diff --git a/.archive/docker/toolchain/Dockerfile b/.archive/docker/toolchain/Dockerfile
index 7a85cc49..d6a70efb 100644
--- a/.archive/docker/toolchain/Dockerfile
+++ b/.archive/docker/toolchain/Dockerfile
@@ -3,7 +3,7 @@ ARG BUILDKIT_SBOM_SCAN_CONTEXT=true
 ARG BUILDKIT_SBOM_SCAN_STAGE=upgraded-alpine,release-binary-fetcher,final
 
 # Alpine image with update and upgrade performed
-FROM alpine:3.18.3 as upgraded-alpine
+FROM alpine:3.18.4 as upgraded-alpine
 RUN set -ex \
     && apk update \
     && apk upgrade
diff --git a/.archive/docker/toolchain/versions.sh b/.archive/docker/toolchain/versions.sh
index 7998f40d..5fe954fd 100755
--- a/.archive/docker/toolchain/versions.sh
+++ b/.archive/docker/toolchain/versions.sh
@@ -2,13 +2,13 @@
 AGE_VERSION=v1.1.1
 
 # renovate: datasource=github-releases depName=cilium/cilium-cli
-CILIUM_CLI_VERSION=v0.15.7
+CILIUM_CLI_VERSION=v0.15.11
 
 # renovate: datasource=github-releases depName=cloudflare/cfssl
 CFSSL_TOOLKIT_VERSION=v1.6.4
 
 # renovate: datasource=github-releases depName=kubernetes-sigs/cluster-api
-CLUSTERCTL_VERSION=v1.5.1
+CLUSTERCTL_VERSION=v1.5.2
 
 # renovate: datasource=github-releases depName=kubernetes-sigs/cri-tools
 CRICTL_VERSION=v1.28.0
@@ -17,40 +17,40 @@ CRICTL_VERSION=v1.28.0
 CRITEST_VERSION=v1.28.0
 
 # renovate: datasource=github-releases depName=fluxcd/flux2
-FLUX_VERSION=v2.1.0
+FLUX_VERSION=v2.1.2
 
 # renovate: datasource=github-releases depName=cli/cli
-GITHUB_CLI_VERSION=v2.34.0
+GITHUB_CLI_VERSION=v2.37.0
 
 # renovate: datasource=github-releases depName=google/go-containerregistry
 GO_CONTAINER_REGISTRY_VERSION=v0.16.1
 
 # renovate: datasource=github-releases depName=helm/helm
-HELM_VERSION=v3.12.3
+HELM_VERSION=v3.13.1
 
 # renovate: datasource=github-releases depName=cilium/hubble
-HUBBLE_VERSION=v0.12.0
+HUBBLE_VERSION=v0.12.2
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
-KUBEADM_VERSION=v1.28.1
+KUBEADM_VERSION=v1.28.3
 
