diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 873a4827..7a636d5e 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -16,7 +16,7 @@ repos:
       - id: end-of-file-fixer
       - id: mixed-line-ending
   - repo: https://github.com/Lucas-C/pre-commit-hooks
-    rev: v1.1.14
+    rev: v1.2.0
     hooks:
       - id: remove-crlf
       - id: remove-tabs
@@ -25,10 +25,10 @@ repos:
     hooks:
       - id: fix-smartquotes
   - repo: https://github.com/k8s-at-home/sops-pre-commit
-    rev: v2.1.0
+    rev: v2.1.1
     hooks:
       - id: forbid-secrets
   - repo: https://github.com/zricethezav/gitleaks
-    rev: v8.8.4
+    rev: v8.8.5
     hooks:
       - id: gitleaks
diff --git a/cluster/apps/media/lidarr/helm-release.yaml b/cluster/apps/media/lidarr/helm-release.yaml
index 735b421f..af015882 100644
--- a/cluster/apps/media/lidarr/helm-release.yaml
+++ b/cluster/apps/media/lidarr/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: lidarr
-      version: 14.0.1
+      version: 14.1.3
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
@@ -20,7 +20,7 @@ spec:
   values:
     image:
       repository: ghcr.io/k8s-at-home/lidarr-nightly
-      tag: v1.0.0.2551
+      tag: v1.0.2.2587
     env:
       TZ: "${TIMEZONE}"
     ingress:
diff --git a/cluster/apps/media/navidrome/helm-release.yaml b/cluster/apps/media/navidrome/helm-release.yaml
index 41d54985..20adb590 100644
--- a/cluster/apps/media/navidrome/helm-release.yaml
+++ b/cluster/apps/media/navidrome/helm-release.yaml
@@ -10,7 +10,7 @@ spec:
     spec:
       # renovate: registryUrl=https://k8s-at-home.com/charts/
       chart: navidrome
-      version: 6.2.0
+      version: 6.3.2
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
diff --git a/cluster/apps/media/overseerr/helm-release.yaml b/cluster/apps/media/overseerr/helm-release.yaml
index 462e9dcf..026aaf87 100644
--- a/cluster/apps/media/overseerr/helm-release.yaml
+++ b/cluster/apps/media/overseerr/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: overseerr
-      version: 5.2.0
+      version: 5.3.2
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
diff --git a/cluster/apps/media/plex/helm-release.yaml b/cluster/apps/media/plex/helm-release.yaml
index fdd1ff48..202bc98f 100644
--- a/cluster/apps/media/plex/helm-release.yaml
+++ b/cluster/apps/media/plex/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: plex
-      version: 6.2.0
+      version: 6.3.3
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
diff --git a/cluster/apps/media/prowlarr/helm-release.yaml b/cluster/apps/media/prowlarr/helm-release.yaml
index 6446a735..de07eb5c 100644
--- a/cluster/apps/media/prowlarr/helm-release.yaml
+++ b/cluster/apps/media/prowlarr/helm-release.yaml
@@ -22,7 +22,7 @@ spec:
       nameOverride: *app
     image:
       repository: ghcr.io/k8s-at-home/prowlarr-nightly
-      tag: v0.4.0.1788
+      tag: v0.4.0.1793
     env:
       TZ: "${TIMEZONE}"
     service:
diff --git a/cluster/apps/media/pyload/helm-release.yaml b/cluster/apps/media/pyload/helm-release.yaml
index 207d2065..1970e6ac 100644
--- a/cluster/apps/media/pyload/helm-release.yaml
+++ b/cluster/apps/media/pyload/helm-release.yaml
@@ -10,7 +10,7 @@ spec:
     spec:
       # renovate: registryUrl=https://k8s-at-home.com/charts/
       chart: pyload
-      version: 6.2.0
+      version: 6.3.2
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
diff --git a/cluster/apps/media/qbittorrent/helm-release.yaml b/cluster/apps/media/qbittorrent/helm-release.yaml
index 7b49063d..4898e628 100644
--- a/cluster/apps/media/qbittorrent/helm-release.yaml
+++ b/cluster/apps/media/qbittorrent/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: qbittorrent
-      version: 13.2.0
+      version: 13.4.3
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
diff --git a/cluster/apps/media/radarr/helm-release.yaml b/cluster/apps/media/radarr/helm-release.yaml
index 20ba16d1..fece95ea 100644
--- a/cluster/apps/media/radarr/helm-release.yaml
+++ b/cluster/apps/media/radarr/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: radarr
