diff --git a/argocd/manifests/authentik/deployment-server.yaml b/argocd/manifests/authentik/deployment-server.yaml
index 0a6c514..b13ba84 100644
--- a/argocd/manifests/authentik/deployment-server.yaml
+++ b/argocd/manifests/authentik/deployment-server.yaml
@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: server
-          image: registry.ops.eblu.me/blumeops/authentik:v1.1.2-nix
+          image: registry.ops.eblu.me/blumeops/authentik:v2025.10.1-b8bc0bf-nix
           args: ["server"]
           ports:
             - name: http
diff --git a/argocd/manifests/authentik/deployment-worker.yaml b/argocd/manifests/authentik/deployment-worker.yaml
index d4d9083..cf4a6e2 100644
--- a/argocd/manifests/authentik/deployment-worker.yaml
+++ b/argocd/manifests/authentik/deployment-worker.yaml
@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: worker
-          image: registry.ops.eblu.me/blumeops/authentik:v1.1.2-nix
+          image: registry.ops.eblu.me/blumeops/authentik:v2025.10.1-b8bc0bf-nix
           args: ["worker"]
           env:
             - name: AUTHENTIK_SECRET_KEY
diff --git a/argocd/manifests/cv/deployment.yaml b/argocd/manifests/cv/deployment.yaml
index 8df0f3a..656e932 100644
--- a/argocd/manifests/cv/deployment.yaml
+++ b/argocd/manifests/cv/deployment.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: cv
-          image: registry.ops.eblu.me/blumeops/cv:v1.0.0
+          image: registry.ops.eblu.me/blumeops/cv:v1.0.3-ffa8727
           ports:
             - containerPort: 80
               name: http
diff --git a/argocd/manifests/devpi/statefulset.yaml b/argocd/manifests/devpi/statefulset.yaml
index 14cdf7e..23ff8a5 100644
--- a/argocd/manifests/devpi/statefulset.yaml
+++ b/argocd/manifests/devpi/statefulset.yaml
@@ -18,7 +18,7 @@ spec:
         fsGroup: 1000
       containers:
         - name: devpi
-          image: registry.ops.eblu.me/blumeops/devpi:v1.0.0
+          image: registry.ops.eblu.me/blumeops/devpi:v6.19.1-ffa8727
           env:
             - name: DEVPI_ROOT_PASSWORD
               valueFrom:
diff --git a/argocd/manifests/docs/deployment.yaml b/argocd/manifests/docs/deployment.yaml
index 8b20417..089ef78 100644
--- a/argocd/manifests/docs/deployment.yaml
+++ b/argocd/manifests/docs/deployment.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: docs
-          image: registry.ops.eblu.me/blumeops/quartz:v1.0.0
+          image: registry.ops.eblu.me/blumeops/quartz:v1.28.2-ffa8727
           ports:
             - containerPort: 80
               name: http
diff --git a/argocd/manifests/forgejo-runner/deployment.yaml b/argocd/manifests/forgejo-runner/deployment.yaml
index decbd7a..c5843be 100644
--- a/argocd/manifests/forgejo-runner/deployment.yaml
+++ b/argocd/manifests/forgejo-runner/deployment.yaml
@@ -29,7 +29,7 @@ spec:
             - name: RUNNER_NAME
               value: "k8s-runner"
             - name: RUNNER_LABELS
-              value: "k8s:docker://registry.ops.eblu.me/blumeops/forgejo-runner:v3.2.0"
+              value: "k8s:docker://registry.ops.eblu.me/blumeops/forgejo-runner:v0.19.11-96a2d42"
           command:
             - /bin/sh
             - -c
diff --git a/argocd/manifests/homepage/deployment.yaml b/argocd/manifests/homepage/deployment.yaml
index bc04326..426ade7 100644
--- a/argocd/manifests/homepage/deployment.yaml
+++ b/argocd/manifests/homepage/deployment.yaml
@@ -20,7 +20,7 @@ spec:
         fsGroup: 1000
       containers:
         - name: homepage
-          image: registry.ops.eblu.me/blumeops/homepage:v1.0.0
+          image: registry.ops.eblu.me/blumeops/homepage:v1.10.1-ffa8727
           securityContext:
             runAsNonRoot: true
             allowPrivilegeEscalation: false
diff --git a/argocd/manifests/kiwix/cronjob-zim-watcher.yaml b/argocd/manifests/kiwix/cronjob-zim-watcher.yaml
index 50d6883..37aea4e 100644