 # renovate: datasource=github-releases depName=kubernetes/kubernetes
-KUBECTL_VERSION=v1.28.1
+KUBECTL_VERSION=v1.28.3
 
 # renovate: datasource=github-releases depName=mozilla/sops
-SOPS_VERSION=v3.7.3
+SOPS_VERSION=v3.8.1
 
 # renovate: datasource=github-releases depName=siderolabs/talos
-TALOSCTL_VERSION=v1.5.2
+TALOSCTL_VERSION=v1.5.4
 
 # renovate: datasource=github-releases depName=go-task/task
-TASK_VERSION=v3.29.1
+TASK_VERSION=v3.31.0
 
 # renovate: datasource=github-releases depName=hashicorp/terraform
-TERRAFORM_VERSION=v1.5.7
+TERRAFORM_VERSION=v1.6.2
 
 # renovate: datasource=github-releases depName=cilium/tetragon
 TETRAGON_VERSION=v0.11.0
 
 # renovate: datasource=github-releases depName=mikefarah/yq
-YQ_VERSION=v4.35.1
+YQ_VERSION=v4.35.2
diff --git a/docker/local-registry/docker-compose.yaml b/docker/local-registry/docker-compose.yaml
index 3ad4d66d..d7b45804 100644
--- a/docker/local-registry/docker-compose.yaml
+++ b/docker/local-registry/docker-compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
   local-registry:
-    image: registry:2.8.2
+    image: registry:2.8.3
     ports:
       - 5010:5000
     restart: unless-stopped
diff --git a/docker/pull-through-caches/docker-compose.yaml b/docker/pull-through-caches/docker-compose.yaml
index 0f311c41..cb9307ef 100644
--- a/docker/pull-through-caches/docker-compose.yaml
+++ b/docker/pull-through-caches/docker-compose.yaml
@@ -4,7 +4,7 @@ services:
   pull-through-cache-gcr.io:
     environment:
       - REGISTRY_PROXY_REMOTEURL=https://gcr.io
-    image: registry:2.8.2
+    image: registry:2.8.3
     ports:
       - 5001:5000
     restart: unless-stopped
@@ -12,7 +12,7 @@ services:
   pull-through-cache-ghcr.io:
     environment:
       - REGISTRY_PROXY_REMOTEURL=https://ghcr.io
-    image: registry:2.8.2
+    image: registry:2.8.3
     ports:
       - 5000:5000
     restart: unless-stopped
@@ -20,7 +20,7 @@ services:
   pull-through-cache-registry-1.docker.io:
     environment:
       - REGISTRY_PROXY_REMOTEURL=https://registry-1.docker.io
-    image: registry:2.8.2
+    image: registry:2.8.3
     ports:
       - 5003:5000
     restart: unless-stopped
@@ -28,7 +28,7 @@ services:
   pull-through-cache-registry.k8s.io:
     environment:
       - REGISTRY_PROXY_REMOTEURL=https://registry.k8s.io
-    image: registry:2.8.2
+    image: registry:2.8.3
     ports:
       - 5002:5000
     restart: unless-stopped
diff --git a/flux/clusters/staging/flux-system/gotk-components.yaml b/flux/clusters/staging/flux-system/gotk-components.yaml
index 71f811a6..d8d8bed8 100644
--- a/flux/clusters/staging/flux-system/gotk-components.yaml
+++ b/flux/clusters/staging/flux-system/gotk-components.yaml
@@ -1,6 +1,6 @@
 ---
 # This manifest was generated by flux. DO NOT EDIT.
-# Flux Version: v2.1.0
+# Flux Version: v2.1.2
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
 apiVersion: v1
 kind: Namespace
@@ -8,7 +8,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     pod-security.kubernetes.io/warn: restricted
     pod-security.kubernetes.io/warn-version: latest
   name: flux-system
@@ -19,7 +19,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: allow-egress
   namespace: flux-system
 spec:
@@ -39,7 +39,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: allow-scraping
   namespace: flux-system
 spec:
@@ -59,7 +59,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: allow-webhooks
   namespace: flux-system
 spec:
@@ -78,7 +78,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: critical-pods-flux-system
   namespace: flux-system
 spec:
@@ -98,7 +98,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -188,7 +188,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
   name: flux-edit-flux-system
@@ -214,7 +214,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
     rbac.authorization.k8s.io/aggregate-to-view: "true"
@@ -239,7 +239,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: cluster-reconciler-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -259,7 +259,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: crd-controller-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -294,7 +294,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -812,7 +812,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -2013,7 +2013,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -2609,7 +2609,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -3133,7 +3133,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: ocirepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -3496,7 +3496,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: source-controller
   namespace: flux-system
 ---
@@ -3507,7 +3507,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -3528,7 +3528,7 @@ metadata:
     app.kubernetes.io/component: source-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -3563,7 +3563,7 @@ spec:
               fieldPath: metadata.namespace
         - name: TUF_ROOT
           value: /tmp/.sigstore
-        image: ghcr.io/fluxcd/source-controller:v1.1.0
+        image: ghcr.io/fluxcd/source-controller:v1.1.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -3627,7 +3627,7 @@ metadata:
     app.kubernetes.io/component: kustomize-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
   group: kustomize.toolkit.fluxcd.io
@@ -5259,7 +5259,7 @@ metadata:
     app.kubernetes.io/component: kustomize-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: kustomize-controller
