "2.18.5"
   name: penpot-frontend
   cpus: "0.5"
   mem_reservation: 256m
@@ -87,7 +87,7 @@ frontend:
   pids_limit: 256
 backend:
   image: penpotapp/backend
-  version: "2.18.4"
+  version: "2.18.5"
   name: penpot-backend
   cpus: "1.0"
   mem_reservation: 1g
@@ -100,7 +100,7 @@ backend:
       http: 6060
 exporter:
   image: penpotapp/exporter
-  version: "2.18.4"
+  version: "2.18.5"
   name: penpot-exporter
   cpus: "0.5"
   mem_reservation: 512m
diff --git a/roles/web-app-seaweedfs/meta/services.yml b/roles/web-app-seaweedfs/meta/services.yml
index c99073bd47..ffdf9d0939 100644
--- a/roles/web-app-seaweedfs/meta/services.yml
+++ b/roles/web-app-seaweedfs/meta/services.yml
@@ -65,7 +65,7 @@ seaweedfs:
   enabled: true
   shared: true
   image: chrislusf/seaweedfs
-  version: "4.48"
+  version: "4.51"
   name: seaweedfs
   api_port: 8333
   region: us-east-1