diff --git a/base/cnpg-system/release.yaml b/base/cnpg-system/release.yaml
index 6b290e0aa..48e3e6a31 100644
--- a/base/cnpg-system/release.yaml
+++ b/base/cnpg-system/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: cloudnative-pg
-      version: "0.21.2"
+      version: "0.22.1"
       sourceRef:
         kind: HelmRepository
         name: cnpg
diff --git a/base/external-secrets/release.yaml b/base/external-secrets/release.yaml
index 579de7eca..f99f837a7 100644
--- a/base/external-secrets/release.yaml
+++ b/base/external-secrets/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: external-secrets
-      version: "0.9.11"
+      version: "0.10.7"
       sourceRef:
         kind: HelmRepository
         name: external-secrets
diff --git a/base/longhorn-system/release.yaml b/base/longhorn-system/release.yaml
index a3fd64acb..8f3c4e4d3 100644
--- a/base/longhorn-system/release.yaml
+++ b/base/longhorn-system/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: longhorn
-      version: "1.7.1"
+      version: "1.7.2"
       sourceRef:
         kind: HelmRepository
         name: longhorn
diff --git a/base/topolvm/release.yaml b/base/topolvm/release.yaml
index c0ae45226..0e9aae0e9 100644
--- a/base/topolvm/release.yaml
+++ b/base/topolvm/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: topolvm
-      version: "14.1.0"
+      version: "14.1.2"
       sourceRef:
         kind: HelmRepository
         name: topolvm
diff --git a/base/traefik/private/release.yaml b/base/traefik/private/release.yaml
index 62163fdf7..87eb454a2 100644
--- a/base/traefik/private/release.yaml
+++ b/base/traefik/private/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: traefik
-      version: "32.0.0"
+      version: "32.1.1"
       sourceRef:
         kind: HelmRepository
         name: traefik
diff --git a/base/traefik/public/release.yaml b/base/traefik/public/release.yaml
index 9ad31b0fa..9fbb97df5 100644
--- a/base/traefik/public/release.yaml
+++ b/base/traefik/public/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: traefik
-      version: "28.0.0"
+      version: "28.3.0"
       sourceRef:
         kind: HelmRepository
         name: traefik
diff --git a/metal/group_vars/k3s.yml b/metal/group_vars/k3s.yml
index 5233ac39a..7348482e2 100644
--- a/metal/group_vars/k3s.yml
+++ b/metal/group_vars/k3s.yml
@@ -2,7 +2,7 @@
 kube_vip_image: ghcr.io/kube-vip/kube-vip:v0.6.0
 kube_vip_ip: "192.168.2.30"  # VIP IP managed by kube-vip
 
-k3s_version: v1.30.5+k3s1
+k3s_version: v1.31.2+k3s1
 #k3s_master_ip: "{{ hostvars[groups['k3s_control_plane'][0]]['ansible_default_ipv4']['address'] }}"
 k3s_master_ip: "{{ kube_vip_ip }}"
 
diff --git a/metal/roles/requirements.yml b/metal/roles/requirements.yml
index 55c28c33c..2abe28c2a 100644
--- a/metal/roles/requirements.yml
+++ b/metal/roles/requirements.yml
@@ -8,6 +8,6 @@ roles:
 
 collections:
 - name: devsec.hardening
-  version: 9.0.0
+  version: 9.0.1
 - name: prometheus.prometheus
-  version: 0.6.0
+  version: 0.23.0