   namespace: flux-system
 ---
@@ -5270,7 +5270,7 @@ metadata:
     app.kubernetes.io/component: kustomize-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     control-plane: controller
   name: kustomize-controller
   namespace: flux-system
@@ -5299,7 +5299,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/kustomize-controller:v1.1.0
+        image: ghcr.io/fluxcd/kustomize-controller:v1.1.1
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5356,7 +5356,7 @@ metadata:
     app.kubernetes.io/component: helm-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -6283,7 +6283,7 @@ metadata:
     app.kubernetes.io/component: helm-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: helm-controller
   namespace: flux-system
 ---
@@ -6294,7 +6294,7 @@ metadata:
     app.kubernetes.io/component: helm-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     control-plane: controller
   name: helm-controller
   namespace: flux-system
@@ -6323,7 +6323,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/helm-controller:v0.36.0
+        image: ghcr.io/fluxcd/helm-controller:v0.36.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -6380,7 +6380,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: alerts.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -6817,7 +6817,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: providers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -7228,7 +7228,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: receivers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -7894,7 +7894,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
   name: notification-controller
   namespace: flux-system
 ---
@@ -7905,7 +7905,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -7926,7 +7926,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     control-plane: controller
   name: webhook-receiver
   namespace: flux-system
@@ -7947,7 +7947,7 @@ metadata:
     app.kubernetes.io/component: notification-controller
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.1.0
+    app.kubernetes.io/version: v2.1.2
     control-plane: controller
   name: notification-controller
   namespace: flux-system
diff --git a/flux/infrastructure/base/goldilocks/app/release.yaml b/flux/infrastructure/base/goldilocks/app/release.yaml
index 4df6a8ac..dab438d4 100644
--- a/flux/infrastructure/base/goldilocks/app/release.yaml
+++ b/flux/infrastructure/base/goldilocks/app/release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: goldilocks
-      version: 7.2.0
+      version: 7.3.1
       sourceRef:
         kind: HelmRepository
         name: fairwinds
diff --git a/flux/infrastructure/base/grafana/app/release.yaml b/flux/infrastructure/base/grafana/app/release.yaml
index 574e66d4..6522fa0e 100644
--- a/flux/infrastructure/base/grafana/app/release.yaml
+++ b/flux/infrastructure/base/grafana/app/release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: grafana
-      version: 6.59.4
+      version: 6.61.1
       sourceRef:
         kind: HelmRepository
         name: grafana
diff --git a/flux/infrastructure/base/kubelet-csr-approver/app/release.yaml b/flux/infrastructure/base/kubelet-csr-approver/app/release.yaml
index e352c8a6..90322250 100644
--- a/flux/infrastructure/base/kubelet-csr-approver/app/release.yaml
+++ b/flux/infrastructure/base/kubelet-csr-approver/app/release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: kubelet-csr-approver
-      version: 1.0.4
+      version: 1.0.5
       sourceRef:
         kind: HelmRepository
         name: postfinance
diff --git a/flux/infrastructure/base/piraeus/snapshot-controller/release.yaml b/flux/infrastructure/base/piraeus/snapshot-controller/release.yaml
index 487615e9..c5c6ca4b 100644
--- a/flux/infrastructure/base/piraeus/snapshot-controller/release.yaml
+++ b/flux/infrastructure/base/piraeus/snapshot-controller/release.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: snapshot-controller
-      version: 1.8.3
+      version: 1.9.1
       sourceRef:
         kind: HelmRepository
         name: piraeus
diff --git a/flux/infrastructure/base/piraeus/snapshot-validation-webhook/release.yaml b/flux/infrastructure/base/piraeus/snapshot-validation-webhook/release.yaml
index 999f46d6..acc044c9 100644
--- a/flux/infrastructure/base/piraeus/snapshot-validation-webhook/release.yaml
+++ b/flux/infrastructure/base/piraeus/snapshot-validation-webhook/release.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: snapshot-validation-webhook
-      version: 1.7.4
+      version: 1.8.2
       sourceRef:
         kind: HelmRepository
         name: piraeus
diff --git a/flux/infrastructure/base/weave-gitops/app/release.yaml b/flux/infrastructure/base/weave-gitops/app/release.yaml
index a2e30bb9..acc52c13 100644
--- a/flux/infrastructure/base/weave-gitops/app/release.yaml
+++ b/flux/infrastructure/base/weave-gitops/app/release.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: weave-gitops
-      version: 4.0.29
+      version: 4.0.32
       sourceRef:
         kind: HelmRepository
         name: weave-gitops
diff --git a/terraform/azure/terraform-state/main.tf b/terraform/azure/terraform-state/main.tf
index d026194d..a3403175 100644
--- a/terraform/azure/terraform-state/main.tf
+++ b/terraform/azure/terraform-state/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "~> 3.72.0"
+      version = "~> 3.77.0"
     }
   }
 
