diff --git a/helmfile.d/01-infrastructure.lock b/helmfile.d/01-infrastructure.lock
index 9e10362..9b7d473 100644
--- a/helmfile.d/01-infrastructure.lock
+++ b/helmfile.d/01-infrastructure.lock
@@ -5,10 +5,10 @@ dependencies:
     version: 1.1.0
   - name: cert-manager
     repository: https://charts.jetstack.io
-    version: v1.21.2
+    version: v1.21.3
   - name: cert-manager-webhook-hetzner
     repository: https://charts.hetzner.cloud
-    version: 0.9.0
+    version: 0.9.1
   - name: rook-ceph
     repository: https://charts.rook.io/release
     version: v1.20.2
@@ -21,5 +21,5 @@ dependencies:
   - name: traefik
     repository: https://traefik.github.io/charts
     version: 42.1.3
-digest: sha256:c3efddd6998683a8a18ac1679a51709653c35fd6e3b263bc65d32d4adab698f0
-generated: "2026-10-22T08:43:33.788499974-06:00"
+digest: sha256:f5bbd79ab6a4cd54712b29248d0fec2cf22af7f1156e1457c06509a58d50de50
+generated: "2026-10-23T15:16:21.981261083-06:00"
diff --git a/helmfile.d/02-datastore.lock b/helmfile.d/02-datastore.lock
index f8cfe78..df88654 100644
--- a/helmfile.d/02-datastore.lock
+++ b/helmfile.d/02-datastore.lock
@@ -2,15 +2,15 @@ version: 1.2.3
 dependencies:
   - name: k8up
     repository: https://k8up-io.github.io/k8up
-    version: 4.10.0
+    version: 4.10.1
   - name: mariadb
     repository: https://charts.bitnami.com/bitnami
-    version: 28.1.1
+    version: 28.1.4
   - name: pgo
     repository: git+https://github.com/grantdhunter/postgres-operator@helm?ref=main
     version: 5.8.1
   - name: postgrescluster
     repository: git+https://github.com/grantdhunter/postgres-operator@helm?ref=main
     version: 5.7.4
-digest: sha256:c4eff06a2d3ab7a4703bd4c3d0b20437eefcb7e7e513199ad60ceaf2a6a5bed6
-generated: "2026-10-13T09:41:23.770389063-06:00"
+digest: sha256:1ebf0b11029dbaa1a0637b3f6c43f5fc1126b17725bdafc3d11f5e1561fdf095
+generated: "2026-10-23T15:16:22.856260855-06:00"
diff --git a/helmfile.d/03-apps.lock b/helmfile.d/03-apps.lock
index 697e9a9..e8f8f29 100644
--- a/helmfile.d/03-apps.lock
+++ b/helmfile.d/03-apps.lock
@@ -35,9 +35,9 @@ dependencies:
     version: 0.1.0
   - name: matrix-synapse
     repository: https://ananace.gitlab.io/charts
-    version: 3.12.40
+    version: 3.12.41
   - name: static-site
     repository: git+https://github.com/cfpb/static-site@charts?ref=main
     version: 0.1.1
-digest: sha256:ea4e4637a705855c7bfec6c2246d8a6d7b7e256797f670133501a50704b153f5
-generated: "2026-10-22T08:43:40.621040684-06:00"
+digest: sha256:a2be87e1271d10278e0fa7648cd5edbdb1edeeee78ccbebbd43bbd0f35748fb7
+generated: "2026-10-23T15:16:28.16571664-06:00"