diff --git a/.mise.toml b/.mise.toml
index 9c6a6854a..147cf1780 100644
--- a/.mise.toml
+++ b/.mise.toml
@@ -7,7 +7,7 @@ age = "1.2.0"
 # https://direnv.net/
 direnv = "2.35.0"
 # https://fluxcd.io/
-flux2 = "2.5.0"
+flux2 = "2.5.1"
 # https://gitleaks.io/
 gitleaks = "8.24.0"
 # https://helm.sh/
diff --git a/kubernetes/kube-nas/apps/database-system/cloudnative-pg/cluster/cluster17.yaml b/kubernetes/kube-nas/apps/database-system/cloudnative-pg/cluster/cluster17.yaml
index a66f274ab..be0ae3a9e 100644
--- a/kubernetes/kube-nas/apps/database-system/cloudnative-pg/cluster/cluster17.yaml
+++ b/kubernetes/kube-nas/apps/database-system/cloudnative-pg/cluster/cluster17.yaml
@@ -6,7 +6,7 @@ metadata:
   name: nas-postgres17
 spec:
   instances: 1
-  imageName: ghcr.io/cloudnative-pg/postgresql:17.4-1
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.4-2
   primaryUpdateStrategy: unsupervised
   storage:
     size: 10Gi
diff --git a/kubernetes/kube-nas/apps/kube-system/coredns/app/helm-release.yaml b/kubernetes/kube-nas/apps/kube-system/coredns/app/helm-release.yaml
index 5d9a43e3e..71d2185a8 100644
--- a/kubernetes/kube-nas/apps/kube-system/coredns/app/helm-release.yaml
+++ b/kubernetes/kube-nas/apps/kube-system/coredns/app/helm-release.yaml
@@ -11,7 +11,7 @@ spec:
   chart:
     spec:
       chart: coredns
-      version: 1.39.0
+      version: 1.39.1
       sourceRef:
         kind: HelmRepository
         name: coredns-charts
diff --git a/kubernetes/kube-nas/apps/secops/vault/snapshots/helm-release.yaml b/kubernetes/kube-nas/apps/secops/vault/snapshots/helm-release.yaml
index 8f1a0e0d0..91d51cba9 100644
--- a/kubernetes/kube-nas/apps/secops/vault/snapshots/helm-release.yaml
+++ b/kubernetes/kube-nas/apps/secops/vault/snapshots/helm-release.yaml
@@ -70,7 +70,7 @@ spec:
           upload:
             image:
               repository: google/cloud-sdk
-              tag: 511.0.0-alpine@sha256:69bdfb39a8b1e6c23c05323749f1779fdeb78db9cab46265a2675a94f46e8908
+              tag: 512.0.0-alpine@sha256:888e4483c072117d288a5d6e2ebadee0653b259b2967ef21f77d9f7763a15a45
             command:
               - /bin/sh
               - -ec
diff --git a/kubernetes/kube-nas/bootstrap/coredns/kustomization.yaml b/kubernetes/kube-nas/bootstrap/coredns/kustomization.yaml
index ab89a3007..f291a4c93 100644
--- a/kubernetes/kube-nas/bootstrap/coredns/kustomization.yaml
+++ b/kubernetes/kube-nas/bootstrap/coredns/kustomization.yaml
@@ -5,7 +5,7 @@ kind: Kustomization
 helmCharts:
   - name: coredns
     repo: https://coredns.github.io/helm
-    version: 1.39.0
+    version: 1.39.1
     releaseName: coredns
     namespace: kube-system
     valuesFile: values.yaml
diff --git a/kubernetes/talos-flux/apps/database/cloudnative-pg/cluster/cluster17.yaml b/kubernetes/talos-flux/apps/database/cloudnative-pg/cluster/cluster17.yaml
index 848d7de46..927cb3ab7 100644
--- a/kubernetes/talos-flux/apps/database/cloudnative-pg/cluster/cluster17.yaml
+++ b/kubernetes/talos-flux/apps/database/cloudnative-pg/cluster/cluster17.yaml
@@ -6,7 +6,7 @@ metadata:
   name: postgres17
 spec:
   instances: 3
-  imageName: ghcr.io/cloudnative-pg/postgresql:17.4-1
+  imageName: ghcr.io/cloudnative-pg/postgresql:17.4-2
   primaryUpdateStrategy: unsupervised
   storage:
     size: 30Gi
diff --git a/kubernetes/talos-flux/apps/gaming-public/minecraft-java/playground-world/helm-release.yaml b/kubernetes/talos-flux/apps/gaming-public/minecraft-java/playground-world/helm-release.yaml
index c7be1a2d2..9f74a8338 100644
--- a/kubernetes/talos-flux/apps/gaming-public/minecraft-java/playground-world/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/gaming-public/minecraft-java/playground-world/helm-release.yaml
@@ -48,7 +48,7 @@ spec:
           app:
             image:
               repository: ghcr.io/itzg/minecraft-server
-              tag: java21@sha256:ef3ea572c4fd80ac056e45b91b9dec9d6f6a7795e2ccc5f38ba15bd5743d9f79
+              tag: java21@sha256:f95ac8bc60cfbdca6d3f991421cb679b826d809cec9add0f08c098b4526acf87