diff --git a/terraform/cloudflare/private-domain/.terraform.lock.hcl b/terraform/cloudflare/private-domain/.terraform.lock.hcl
index c6280834..1078fc10 100644
--- a/terraform/cloudflare/private-domain/.terraform.lock.hcl
+++ b/terraform/cloudflare/private-domain/.terraform.lock.hcl
@@ -2,22 +2,22 @@
 # Manual edits may be lost in future updates.
 
 provider "registry.terraform.io/cloudflare/cloudflare" {
-  version     = "4.14.0"
-  constraints = "~> 4.14.0"
+  version     = "4.17.0"
+  constraints = "~> 4.17.0"
   hashes = [
-    "h1:1mY7uof0hQmCorruzyU6c4kGWzlRotZ6SF4M6fqkNR4=",
-    "h1:6byBKKVLh41zwk9GWHp3a9eFjwN+VdfT8Xv45c5B2ck=",
-    "h1:9PJsnBPhKlaJ72RFAIXzuPaWwuSprZ/z2X8RMcgPfw4=",
-    "h1:O69EN67P8NaTATdVMjkJQ4b7x4SCm9qRc/7+vZru19Y=",
-    "h1:Palrdg0Jos5j33Mti2/b6dDub/mg4btHJWkPy7KU7N4=",
-    "h1:TziN+HWO3WxwOY+SrEVthgJzE5d4DN1p09c1My5sgnw=",
-    "h1:Yhe9r8NIBCCjjR2Ex18/WYRPTy8Q1yLnyms/jvS+o3Q=",
-    "h1:c8qOZJd1HO6pigcsCBRTvKFHP/RPJKBpDzZB08C1uCs=",
-    "h1:l0Ws/F7f9Gq2KENyhG8iLfahh1alnROqe6p9ySHYVVQ=",
-    "h1:oPg/fiIXTMveC47oJejspuYe3v2Tn9YaFrHCdhu+BIA=",
-    "h1:tFlJ0NB8H1tNJp4G9fDxWj7To631tY9p/9xb+x8t+fc=",
-    "h1:vEFZmpbqeVNyxe5ebn2i91WI2xbUHw6QrAjKsgUiKlc=",
-    "h1:wWNGbU+aq2UCPMzu7ZfrqjkQ8sFSNmX2mgb/v1c0Eis=",
-    "h1:yywJZB4rKVmPmlh9rGX3LtdYvID20DvxeEfcSyIKbOs=",
+    "h1:+1PHUtYpir3XV2xvo9WhI4+JyDvLgEW7Q86mJVNhl2w=",
+    "h1:/Sgnz53UucZ22NnaHbfeeHp05QhdmEAeU0uDahRfZFA=",
+    "h1:59cgRdOWpvFWUwTBWHoRSXfbyrLQhskBjBFRo/jF8y4=",
+    "h1:BOAaET8Q/rLkUcV550yiejPWfjxgKuYRQdaoUUtdhMA=",
+    "h1:FjnAc9lUP00+vCXAiQPetEQjR8KRN1HdOfEsOnOGfew=",
+    "h1:TOmmgRjCbCRpuRfnHwBiHYhAGeV4RujuPBDj5Sj3Eis=",
+    "h1:XD9KclOQNoRmo7ySAz46OwW1IES36A1KwtZTDrd0oG4=",
+    "h1:kBgUOIxisQm6Ne4vfZdYnHNVH2wCvuh52K00u37G8tg=",
+    "h1:ndWFNAGw7Txmy4bSElam5tjvarlxwOWcQC4vxQCeEbc=",
+    "h1:oiEQGoaapoGdbF7RUkpGIxTQd8qJUeuCimSjvKFYWp8=",
+    "h1:p0oTrAlUT/5VV0EQEU9Yf99S5H9wReFtQxrPChNZYGU=",
+    "h1:uL2572/JKAgDzyVA/XI2ZiljDMuvztSG2Kk+DjgRUL0=",
+    "h1:x/QxOBvb/ZmggiIRMSJVtepar6seEH0JbScUPMjNbmw=",
+    "h1:zLEsRp1jTml/y5grZmcH1vwmYISb44pVU7t6ELL22v4=",
   ]
 }
diff --git a/terraform/cloudflare/private-domain/main.tf b/terraform/cloudflare/private-domain/main.tf
index 44be8a69..d9d1f97b 100644
--- a/terraform/cloudflare/private-domain/main.tf
+++ b/terraform/cloudflare/private-domain/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     cloudflare = {
       source  = "cloudflare/cloudflare"
-      version = "~> 4.14.0"
+      version = "~> 4.17.0"
     }
   }
 