--- a/argocd/manifests/kiwix/cronjob-zim-watcher.yaml
+++ b/argocd/manifests/kiwix/cronjob-zim-watcher.yaml
@@ -15,7 +15,7 @@ spec:
           serviceAccountName: zim-watcher
           containers:
             - name: watcher
-              image: registry.ops.eblu.me/blumeops/kubectl:v1.1.0
+              image: registry.ops.eblu.me/blumeops/kubectl:v1.34.4-ffa8727
               command: ["/bin/bash", "-c"]
               args:
                 - |
diff --git a/argocd/manifests/kiwix/deployment.yaml b/argocd/manifests/kiwix/deployment.yaml
index 8dbb4d4..0b51914 100644
--- a/argocd/manifests/kiwix/deployment.yaml
+++ b/argocd/manifests/kiwix/deployment.yaml
@@ -20,7 +20,7 @@ spec:
       containers:
         # Main kiwix-serve container
         - name: kiwix-serve
-          image: registry.ops.eblu.me/blumeops/kiwix-serve:v1.1.0
+          image: registry.ops.eblu.me/blumeops/kiwix-serve:v3.8.1-ffa8727
           args:
             - "/bin/sh"
             - "-c"
@@ -53,7 +53,7 @@ spec:
 
         # Sidecar: Syncs declarative ZIM torrents to transmission
         - name: torrent-sync
-          image: registry.ops.eblu.me/blumeops/transmission:v1.1.0
+          image: registry.ops.eblu.me/blumeops/transmission:v4.0.6-r4-ffa8727
           command: ["/bin/bash", "-c"]
           args:
             - |
diff --git a/argocd/manifests/miniflux/deployment.yaml b/argocd/manifests/miniflux/deployment.yaml
index ed64246..7b406ac 100644
--- a/argocd/manifests/miniflux/deployment.yaml
+++ b/argocd/manifests/miniflux/deployment.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: miniflux
-          image: registry.ops.eblu.me/blumeops/miniflux:v1.1.0
+          image: registry.ops.eblu.me/blumeops/miniflux:v2.2.17-ffa8727
           ports:
             - containerPort: 8080
           env:
diff --git a/argocd/manifests/navidrome/deployment.yaml b/argocd/manifests/navidrome/deployment.yaml
index 09ee82c..70df0d8 100644
--- a/argocd/manifests/navidrome/deployment.yaml
+++ b/argocd/manifests/navidrome/deployment.yaml
@@ -20,7 +20,7 @@ spec:
         fsGroup: 1000
       containers:
         - name: navidrome
-          image: registry.ops.eblu.me/blumeops/navidrome:v1.0.3
+          image: registry.ops.eblu.me/blumeops/navidrome:v0.60.3-ffa8727
           securityContext:
             runAsNonRoot: true
             allowPrivilegeEscalation: false
diff --git a/argocd/manifests/ntfy/deployment.yaml b/argocd/manifests/ntfy/deployment.yaml
index 8515950..d471394 100644
--- a/argocd/manifests/ntfy/deployment.yaml
+++ b/argocd/manifests/ntfy/deployment.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: ntfy
-          image: registry.ops.eblu.me/blumeops/ntfy:v1.1.0-nix
+          image: registry.ops.eblu.me/blumeops/ntfy:v2.17.0-ffa8727-nix
           args: ["serve", "--config", "/etc/ntfy/server.yml"]
           ports:
             - containerPort: 80
diff --git a/argocd/manifests/teslamate/deployment.yaml b/argocd/manifests/teslamate/deployment.yaml
index 116541d..b6757c4 100644
--- a/argocd/manifests/teslamate/deployment.yaml
+++ b/argocd/manifests/teslamate/deployment.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: teslamate
-          image: registry.ops.eblu.me/blumeops/teslamate:v1.0.1
+          image: registry.ops.eblu.me/blumeops/teslamate:v2.2.0-ffa8727
           ports:
             - containerPort: 4000
           env:
diff --git a/argocd/manifests/torrent/deployment.yaml b/argocd/manifests/torrent/deployment.yaml
index 9a2bc1d..90ac128 100644
--- a/argocd/manifests/torrent/deployment.yaml
+++ b/argocd/manifests/torrent/deployment.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: transmission
-          image: registry.ops.eblu.me/blumeops/transmission:v1.1.0
+          image: registry.ops.eblu.me/blumeops/transmission:v4.0.6-r4-ffa8727
           env:
             - name: PUID
               value: "1000"