             probes:
               liveness: &probes
                 enabled: true
diff --git a/kubernetes/talos-flux/apps/gaming-public/minecraft-java/survival-world/helm-release.yaml b/kubernetes/talos-flux/apps/gaming-public/minecraft-java/survival-world/helm-release.yaml
index 31c9165f1..af9b70a08 100644
--- a/kubernetes/talos-flux/apps/gaming-public/minecraft-java/survival-world/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/gaming-public/minecraft-java/survival-world/helm-release.yaml
@@ -48,7 +48,7 @@ spec:
           app:
             image:
               repository: ghcr.io/itzg/minecraft-server
-              tag: java21@sha256:ef3ea572c4fd80ac056e45b91b9dec9d6f6a7795e2ccc5f38ba15bd5743d9f79
+              tag: java21@sha256:f95ac8bc60cfbdca6d3f991421cb679b826d809cec9add0f08c098b4526acf87
             probes:
               liveness: &probes
                 enabled: true
diff --git a/kubernetes/talos-flux/apps/gaming/minecraft-java/creative-world/helm-release.yaml b/kubernetes/talos-flux/apps/gaming/minecraft-java/creative-world/helm-release.yaml
index e64f746db..cc1473422 100644
--- a/kubernetes/talos-flux/apps/gaming/minecraft-java/creative-world/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/gaming/minecraft-java/creative-world/helm-release.yaml
@@ -49,7 +49,7 @@ spec:
           app:
             image:
               repository: ghcr.io/itzg/minecraft-server
-              tag: java21@sha256:ef3ea572c4fd80ac056e45b91b9dec9d6f6a7795e2ccc5f38ba15bd5743d9f79
+              tag: java21@sha256:f95ac8bc60cfbdca6d3f991421cb679b826d809cec9add0f08c098b4526acf87
             probes:
               liveness: &probes
                 enabled: true
diff --git a/kubernetes/talos-flux/apps/gaming/minecraft-java/lobby-world/helm-release.yaml b/kubernetes/talos-flux/apps/gaming/minecraft-java/lobby-world/helm-release.yaml
index 26f653a09..3bb7ca31d 100644
--- a/kubernetes/talos-flux/apps/gaming/minecraft-java/lobby-world/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/gaming/minecraft-java/lobby-world/helm-release.yaml
@@ -49,7 +49,7 @@ spec:
           app:
             image:
               repository: ghcr.io/itzg/minecraft-server
-              tag: java21@sha256:ef3ea572c4fd80ac056e45b91b9dec9d6f6a7795e2ccc5f38ba15bd5743d9f79
+              tag: java21@sha256:f95ac8bc60cfbdca6d3f991421cb679b826d809cec9add0f08c098b4526acf87
             probes:
               liveness: &probes
                 enabled: true
diff --git a/kubernetes/talos-flux/apps/gaming/minecraft-java/playground-world/helm-release.yaml b/kubernetes/talos-flux/apps/gaming/minecraft-java/playground-world/helm-release.yaml
index dfd384c7f..21ed50bc5 100644
--- a/kubernetes/talos-flux/apps/gaming/minecraft-java/playground-world/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/gaming/minecraft-java/playground-world/helm-release.yaml
@@ -48,7 +48,7 @@ spec:
           app:
             image:
               repository: ghcr.io/itzg/minecraft-server
-              tag: java21@sha256:ef3ea572c4fd80ac056e45b91b9dec9d6f6a7795e2ccc5f38ba15bd5743d9f79
+              tag: java21@sha256:f95ac8bc60cfbdca6d3f991421cb679b826d809cec9add0f08c098b4526acf87
             probes:
               liveness: &probes
                 enabled: true
diff --git a/kubernetes/talos-flux/apps/gaming/minecraft-java/survival-world/helm-release.yaml b/kubernetes/talos-flux/apps/gaming/minecraft-java/survival-world/helm-release.yaml
index 5a2338411..d8a28ce03 100644
--- a/kubernetes/talos-flux/apps/gaming/minecraft-java/survival-world/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/gaming/minecraft-java/survival-world/helm-release.yaml
@@ -48,7 +48,7 @@ spec:
           app:
             image:
               repository: ghcr.io/itzg/minecraft-server
-              tag: java21@sha256:ef3ea572c4fd80ac056e45b91b9dec9d6f6a7795e2ccc5f38ba15bd5743d9f79
+              tag: java21@sha256:f95ac8bc60cfbdca6d3f991421cb679b826d809cec9add0f08c098b4526acf87