diff --git a/terraform/cloudflare/public-domain/.terraform.lock.hcl b/terraform/cloudflare/public-domain/.terraform.lock.hcl
index c6280834..1078fc10 100644
--- a/terraform/cloudflare/public-domain/.terraform.lock.hcl
+++ b/terraform/cloudflare/public-domain/.terraform.lock.hcl
@@ -2,22 +2,22 @@
 # Manual edits may be lost in future updates.
 
 provider "registry.terraform.io/cloudflare/cloudflare" {
-  version     = "4.14.0"
-  constraints = "~> 4.14.0"
+  version     = "4.17.0"
+  constraints = "~> 4.17.0"
   hashes = [
-    "h1:1mY7uof0hQmCorruzyU6c4kGWzlRotZ6SF4M6fqkNR4=",
-    "h1:6byBKKVLh41zwk9GWHp3a9eFjwN+VdfT8Xv45c5B2ck=",
-    "h1:9PJsnBPhKlaJ72RFAIXzuPaWwuSprZ/z2X8RMcgPfw4=",
-    "h1:O69EN67P8NaTATdVMjkJQ4b7x4SCm9qRc/7+vZru19Y=",
-    "h1:Palrdg0Jos5j33Mti2/b6dDub/mg4btHJWkPy7KU7N4=",
-    "h1:TziN+HWO3WxwOY+SrEVthgJzE5d4DN1p09c1My5sgnw=",
-    "h1:Yhe9r8NIBCCjjR2Ex18/WYRPTy8Q1yLnyms/jvS+o3Q=",
-    "h1:c8qOZJd1HO6pigcsCBRTvKFHP/RPJKBpDzZB08C1uCs=",
-    "h1:l0Ws/F7f9Gq2KENyhG8iLfahh1alnROqe6p9ySHYVVQ=",
-    "h1:oPg/fiIXTMveC47oJejspuYe3v2Tn9YaFrHCdhu+BIA=",
-    "h1:tFlJ0NB8H1tNJp4G9fDxWj7To631tY9p/9xb+x8t+fc=",
-    "h1:vEFZmpbqeVNyxe5ebn2i91WI2xbUHw6QrAjKsgUiKlc=",
-    "h1:wWNGbU+aq2UCPMzu7ZfrqjkQ8sFSNmX2mgb/v1c0Eis=",
-    "h1:yywJZB4rKVmPmlh9rGX3LtdYvID20DvxeEfcSyIKbOs=",
+    "h1:+1PHUtYpir3XV2xvo9WhI4+JyDvLgEW7Q86mJVNhl2w=",
+    "h1:/Sgnz53UucZ22NnaHbfeeHp05QhdmEAeU0uDahRfZFA=",
+    "h1:59cgRdOWpvFWUwTBWHoRSXfbyrLQhskBjBFRo/jF8y4=",
+    "h1:BOAaET8Q/rLkUcV550yiejPWfjxgKuYRQdaoUUtdhMA=",
+    "h1:FjnAc9lUP00+vCXAiQPetEQjR8KRN1HdOfEsOnOGfew=",
+    "h1:TOmmgRjCbCRpuRfnHwBiHYhAGeV4RujuPBDj5Sj3Eis=",
+    "h1:XD9KclOQNoRmo7ySAz46OwW1IES36A1KwtZTDrd0oG4=",
+    "h1:kBgUOIxisQm6Ne4vfZdYnHNVH2wCvuh52K00u37G8tg=",
+    "h1:ndWFNAGw7Txmy4bSElam5tjvarlxwOWcQC4vxQCeEbc=",
+    "h1:oiEQGoaapoGdbF7RUkpGIxTQd8qJUeuCimSjvKFYWp8=",
+    "h1:p0oTrAlUT/5VV0EQEU9Yf99S5H9wReFtQxrPChNZYGU=",
+    "h1:uL2572/JKAgDzyVA/XI2ZiljDMuvztSG2Kk+DjgRUL0=",
+    "h1:x/QxOBvb/ZmggiIRMSJVtepar6seEH0JbScUPMjNbmw=",
+    "h1:zLEsRp1jTml/y5grZmcH1vwmYISb44pVU7t6ELL22v4=",
   ]
 }
diff --git a/terraform/cloudflare/public-domain/main.tf b/terraform/cloudflare/public-domain/main.tf
index d127964c..5c40a740 100644
--- a/terraform/cloudflare/public-domain/main.tf
+++ b/terraform/cloudflare/public-domain/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     cloudflare = {
       source  = "cloudflare/cloudflare"
-      version = "~> 4.14.0"
+      version = "~> 4.17.0"
     }
   }
 