-      version: 16.0.1
+      version: 16.2.3
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
diff --git a/cluster/apps/media/readarr/helm-release.yaml b/cluster/apps/media/readarr/helm-release.yaml
index 9c6a6f20..d2cf8787 100644
--- a/cluster/apps/media/readarr/helm-release.yaml
+++ b/cluster/apps/media/readarr/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: readarr
-      version: 6.2.0
+      version: 6.3.2
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
@@ -20,7 +20,7 @@ spec:
   values:
     image:
       repository: ghcr.io/k8s-at-home/readarr-nightly
-      tag: v0.1.1.1306
+      tag: v0.1.1.1337
     env:
       TZ: "${TIMEZONE}"
     ingress:
diff --git a/cluster/apps/media/sabnzbd/helm-release.yaml b/cluster/apps/media/sabnzbd/helm-release.yaml
index 6ec4f9ba..d293b00f 100644
--- a/cluster/apps/media/sabnzbd/helm-release.yaml
+++ b/cluster/apps/media/sabnzbd/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: sabnzbd
-      version: 9.2.0
+      version: 9.3.2
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
diff --git a/cluster/apps/media/sonarr/helm-release.yaml b/cluster/apps/media/sonarr/helm-release.yaml
index 0d6dad86..c2a1624e 100644
--- a/cluster/apps/media/sonarr/helm-release.yaml
+++ b/cluster/apps/media/sonarr/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: sonarr
-      version: 16.0.1
+      version: 16.2.3
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
@@ -20,7 +20,7 @@ spec:
   values:
     image:
       repository: ghcr.io/k8s-at-home/sonarr-develop
-      tag: v3.0.7.1503
+      tag: v3.0.8.1523
     env:
       TZ: "${TIMEZONE}"
     ingress:
diff --git a/cluster/apps/media/tautulli/helm-release.yaml b/cluster/apps/media/tautulli/helm-release.yaml
index da77c92b..372dda1a 100644
--- a/cluster/apps/media/tautulli/helm-release.yaml
+++ b/cluster/apps/media/tautulli/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: tautulli
-      version: 11.2.0
+      version: 11.3.2
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
@@ -20,7 +20,7 @@ spec:
   values:
     image:
       repository: ghcr.io/k8s-at-home/tautulli
-      tag: v2.9.7
+      tag: v2.10.0
     env:
       TZ: "${TIMEZONE}"
     ingress:
diff --git a/cluster/apps/media/unpackerr/helm-release.yaml b/cluster/apps/media/unpackerr/helm-release.yaml
index 9e1ba672..84065ead 100644
--- a/cluster/apps/media/unpackerr/helm-release.yaml
+++ b/cluster/apps/media/unpackerr/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: unpackerr
-      version: 5.2.0
+      version: 5.3.2
       sourceRef:
         kind: HelmRepository
         name: k8s-at-home-charts
@@ -20,7 +20,7 @@ spec:
   values:
     image:
       repository: docker.io/golift/unpackerr
-      tag: 0.9.9
+      tag: 0.10.0
     env:
       TZ: "${TIMEZONE}"
       UN_SONARR_0_URL: http://sonarr:8989
diff --git a/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml b/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml
index 1c444f77..4b3edac1 100644
--- a/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml
+++ b/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: 35.2.0
+      version: 35.4.2
       sourceRef:
         kind: HelmRepository
         name: prometheus-community-charts
diff --git a/cluster/apps/networking/cloudflare-ddns/cron-job.yaml b/cluster/apps/networking/cloudflare-ddns/cron-job.yaml
index 4ca1778a..319f6990 100644
--- a/cluster/apps/networking/cloudflare-ddns/cron-job.yaml
+++ b/cluster/apps/networking/cloudflare-ddns/cron-job.yaml
@@ -18,7 +18,7 @@ spec:
           restartPolicy: Never
           containers:
             - name: cloudflare-ddns
-              image: ghcr.io/k8s-at-home/kubectl:v1.24.0
+              image: ghcr.io/k8s-at-home/kubectl:v1.24.1
               envFrom:
                 - secretRef:
                     name: cloudflare-ddns
diff --git a/cluster/apps/networking/traefik/helm-release.yaml b/cluster/apps/networking/traefik/helm-release.yaml
index 64cdd6f0..5944492f 100644