             probes:
               liveness: &probes
                 enabled: true
diff --git a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/gh-actions-demo.yaml b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/gh-actions-demo.yaml
index ae44bf208..d532e6be7 100644
--- a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/gh-actions-demo.yaml
+++ b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/gh-actions-demo.yaml
@@ -30,7 +30,7 @@ spec:
           - name: regcreds-docker
         containers:
           - name: runner
-            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:01162b8a1e1a562b5b29a5ee198b0bddb9eed85a6f22d6533e9cf08d42851b47
+            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
             command: ["/home/runner/run.sh"]
             volumeMounts:
               - name: regcreds-docker
diff --git a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/kind-flux-demo.yaml b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/kind-flux-demo.yaml
index 83d0dcfb2..7c7a1ca51 100644
--- a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/kind-flux-demo.yaml
+++ b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/jazzlyn/kind-flux-demo.yaml
@@ -30,7 +30,7 @@ spec:
           - name: regcreds-docker
         containers:
           - name: runner
-            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:01162b8a1e1a562b5b29a5ee198b0bddb9eed85a6f22d6533e9cf08d42851b47
+            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
             command: ["/home/runner/run.sh"]
             volumeMounts:
               - name: regcreds-docker
diff --git a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/organization/techtales-io.yaml b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/organization/techtales-io.yaml
index 16bea38b0..81efa49d0 100644
--- a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/organization/techtales-io.yaml
+++ b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/organization/techtales-io.yaml
@@ -28,7 +28,7 @@ spec:
       spec:
         containers:
           - name: runner
-            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:01162b8a1e1a562b5b29a5ee198b0bddb9eed85a6f22d6533e9cf08d42851b47
+            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
             command: ["/home/runner/run.sh"]
     controllerServiceAccount:
       namespace: github
diff --git a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/home-ops.yaml b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/home-ops.yaml
index 8370bf90f..ecd5ab276 100644
--- a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/home-ops.yaml
+++ b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/home-ops.yaml
@@ -28,7 +28,7 @@ spec:
       spec:
         containers:
           - name: runner
-            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:01162b8a1e1a562b5b29a5ee198b0bddb9eed85a6f22d6533e9cf08d42851b47
+            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
             command: ["/home/runner/run.sh"]
     controllerServiceAccount:
       namespace: github
diff --git a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/homeassistant-config.yaml b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/homeassistant-config.yaml
index d65dc4025..c7c2ff50c 100644
--- a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/homeassistant-config.yaml
+++ b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/homeassistant-config.yaml
@@ -28,7 +28,7 @@ spec:
       spec:
         containers:
           - name: runner
-            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:01162b8a1e1a562b5b29a5ee198b0bddb9eed85a6f22d6533e9cf08d42851b47
+            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
             command: ["/home/runner/run.sh"]
     controllerServiceAccount:
       namespace: github
diff --git a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github.yaml b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github.yaml
