diff --git a/kubernetes/main/apps/downloads/sonarr/app/helmrelease.yaml b/kubernetes/main/apps/downloads/sonarr/app/helmrelease.yaml
index 1e9cdaef0..5eee45c3d 100644
--- a/kubernetes/main/apps/downloads/sonarr/app/helmrelease.yaml
+++ b/kubernetes/main/apps/downloads/sonarr/app/helmrelease.yaml
@@ -39,7 +39,7 @@ spec:
           sonarr:
             image:
               repository: ghcr.io/onedr0p/sonarr-develop
-              tag: 4.0.11.2800@sha256:c9bdc88d44ac2e460ef6834057acec513acdd82107a622d78ddedec01e4e81ec
+              tag: 4.0.11.2804@sha256:cb7d3b0cd6f465868df6b88bfa78d52899b9955ced2bf03720eccc3fba402635
             env:
               COMPlus_EnableDiagnostics: "0"
               SONARR__APP__INSTANCENAME: Sonarr
diff --git a/kubernetes/main/apps/media/piped/app/helmrelease.yaml b/kubernetes/main/apps/media/piped/app/helmrelease.yaml
index 3e69d2c16..0da293280 100644
--- a/kubernetes/main/apps/media/piped/app/helmrelease.yaml
+++ b/kubernetes/main/apps/media/piped/app/helmrelease.yaml
@@ -61,7 +61,7 @@ spec:
           app:
             image:
               repository: ghcr.io/bjw-s-labs/piped-frontend
-              tag: 2024.12.22@sha256:5bd685f3cead5f61a77cc2b21527f8eb1d88f48ae3da70ccbe2c948b35a66357
+              tag: 2024.12.27@sha256:f97ff00c9869712a3061435db6b19b35c21f151732d0aae9817e7cef9f6adab6
             env:
               BACKEND_HOSTNAME: piped-api.econline.nl
             probes:
@@ -89,7 +89,7 @@ spec:
           app:
             image:
               repository: 1337kavin/piped-proxy
-              tag: latest@sha256:eaef23d2147cfe186134fb43e9b78aa3ee0b6f2462590110f696bb2aa2936af4
+              tag: latest@sha256:36a446ceb3613efdaf51630ce66e6f4bea607dd54232a041defaa512a0d668f7
             command:
               - /app/piped-proxy
             probes:
diff --git a/kubernetes/main/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml b/kubernetes/main/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
index e589ce045..37d5fba37 100644
--- a/kubernetes/main/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
+++ b/kubernetes/main/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: rook-ceph-cluster
-      version: v1.15.7
+      version: v1.16.0
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
diff --git a/kubernetes/main/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml b/kubernetes/main/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml
index 8714d4949..7cb2cee0c 100644
--- a/kubernetes/main/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml
+++ b/kubernetes/main/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: rook-ceph
-      version: v1.15.7
+      version: v1.16.0
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
diff --git a/kubernetes/main/apps/selfhosted/atuin/app/helmrelease.yaml b/kubernetes/main/apps/selfhosted/atuin/app/helmrelease.yaml
index 4051b96ff..841d11575 100644
--- a/kubernetes/main/apps/selfhosted/atuin/app/helmrelease.yaml
+++ b/kubernetes/main/apps/selfhosted/atuin/app/helmrelease.yaml
@@ -27,7 +27,7 @@ spec:
           app:
             image:
               repository: ghcr.io/atuinsh/atuin
-              tag: 18.3.0
+              tag: 18.4.0
             args:
               - server
               - start
diff --git a/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml b/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml
index f399eaead..cfbeb74df 100644
--- a/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml
+++ b/kubernetes/main/apps/system-upgrade/system-upgrade-controller/ks.yaml
@@ -45,6 +45,6 @@ spec:
   postBuild:
     substitute:
       # renovate: depName=ghcr.io/siderolabs/installer datasource=docker
-      TALOS_VERSION: v1.8.4
+      TALOS_VERSION: v1.9.1
       # renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
-      KUBERNETES_VERSION: v1.31.4
+      KUBERNETES_VERSION: v1.32.0
diff --git a/kubernetes/main/talos/talconfig.yaml b/kubernetes/main/talos/talconfig.yaml
index c5e5a1900..112536dfa 100644
--- a/kubernetes/main/talos/talconfig.yaml
+++ b/kubernetes/main/talos/talconfig.yaml
@@ -5,7 +5,7 @@ clusterName: &clusterName main
 endpoint: https://main.k8s.home.econline.nl:6443
 
 # renovate: depName=ghcr.io/siderolabs/installer datasource=docker
-talosVersion: v1.8.4
+talosVersion: v1.9.1
 # renovate: depName=ghcr.io/siderolabs/kubelet datasource=docker
 kubernetesVersion: v1.32.0