diff --git a/.github/workflows/build-main.yml b/.github/workflows/build-main.yml
index bf87d86d2..f393d84c6 100644
--- a/.github/workflows/build-main.yml
+++ b/.github/workflows/build-main.yml
@@ -40,7 +40,7 @@ jobs:
     steps:
       - name: Checkout
         # yamllint disable-line rule:line-length
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 66ca2cf23..ce6de1940 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -52,13 +52,13 @@ jobs:
     steps:
       - name: Checkout
         # yamllint disable-line rule:line-length
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ (github.event.inputs || inputs).version }}
 
       - name: Set up Python
         # yamllint disable-line rule:line-length
-        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           # renovate: datasource=docker depName=python versioning=docker
           python-version: 3.13.0
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 01c83d46a..2888bc7b0 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - name: Checkout
         # yamllint disable-line rule:line-length
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
@@ -34,7 +34,7 @@ jobs:
 
       - name: Install Python
         # yamllint disable-line rule:line-length
-        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           # renovate: datasource=docker depName=python versioning=docker
           python-version: 3.13.0
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 12b13d21f..c391cfcaa 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -21,7 +21,7 @@ jobs:
     steps:
       - name: Checkout
         # yamllint disable-line rule:line-length
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Set platforms
         id: set-platforms
@@ -52,7 +52,7 @@ jobs:
 
       - name: Checkout
         # yamllint disable-line rule:line-length
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Setup just
         # yamllint disable-line rule:line-length
@@ -65,7 +65,7 @@ jobs:
 
       - name: Install Python
         # yamllint disable-line rule:line-length
-        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           # renovate: datasource=docker depName=python versioning=docker
           python-version: 3.13.0
@@ -81,7 +81,7 @@ jobs:
 
       - name: Cache Vagrant boxes
         # yamllint disable-line rule:line-length
-        uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
         with:
           path: ~/.vagrant.d/boxes
           key: "${{ runner.os }}-\
diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml
index 408f429f1..64a6c4a06 100644
--- a/.github/workflows/update-dependencies.yml
+++ b/.github/workflows/update-dependencies.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Checkout
         # yamllint disable-line rule:line-length
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Get token
         id: get-token
diff --git a/ansible/requirements.yml b/ansible/requirements.yml
index 0893eb82b..00057cf39 100644
--- a/ansible/requirements.yml
+++ b/ansible/requirements.yml
@@ -1,7 +1,7 @@
 ---
 collections:
   - name: ansible.posix
-    version: 1.6.1
+    version: 1.6.2
   - name: ansible.utils
     version: 4.1.0
   - name: community.general
diff --git a/ansible/roles/all/vars/main.yml b/ansible/roles/all/vars/main.yml
index a08864b10..04c23492d 100644
--- a/ansible/roles/all/vars/main.yml
+++ b/ansible/roles/all/vars/main.yml
@@ -68,7 +68,7 @@ lazygit_architecture: >-
   {{ architecture_to_lazygit_architecture[ansible_architecture] }}
 
 # renovate: datasource=github-releases depName=jdx/mise
-mise_version: v2024.10.7
+mise_version: v2024.10.10
 architecture_to_mise_architecture:
   x86_64: x64
   armv7l: armv7
diff --git a/ansible/roles/servers/templates/server-nas/docker/apps/home/compose.yml.j2 b/ansible/roles/servers/templates/server-nas/docker/apps/home/compose.yml.j2
index 5616df2dc..ed6292110 100755
--- a/ansible/roles/servers/templates/server-nas/docker/apps/home/compose.yml.j2
+++ b/ansible/roles/servers/templates/server-nas/docker/apps/home/compose.yml.j2
@@ -1,7 +1,7 @@
 ---
 services:
   home-assistant:
-    image: lscr.io/linuxserver/homeassistant:2024.10.3@sha256:b081eabbcbd2068ac0b298b700b1d2195c84940fb82f6fe44396c4222e1d8cf4 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/homeassistant:2024.10.4@sha256:31ac854064c526347238ce386ceda1803b990f6a2bfb685bb8a83f24fb0046c9 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
diff --git a/ansible/roles/servers/templates/server-nas/docker/apps/media/compose.yml.j2 b/ansible/roles/servers/templates/server-nas/docker/apps/media/compose.yml.j2
index 307db3d64..174c93d4a 100755
--- a/ansible/roles/servers/templates/server-nas/docker/apps/media/compose.yml.j2
+++ b/ansible/roles/servers/templates/server-nas/docker/apps/media/compose.yml.j2
@@ -38,7 +38,7 @@ services:
     restart: always
 
   plex:
-    image: lscr.io/linuxserver/plex:1.41.0@sha256:c8e5ab6336b20f89b4106945fa2ee035c0d0e8e9ad13a24b7e14b924b5c68090 # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/plex:1.41.1@sha256:88f1b42fa90799ba491fa0b96046467174f28f18c236c7b39e135c029a30cfcf # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -63,7 +63,7 @@ services:
     restart: always
 