index f2af9a2db..6394acdb1 100644
--- a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github.yaml
+++ b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github.yaml
@@ -28,7 +28,7 @@ spec:
       spec:
         containers:
           - name: runner
-            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:01162b8a1e1a562b5b29a5ee198b0bddb9eed85a6f22d6533e9cf08d42851b47
+            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
             command: ["/home/runner/run.sh"]
             env:
               - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
diff --git a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github/helm-release.yaml b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github/helm-release.yaml
index c3f26b4a4..39e4eb507 100644
--- a/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/github/actions-runner-controller/runners/tyriis/terraform-github/helm-release.yaml
@@ -44,7 +44,7 @@ spec:
       spec:
         containers:
           - name: runner
-            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:01162b8a1e1a562b5b29a5ee198b0bddb9eed85a6f22d6533e9cf08d42851b47
+            image: ghcr.io/onedr0p/actions-runner:2.322.0@sha256:9db27092b7caab08b1dc08d5e639a3340f6e0d6ae2f91aaf93e740bd28ad9306
             command:
               - /home/runner/run.sh
             # env:
diff --git a/kubernetes/talos-flux/apps/home-automation/emqx/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/emqx/app/helm-release.yaml
index b4f03f764..08a0cad06 100644
--- a/kubernetes/talos-flux/apps/home-automation/emqx/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/home-automation/emqx/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: emqx
-      version: 5.8.4
+      version: 5.8.5
       sourceRef:
         kind: HelmRepository
         name: emqx-charts
diff --git a/kubernetes/talos-flux/apps/kube-system/coredns/app/helm-release.yaml b/kubernetes/talos-flux/apps/kube-system/coredns/app/helm-release.yaml
index 505145930..27354cf9a 100644
--- a/kubernetes/talos-flux/apps/kube-system/coredns/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/kube-system/coredns/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: coredns
-      version: 1.39.0
+      version: 1.39.1
       sourceRef:
         kind: HelmRepository
         name: coredns-charts
diff --git a/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml b/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml
index ff7c2aa58..3a23d5ddd 100644
--- a/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml
@@ -37,7 +37,7 @@ spec:
               DISCORD_AVATAR_URL: https://avatars3.githubusercontent.com/u/3380462
             image:
               repository: rogerrum/alertmanager-discord
-              tag: 1.0.6@sha256:cfa615f24b7ec778ad0841c69527f798e713dfcadb7d7964dbe5b1821c767ebb
+              tag: 1.0.7@sha256:bb4bcb893dacca8735bd634b0796f0a1b3ef05e641f8a7b4921f7d0e5a17ee3e
             ports:
               - name: http
                 containerPort: &port 9094
diff --git a/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml b/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml
index e485d056d..be8566796 100644
--- a/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml
@@ -11,7 +11,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: 69.4.1
+      version: 69.5.1
       sourceRef:
         kind: HelmRepository
         name: prometheus-community-charts
diff --git a/kubernetes/talos-flux/bootstrap/coredns/kustomization.yaml b/kubernetes/talos-flux/bootstrap/coredns/kustomization.yaml
index ab89a3007..f291a4c93 100644
--- a/kubernetes/talos-flux/bootstrap/coredns/kustomization.yaml
+++ b/kubernetes/talos-flux/bootstrap/coredns/kustomization.yaml
@@ -5,7 +5,7 @@ kind: Kustomization
 helmCharts:
   - name: coredns
     repo: https://coredns.github.io/helm
-    version: 1.39.0
+    version: 1.39.1
     releaseName: coredns
     namespace: kube-system
     valuesFile: values.yaml