diff --git a/terraform/cloudflare/zero-trust/.terraform.lock.hcl b/terraform/cloudflare/zero-trust/.terraform.lock.hcl
index c6280834..1078fc10 100644
--- a/terraform/cloudflare/zero-trust/.terraform.lock.hcl
+++ b/terraform/cloudflare/zero-trust/.terraform.lock.hcl
@@ -2,22 +2,22 @@
 # Manual edits may be lost in future updates.
 
 provider "registry.terraform.io/cloudflare/cloudflare" {
-  version     = "4.14.0"
-  constraints = "~> 4.14.0"
+  version     = "4.17.0"
+  constraints = "~> 4.17.0"
   hashes = [
-    "h1:1mY7uof0hQmCorruzyU6c4kGWzlRotZ6SF4M6fqkNR4=",
-    "h1:6byBKKVLh41zwk9GWHp3a9eFjwN+VdfT8Xv45c5B2ck=",
-    "h1:9PJsnBPhKlaJ72RFAIXzuPaWwuSprZ/z2X8RMcgPfw4=",
-    "h1:O69EN67P8NaTATdVMjkJQ4b7x4SCm9qRc/7+vZru19Y=",
-    "h1:Palrdg0Jos5j33Mti2/b6dDub/mg4btHJWkPy7KU7N4=",
-    "h1:TziN+HWO3WxwOY+SrEVthgJzE5d4DN1p09c1My5sgnw=",
-    "h1:Yhe9r8NIBCCjjR2Ex18/WYRPTy8Q1yLnyms/jvS+o3Q=",
-    "h1:c8qOZJd1HO6pigcsCBRTvKFHP/RPJKBpDzZB08C1uCs=",
-    "h1:l0Ws/F7f9Gq2KENyhG8iLfahh1alnROqe6p9ySHYVVQ=",
-    "h1:oPg/fiIXTMveC47oJejspuYe3v2Tn9YaFrHCdhu+BIA=",
-    "h1:tFlJ0NB8H1tNJp4G9fDxWj7To631tY9p/9xb+x8t+fc=",
-    "h1:vEFZmpbqeVNyxe5ebn2i91WI2xbUHw6QrAjKsgUiKlc=",
-    "h1:wWNGbU+aq2UCPMzu7ZfrqjkQ8sFSNmX2mgb/v1c0Eis=",
-    "h1:yywJZB4rKVmPmlh9rGX3LtdYvID20DvxeEfcSyIKbOs=",
+    "h1:+1PHUtYpir3XV2xvo9WhI4+JyDvLgEW7Q86mJVNhl2w=",
+    "h1:/Sgnz53UucZ22NnaHbfeeHp05QhdmEAeU0uDahRfZFA=",
+    "h1:59cgRdOWpvFWUwTBWHoRSXfbyrLQhskBjBFRo/jF8y4=",
+    "h1:BOAaET8Q/rLkUcV550yiejPWfjxgKuYRQdaoUUtdhMA=",
+    "h1:FjnAc9lUP00+vCXAiQPetEQjR8KRN1HdOfEsOnOGfew=",
+    "h1:TOmmgRjCbCRpuRfnHwBiHYhAGeV4RujuPBDj5Sj3Eis=",
+    "h1:XD9KclOQNoRmo7ySAz46OwW1IES36A1KwtZTDrd0oG4=",
+    "h1:kBgUOIxisQm6Ne4vfZdYnHNVH2wCvuh52K00u37G8tg=",
+    "h1:ndWFNAGw7Txmy4bSElam5tjvarlxwOWcQC4vxQCeEbc=",
+    "h1:oiEQGoaapoGdbF7RUkpGIxTQd8qJUeuCimSjvKFYWp8=",
