diff --git a/.github/workflows/publish-bundle.yaml b/.github/workflows/publish-bundle.yaml
index 8974024f..9e7bd68d 100644
--- a/.github/workflows/publish-bundle.yaml
+++ b/.github/workflows/publish-bundle.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         with:
           token: ${{ secrets.PAT }}
           repository: ${{ github.repository }}
diff --git a/.github/workflows/tag-and-release.yaml b/.github/workflows/tag-and-release.yaml
index 23ea78b3..79aa7889 100644
--- a/.github/workflows/tag-and-release.yaml
+++ b/.github/workflows/tag-and-release.yaml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - name: Create Release Tag
         id: tag
-        uses: google-github-actions/release-please-action@a37ac6e4f6449ce8b3f7607e4d97d0146028dc0b # v4
+        uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4
         with:
           command: manifest # use configs in release-please-config.json
       - id: release-flag
diff --git a/bundles/uds-core-swf/uds-bundle.yaml b/bundles/uds-core-swf/uds-bundle.yaml
index f9fa65f8..f67737c1 100644
--- a/bundles/uds-core-swf/uds-bundle.yaml
+++ b/bundles/uds-core-swf/uds-bundle.yaml
@@ -37,7 +37,7 @@ packages:
   # MetalLB
   - name: metallb
     repository: ghcr.io/defenseunicorns/packages/metallb
-    ref: 0.0.5-amd64
+    ref: 0.1.0-amd64
 
   - name: core
     repository: ghcr.io/defenseunicorns/packages/uds/core
@@ -66,7 +66,7 @@ packages:
                     - mountPath: /target
                       name: plugins
                 - name: velero-plugin-for-csi
-                  image: registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-csi:v0.7.0
+                  image: registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-csi:v0.7.1
                   imagePullPolicy: IfNotPresent
                   volumeMounts:
                     - mountPath: /target
@@ -393,7 +393,7 @@ packages:
 
   # - name: confluence
   #   repository: ghcr.io/defenseunicorns/packages/uds/confluence
-  #   ref: 1.18.0-uds.0-registry1
+  #   ref: 1.20.0-uds.0-registry1
   #   overrides:
   #     confluence:
   #       confluence:
@@ -413,7 +413,7 @@ packages:
   # # Mattermost
   # - name: mattermost
   #   repository: ghcr.io/defenseunicorns/packages/uds/mattermost
-  #   ref: 9.7.2-uds.0-registry1
+  #   ref: 9.8.0-uds.0-registry1
   #   overrides:
   #     mattermost:
   #       mattermost-enterprise-edition:
diff --git a/packages/init/zarf.yaml b/packages/init/zarf.yaml
index d5f26f91..24a0770e 100644
--- a/packages/init/zarf.yaml
+++ b/packages/init/zarf.yaml
@@ -63,15 +63,15 @@ components:
     required: true
     description: Push nutanix images to the zarf registry
     images:
-      - registry.k8s.io/sig-storage/snapshot-controller:v6.3.2
-      - registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.3.2
-      - quay.io/karbon/ntnx-csi:v2.6.6
-      - registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.1
-      - registry.k8s.io/sig-storage/csi-provisioner:v3.6.2
-      - registry.k8s.io/sig-storage/csi-snapshotter:v6.3.2
-      - registry.k8s.io/sig-storage/csi-resizer:v1.9.2
-      - registry.k8s.io/sig-storage/livenessprobe:v2.11.0
-      - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-csi:v0.7.0
+      - registry.k8s.io/sig-storage/snapshot-controller:v7.0.2
+      - registry.k8s.io/sig-storage/snapshot-validation-webhook:v7.0.2
+      - quay.io/karbon/ntnx-csi:v2.6.8
+      - registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1
+      - registry.k8s.io/sig-storage/csi-provisioner:v4.0.1
+      - registry.k8s.io/sig-storage/csi-snapshotter:v7.0.2
+      - registry.k8s.io/sig-storage/csi-resizer:v1.10.1
+      - registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+      - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-csi:v0.7.1
       - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-aws:v1.9.2
 
   - name: namespaces
@@ -125,15 +125,15 @@ components:
     required: true
     description: Push nutanix csi images to the zarf registry
     images:
-      - registry.k8s.io/sig-storage/snapshot-controller:v6.3.2
-      - registry.k8s.io/sig-storage/snapshot-validation-webhook:v6.3.2
-      - quay.io/karbon/ntnx-csi:v2.6.6
-      - registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.1
-      - registry.k8s.io/sig-storage/csi-provisioner:v3.6.2
-      - registry.k8s.io/sig-storage/csi-snapshotter:v6.3.2
-      - registry.k8s.io/sig-storage/csi-resizer:v1.9.2
-      - registry.k8s.io/sig-storage/livenessprobe:v2.11.0
-      - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-csi:v0.7.0
+      - registry.k8s.io/sig-storage/snapshot-controller:v7.0.2
+      - registry.k8s.io/sig-storage/snapshot-validation-webhook:v7.0.2
+      - quay.io/karbon/ntnx-csi:v2.6.8
+      - registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1
+      - registry.k8s.io/sig-storage/csi-provisioner:v4.0.1
+      - registry.k8s.io/sig-storage/csi-snapshotter:v7.0.2
+      - registry.k8s.io/sig-storage/csi-resizer:v1.10.1
+      - registry.k8s.io/sig-storage/livenessprobe:v2.12.0
+      - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-csi:v0.7.1
       - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-aws:v1.9.2
       - "###ZARF_PKG_TMPL_REGISTRY_IMAGE_DOMAIN######ZARF_PKG_TMPL_REGISTRY_IMAGE###:###ZARF_PKG_TMPL_REGISTRY_IMAGE_TAG###"