diff --git a/docs/changelog.d/+zot-v2.1.16.infra.md b/docs/changelog.d/+zot-v2.1.16.infra.md
new file mode 100644
index 0000000..f007164
--- /dev/null
+++ b/docs/changelog.d/+zot-v2.1.16.infra.md
@@ -0,0 +1 @@
+Upgraded zot on indri from v2.1.15 to v2.1.16 (security fixes: TLS verification on metrics client, CORS Allow-Credentials suppression on wildcard origins, manifest/API-key body size limits).
diff --git a/service-versions.yaml b/service-versions.yaml
index 76c0655..792f4eb 100644
--- a/service-versions.yaml
+++ b/service-versions.yaml
@@ -357,8 +357,8 @@ services:
 
   - name: zot
     type: ansible
-    last-reviewed: 2026-03-14
-    current-version: "v2.1.15"
+    last-reviewed: 2026-05-04
+    current-version: "v2.1.16"
     upstream-source: https://github.com/project-zot/zot/releases
     notes: Built from source on indri