diff --git a/base/cnpg-system/release.yaml b/base/cnpg-system/release.yaml
index 48e3e6a3..7faaa9c4 100644
--- a/base/cnpg-system/release.yaml
+++ b/base/cnpg-system/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: cloudnative-pg
-      version: "0.22.1"
+      version: "0.23.0"
       sourceRef:
         kind: HelmRepository
         name: cnpg
diff --git a/base/external-secrets/release.yaml b/base/external-secrets/release.yaml
index f99f837a..1eb9bfad 100644
--- a/base/external-secrets/release.yaml
+++ b/base/external-secrets/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: external-secrets
-      version: "0.10.7"
+      version: "0.12.1"
       sourceRef:
         kind: HelmRepository
         name: external-secrets
diff --git a/base/traefik/private/release.yaml b/base/traefik/private/release.yaml
index cbd6483b..424ad0bb 100644
--- a/base/traefik/private/release.yaml
+++ b/base/traefik/private/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: traefik
-      version: "33.0.0"
+      version: "33.2.1"
       sourceRef:
         kind: HelmRepository
         name: traefik
diff --git a/base/traefik/public/release.yaml b/base/traefik/public/release.yaml
index 364eaafb..74fbefe0 100644
--- a/base/traefik/public/release.yaml
+++ b/base/traefik/public/release.yaml
@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: traefik
-      version: "33.0.0"
+      version: "33.2.1"
       sourceRef:
         kind: HelmRepository
         name: traefik
diff --git a/metal/group_vars/k3s.yml b/metal/group_vars/k3s.yml
index 2f01bb66..7df78f6b 100644
--- a/metal/group_vars/k3s.yml
+++ b/metal/group_vars/k3s.yml
@@ -2,7 +2,7 @@
 kube_vip_image: ghcr.io/kube-vip/kube-vip:v0.6.0
 kube_vip_ip: "192.168.2.30"  # VIP IP managed by kube-vip
 
-k3s_version: v1.31.2+k3s1
+k3s_version: v1.31.4+k3s1
 #k3s_master_ip: "{{ hostvars[groups['k3s_control_plane'][0]]['ansible_default_ipv4']['address'] }}"
 k3s_master_ip: "{{ kube_vip_ip }}"
 
diff --git a/metal/roles/requirements.yml b/metal/roles/requirements.yml
index 3cf6df71..c1ec7001 100644
--- a/metal/roles/requirements.yml
+++ b/metal/roles/requirements.yml
@@ -8,6 +8,6 @@ roles:
 
 collections:
 - name: devsec.hardening
-  version: 10.1.0
+  version: 10.2.0
 - name: prometheus.prometheus
   version: 0.23.0