   prowlarr:
-    image: lscr.io/linuxserver/prowlarr:1.24.3@sha256:3001f0ea0341f370e889467aa1825c42fb8decede85b784c7e380b9ccaad1d4e # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/prowlarr:1.25.4@sha256:295528cb3a94c96871b1e90f690668fc267738116be6383ee14f044468f1eed3 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
@@ -145,7 +145,7 @@ services:
     restart: always
 
   sonarr:
-    image: lscr.io/linuxserver/sonarr:4.0.9@sha256:db80ed8022dd15143644752a57db0553e48e23e3da54bdb9833d28ff89206a3c # editorconfig-checker-disable-line
+    image: lscr.io/linuxserver/sonarr:4.0.10@sha256:c0281bd62b9a75f088fa4a09e5f8776431921883766633cb5e5fbd5a74761155 # editorconfig-checker-disable-line
     environment:
       TZ: "{{ timezone }}"
 
diff --git a/ansible/roles/servers/templates/server-nas/docker/apps/monitoring/compose.yml.j2 b/ansible/roles/servers/templates/server-nas/docker/apps/monitoring/compose.yml.j2
index 4078308d1..b5ba23fbe 100644
--- a/ansible/roles/servers/templates/server-nas/docker/apps/monitoring/compose.yml.j2
+++ b/ansible/roles/servers/templates/server-nas/docker/apps/monitoring/compose.yml.j2
@@ -1,7 +1,7 @@
 ---
 services:
   netdata:
-    image: netdata/netdata:v1.47.4@sha256:3d89a4212017abf180286791299ec99004f54af8978d5130248d1faf0bbeec7a # editorconfig-checker-disable-line
+    image: netdata/netdata:v1.47.5@sha256:678b93208cd488f33b6539b56cb3c324e533daf59652f72f06d0e4abafbf6e14 # editorconfig-checker-disable-line
     hostname: "netdata-{{ inventory_hostname }}"
     environment:
       TZ: "{{ timezone }}"
@@ -35,7 +35,7 @@ services:
     restart: always
 
   prometheus:
-    image: prom/prometheus:v2.54.1@sha256:f6639335d34a77d9d9db382b92eeb7fc00934be8eae81dbc03b31cfe90411a94 # editorconfig-checker-disable-line
+    image: prom/prometheus:v2.55.0@sha256:378f4e03703557d1c6419e6caccf922f96e6d88a530f7431d66a4c4f4b1000fe # editorconfig-checker-disable-line
     user: "{{ ansible_admin_user_uid }}:{{ ansible_admin_user_gid }}"
     environment:
       TZ: "{{ timezone }}"
@@ -57,7 +57,7 @@ services:
     restart: always
 
   grafana:
-    image: grafana/grafana-oss:10.4.10@sha256:e9b5417327531e1ea588bd617bb1bc3c724fa4de7fac0d96893a887fe5a478ad # editorconfig-checker-disable-line
+    image: grafana/grafana-oss:10.4.11@sha256:594013a7e4bbc9271def30b8cc89f32b8f979cc2fd152d107bf6c8c340d52117 # editorconfig-checker-disable-line
     user: "{{ ansible_admin_user_uid }}:{{ ansible_admin_user_gid }}"
     environment:
       TZ: "{{ timezone }}"
diff --git a/ansible/roles/servers/templates/server-pi/docker/apps/monitoring/compose.yml.j2 b/ansible/roles/servers/templates/server-pi/docker/apps/monitoring/compose.yml.j2
index 293e95d02..a74234a54 100644
--- a/ansible/roles/servers/templates/server-pi/docker/apps/monitoring/compose.yml.j2
+++ b/ansible/roles/servers/templates/server-pi/docker/apps/monitoring/compose.yml.j2
@@ -3,7 +3,7 @@ name: monitoring
 
 services:
   netdata:
-    image: netdata/netdata:v1.47.4@sha256:3d89a4212017abf180286791299ec99004f54af8978d5130248d1faf0bbeec7a # editorconfig-checker-disable-line
+    image: netdata/netdata:v1.47.5@sha256:678b93208cd488f33b6539b56cb3c324e533daf59652f72f06d0e4abafbf6e14 # editorconfig-checker-disable-line
     hostname: "netdata-{{ inventory_hostname }}"
     environment:
       TZ: "{{ timezone }}"
diff --git a/ansible/roles/workstations/vars/main.yml b/ansible/roles/workstations/vars/main.yml
index 5502dc72d..c55e2673d 100644
--- a/ansible/roles/workstations/vars/main.yml
+++ b/ansible/roles/workstations/vars/main.yml
@@ -1,6 +1,6 @@
 ---
 # renovate: datasource=github-releases depName=cli/cli
-github_cli_version: v2.59.0
+github_cli_version: v2.60.1
 architecture_to_github_cli_architecture:
   x86_64: amd64
   armv7l: armv6