diff --git a/.github/actions/save-logs/action.yaml b/.github/actions/save-logs/action.yaml
index fbb3bfc..963bb79 100644
--- a/.github/actions/save-logs/action.yaml
+++ b/.github/actions/save-logs/action.yaml
@@ -10,7 +10,7 @@ runs:
         sudo chown $USER /tmp/uds-*.log || echo ""
       shell: bash
 
-    - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+    - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
       with:
         name: debug-log
         path: |
diff --git a/.github/actions/setup/action.yaml b/.github/actions/setup/action.yaml
index 65eb031..6c743aa 100644
--- a/.github/actions/setup/action.yaml
+++ b/.github/actions/setup/action.yaml
@@ -20,12 +20,12 @@ runs:
       uses: defenseunicorns/setup-zarf@main
       with:
         # renovate: datasource=github-tags depName=defenseunicorns/zarf versioning=semver
-        version: v0.32.1
+        version: v0.32.3
         download-init-package: ${{ inputs.download-init-package }}
 
     - name: Use Node.js latest
       if: ${{ inputs.install-node == 'true' }}
-      uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
       with:
         node-version: 20
 
diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml
index 2449503..8a2c4a5 100644
--- a/.github/workflows/commitlint.yaml
+++ b/.github/workflows/commitlint.yaml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Node.js
-        uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
 
       - name: Install commitlint
         run: npm install --save-dev @commitlint/{config-conventional,cli}
diff --git a/.github/workflows/tag-and-release.yaml b/.github/workflows/tag-and-release.yaml
index b162edb..f6c1e52 100644
--- a/.github/workflows/tag-and-release.yaml
+++ b/.github/workflows/tag-and-release.yaml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Create release tag
         id: tag
-        uses: google-github-actions/release-please-action@v4.0.1
+        uses: google-github-actions/release-please-action@v4.0.2
       - id: release-flag
         run: echo "release_created=${{ steps.tag.outputs.release_created || false }}" >> $GITHUB_OUTPUT
 
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index a94ea67..a1106d1 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
+    rev: v4.5.0
     hooks:
       - id: check-added-large-files
         args: ["--maxkb=1024"]
@@ -31,7 +31,7 @@ repos:
     hooks:
       - id: fix-smartquotes
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.24.1
+    rev: 0.28.0
     hooks:
       - id: check-jsonschema
         name: "Validate Zarf Configs Against Schema"
@@ -41,14 +41,14 @@ repos:
           [
             "--schemafile",
             # renovate: repo-file depName=defenseunicorns/zarf versioning=semver
-            "https://raw.githubusercontent.com/defenseunicorns/zarf/v0.32.2/zarf.schema.json",
+            "https://raw.githubusercontent.com/defenseunicorns/zarf/v0.32.3/zarf.schema.json",
             "--no-cache"
           ]
   - repo: https://github.com/golangci/golangci-lint
-    rev: v1.54.1
+    rev: v1.56.1
     hooks:
       - id: golangci-lint
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 36.43.1
+    rev: 37.181.3
     hooks:
       - id: renovate-config-validator
diff --git a/test/postgres/zarf.yaml b/test/postgres/zarf.yaml
index 93564c9..7e1d07a 100644
--- a/test/postgres/zarf.yaml
+++ b/test/postgres/zarf.yaml
@@ -20,12 +20,12 @@ components:
       # renovate: datasource=helm
       - name: postgresql
         url: https://charts.bitnami.com/bitnami
-        version: 12.6.6
+        version: 14.0.4
         namespace: artifactory-db
         valuesFiles:
           - "values.yaml"
     images:
-      - docker.io/bitnami/postgresql:15.3.0-debian-11-r24
+      - docker.io/bitnami/postgresql:16.2.0
     actions:
       onDeploy:
         after:
diff --git a/values/upstream-values.yaml b/values/upstream-values.yaml
index 9d970ad..953dd65 100644
--- a/values/upstream-values.yaml
+++ b/values/upstream-values.yaml
@@ -7,7 +7,7 @@ artifactory:
   image:
     registry: registry1.dso.mil
     repository: ironbank/jfrog/artifactory/artifactory
-    tag: 7.71.5
+    tag: 7.77.3
   license:
     secret: ###ZARF_VAR_LICENSE_SECRET_NAME###
     dataKey: ###ZARF_VAR_LICENSE_SECRET_KEY###
diff --git a/zarf.yaml b/zarf.yaml
index c344ac3..aba07cb 100644
--- a/zarf.yaml
+++ b/zarf.yaml
@@ -34,9 +34,9 @@ components:
         version: 0.1.0
         localPath: chart
     images:
-      - registry1.dso.mil/ironbank/jfrog/artifactory/artifactory:7.63.9
-      - registry1.dso.mil/ironbank/jfrog/jfrog-xray/router:7.61.1
-      - registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal:9.1.0
+      - registry1.dso.mil/ironbank/jfrog/artifactory/artifactory:7.77.3
+      - registry1.dso.mil/ironbank/jfrog/jfrog-xray/router:7.87.0
+      - registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal:9.3
 
   - name: artifactory
     required: true
@@ -47,7 +47,7 @@ components:
       # renovate: datasource=helm
       - name: artifactory
         url: https://charts.jfrog.io
-        version: 107.71.9
+        version: 107.77.5
         namespace: artifactory
         repoName: artifactory
         releaseName: artifactory
@@ -58,6 +58,6 @@ components:
         version: 0.1.0
         localPath: chart
     images:
-      - registry1.dso.mil/ironbank/jfrog/artifactory/artifactory:7.71.5
+      - registry1.dso.mil/ironbank/jfrog/artifactory/artifactory:7.77.3
       - registry1.dso.mil/ironbank/jfrog/jfrog-xray/router:7.87.0
       - registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal:9.3