--- a/cluster/apps/networking/traefik/helm-release.yaml
+++ b/cluster/apps/networking/traefik/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: traefik
-      version: 10.19.5
+      version: 10.20.0
       sourceRef:
         kind: HelmRepository
         name: traefik-charts
diff --git a/cluster/crds/traefik/crds.yaml b/cluster/crds/traefik/crds.yaml
index 930e9f9f..2ce6e9a9 100644
--- a/cluster/crds/traefik/crds.yaml
+++ b/cluster/crds/traefik/crds.yaml
@@ -9,7 +9,7 @@ spec:
   url: https://github.com/traefik/traefik-helm-chart.git
   ref:
     # renovate: registryUrl=https://helm.traefik.io/traefik chart=traefik
-    tag: v10.19.5
+    tag: v10.20.0
   ignore: |
     # exclude all
     /*
diff --git a/provision/ansible/requirements.yml b/provision/ansible/requirements.yml
index c083ee14..0fedc31c 100644
--- a/provision/ansible/requirements.yml
+++ b/provision/ansible/requirements.yml
@@ -1,11 +1,11 @@
 ---
 collections:
   - name: community.general
-    version: 4.8.0
+    version: 4.8.1
   - name: community.sops
     version: 1.2.1
   - name: ansible.posix
-    version: 1.3.0
+    version: 1.4.0
   - name: ansible.utils
     version: 2.6.1
 roles:
diff --git a/provision/terraform/cloudflare/.terraform.lock.hcl b/provision/terraform/cloudflare/.terraform.lock.hcl
index 4b057aea..c570b804 100644
--- a/provision/terraform/cloudflare/.terraform.lock.hcl
+++ b/provision/terraform/cloudflare/.terraform.lock.hcl
@@ -17,24 +17,23 @@ provider "registry.terraform.io/carlpett/sops" {
 }
 
 provider "registry.terraform.io/cloudflare/cloudflare" {
-  version     = "3.14.0"
-  constraints = "3.14.0"
+  version     = "3.15.0"
+  constraints = "3.15.0"
   hashes = [
-    "h1:MP2Br1A6Q+PLUVLR90o5RO98FSSkEHLinaXinxdqAvY=",
-    "zh:36b071d2e57c21a22c40dc7684eadaecf0309fc11e6f76f7eac5f8de3e97f604",
-    "zh:6ba1023ec4ea2645f27981d20fdabbf64c692abd750c4d8a9b40ed02c608403d",
-    "zh:6e810d8360e8e16075f838ec496b04f728450c284ca4045a95b7f76736fba9e5",
-    "zh:7ff8d4f1e23b7dbd115be98e221522f584d556040cd893da5d1f6bbdd43d8c06",
-    "zh:841cdf57d02ca40fc33580a5c5cd081abf816826875c329d9b43c8467c7843a2",
-    "zh:901e572e15eaec3db9ff41c4e29759a4208577dd30a948d41927799963f1d037",
-    "zh:9abfa2624f639471d7469cfd8c081f8206e09c878f71f1965b526760b4351772",
-    "zh:a0c107a96628d67a901b74e549132d877e041b967f73b3913a271116bc2261c8",
-    "zh:b28b8614dcd89a97763cff988fdd3eb9f6f70f6daa81fd5112153bd8caccb51b",
-    "zh:b980e4e4567a12650ddc6300d7a9da1c110b3ad20c9e0325119ac00b04de6c4d",
-    "zh:bfc01a48e0befbbb200821e2f2e041e9b349fa0a55e3fcd4ec0a3ab1a57cf297",
-    "zh:c101a35703cef8165e9fad1d3379801a40b86c8c4652bb374b2d0f02a31e0124",
-    "zh:d37fd62d51789e10bd9b415db57b8bcffa10129cb3634d5428986955470162de",
-    "zh:e980e42a97815255c992973a43ba37a2e4a4a8d519e8cff8e015296f8ee36bf9",
+    "h1:/Hf+DqFPjNg3x1G4mx4twSlNqeKe1ROOQtbUmQzhr1o=",
+    "h1:2xbgfXB6qO456T2DUb4e8L1BAx60ZOgSqZXB1toI4lU=",
+    "h1:5N2fS9zg2+orUrP2dwHv6pEHfDAID6BYPb4T/wvhGuY=",
+    "h1:EZYITYZwM0Ie9Ny2+95q1xMaoNxJbPW8YwDSFOWViyw=",
+    "h1:Hj8O8AXuR/b8APmE4zhUVVGkGJtatrKsTYrlFadsEOA=",
+    "h1:LVTTMhaFfG4tsm3p87HMjlNacO0PLBfGGgn5rTqgcmk=",
+    "h1:P/qosnhlsp9S+gdsS6YSxy3GtEoqxX+hmtAsP8dvJX0=",
+    "h1:QKRYRJBfcqSGvt1anY3H6+g9c6udeBMO/tHg0aLo5gc=",
+    "h1:SvGrEr563k3oalYBxIqdYCurvI0iLd8/fUhZiAwi274=",
+    "h1:X5S9a7ZnsyNfKPZ/4jn7JAA1oqf3xN5jnSPodZqUP/M=",
+    "h1:fERc/FkpJ3vIZ/A8daH0C9+aydX/xVA8dlu1ljQu7q0=",
+    "h1:sM6hGjZEsfB3M/Gx9Eo3TE3F3gJcI6G7BfIZEICZUig=",
+    "h1:vA1hPhf7Rajgfi4y4XrNNsYjjh7zOgaSpE3UwVV4f3Y=",
+    "h1:wFg2LsdmGTI9gsD6hi+hFAyQViWVMRXhE9EG0KEBeh4=",
   ]
 }
 
diff --git a/provision/terraform/cloudflare/main.tf b/provision/terraform/cloudflare/main.tf
index 00e97a4e..8abbe3e7 100644
--- a/provision/terraform/cloudflare/main.tf
+++ b/provision/terraform/cloudflare/main.tf
@@ -3,7 +3,7 @@ terraform {
   required_providers {
     cloudflare = {
       source  = "cloudflare/cloudflare"
-      version = "3.14.0"
+      version = "3.15.0"
     }
     http = {
       source  = "hashicorp/http"