diff --git a/argocd/manifests/mosquitto/deployment.yaml b/argocd/manifests/mosquitto/deployment.yaml
index 34dbc92..5836e60 100644
--- a/argocd/manifests/mosquitto/deployment.yaml
+++ b/argocd/manifests/mosquitto/deployment.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: mosquitto
-          image: eclipse-mosquitto:2
+          image: eclipse-mosquitto:2.1.2
           ports:
             - containerPort: 1883
               name: mqtt
diff --git a/argocd/manifests/tailscale-operator/operator.yaml b/argocd/manifests/tailscale-operator/operator.yaml
index 203b8d6..ad28d40 100644
--- a/argocd/manifests/tailscale-operator/operator.yaml
+++ b/argocd/manifests/tailscale-operator/operator.yaml
@@ -5362,7 +5362,7 @@ spec:
                       valueFrom:
                         fieldRef:
                             fieldPath: metadata.uid
-                  image: docker.io/tailscale/k8s-operator:v1.94.1
+                  image: docker.io/tailscale/k8s-operator:v1.94.2
                   imagePullPolicy: Always
                   name: operator
                   volumeMounts:
diff --git a/argocd/manifests/tailscale-operator/proxyclass.yaml b/argocd/manifests/tailscale-operator/proxyclass.yaml
index 2591b39..f5d99ef 100644
--- a/argocd/manifests/tailscale-operator/proxyclass.yaml
+++ b/argocd/manifests/tailscale-operator/proxyclass.yaml
@@ -18,6 +18,6 @@ spec:
   statefulSet:
     pod:
       tailscaleContainer:
-        image: docker.io/tailscale/tailscale:v1.94.1
+        image: docker.io/tailscale/tailscale:v1.94.2
       tailscaleInitContainer:
-        image: docker.io/tailscale/tailscale:v1.94.1
+        image: docker.io/tailscale/tailscale:v1.94.2
diff --git a/docs/changelog.d/service-review-mosquitto-tailscale-operator.infra.md b/docs/changelog.d/service-review-mosquitto-tailscale-operator.infra.md
new file mode 100644
index 0000000..42cce6e
--- /dev/null
+++ b/docs/changelog.d/service-review-mosquitto-tailscale-operator.infra.md
@@ -0,0 +1 @@
+First service version review: pin mosquitto to 2.1.2, bump tailscale-operator to v1.94.2, record 7 reviewed services
diff --git a/service-versions.yaml b/service-versions.yaml
index 981365c..46c24aa 100644
--- a/service-versions.yaml
+++ b/service-versions.yaml
@@ -16,26 +16,26 @@ services:
 
   - name: prometheus
     type: argocd
-    last-reviewed: null
-    current-version: null
+    last-reviewed: 2026-02-16
+    current-version: "v3.9.1"
     upstream-source: https://github.com/prometheus/prometheus/releases
 
   - name: loki
     type: argocd
-    last-reviewed: null
-    current-version: null
+    last-reviewed: 2026-02-16
+    current-version: "3.6.5"
     upstream-source: https://github.com/grafana/loki/releases
 
   - name: kube-state-metrics
     type: argocd
-    last-reviewed: null
-    current-version: null
+    last-reviewed: 2026-02-16
+    current-version: "v2.18.0"
     upstream-source: https://github.com/kubernetes/kube-state-metrics/releases
 
   - name: mosquitto
     type: argocd
-    last-reviewed: null
-    current-version: null
+    last-reviewed: 2026-02-16
+    current-version: "2.1.2"
     upstream-source: https://github.com/eclipse/mosquitto/releases
 
   - name: ntfy
@@ -53,8 +53,8 @@ services:
 
   - name: frigate
     type: argocd
-    last-reviewed: null
-    current-version: null
+    last-reviewed: 2026-02-16
+    current-version: "0.16.4"
     upstream-source: https://github.com/blakeblackshear/frigate/releases
 
   - name: frigate-notify
@@ -65,14 +65,14 @@ services:
 
   - name: alloy-k8s
     type: argocd
-    last-reviewed: null
-    current-version: null
+    last-reviewed: 2026-02-16
+    current-version: "v1.13.1"
     upstream-source: https://github.com/grafana/alloy/releases
 
   - name: tailscale-operator
     type: argocd
-    last-reviewed: null
-    current-version: null
+    last-reviewed: 2026-02-16
+    current-version: "v1.94.2"
     upstream-source: https://github.com/tailscale/tailscale/releases
 
   # --- ArgoCD Helm charts ---