+    "h1:p0oTrAlUT/5VV0EQEU9Yf99S5H9wReFtQxrPChNZYGU=",
+    "h1:uL2572/JKAgDzyVA/XI2ZiljDMuvztSG2Kk+DjgRUL0=",
+    "h1:x/QxOBvb/ZmggiIRMSJVtepar6seEH0JbScUPMjNbmw=",
+    "h1:zLEsRp1jTml/y5grZmcH1vwmYISb44pVU7t6ELL22v4=",
   ]
 }
diff --git a/terraform/cloudflare/zero-trust/main.tf b/terraform/cloudflare/zero-trust/main.tf
index 6138f7a2..5b1147ad 100644
--- a/terraform/cloudflare/zero-trust/main.tf
+++ b/terraform/cloudflare/zero-trust/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     cloudflare = {
       source  = "cloudflare/cloudflare"
-      version = "~> 4.14.0"
+      version = "~> 4.17.0"
     }
   }
 }
diff --git a/terraform/oracle/free-account/.terraform.lock.hcl b/terraform/oracle/free-account/.terraform.lock.hcl
index c8446021..bedebe8f 100644
--- a/terraform/oracle/free-account/.terraform.lock.hcl
+++ b/terraform/oracle/free-account/.terraform.lock.hcl
@@ -2,22 +2,22 @@
 # Manual edits may be lost in future updates.
 
 provider "registry.terraform.io/oracle/oci" {
-  version     = "5.12.0"
-  constraints = "5.12.0"
+  version     = "5.17.0"
+  constraints = "5.17.0"
   hashes = [
-    "h1:+9F7HLSo5KshYFUvzOn98SFy2C8caZrJhv2duDA0xJI=",
-    "h1:/2CEtRQWYAsVcbgLuuQ+sCMUiP4TrlQw9g7f/mLQKKs=",
-    "h1:0ULxw2lpchSiK2dk74LZ9qJTkyvK/anPzQvdlXyCb2I=",
-    "h1:37GV6e3uYQNYk7G20fZNty0xx8qi5eB8iKjOWJn1ri8=",
-    "h1:3UgNWWCLvBPMhfHb38caF1Y6JbRjM7dRkjjrzCdXq5s=",
-    "h1:6BzDiqMNvWLwyOjImBbFOqszqzS6mpumgKRdgIFyUsY=",
-    "h1:By7T2PseN3RSsOVTlaBB9Gg27jnkgvlAJQDGs3V4FQ4=",
-    "h1:H+zVQ7XoyooovLgCgGq0txwzoY3e/UrhBepBFSKMPQ8=",
-    "h1:RIcG2EYBc2fyrse1+91DKCwgT4BT5Id5fB/+pwP5pTI=",
-    "h1:TrK0dLsJ1cFln9IrVV79XTuPspvhi9BOrOufPyeY0Zk=",
-    "h1:Zwc/k7FXfBuWI3eTFoRvjKG2VPWx4XAcSvdYQZNGJEo=",
-    "h1:gIDhHHTYWA9BZYz6fXAC6zcZbWESQoN1BjieXTfyNu0=",
-    "h1:n2jemHYRwqCMgDz3m1BPtSIGova+OOLQa+CiMot8Cdw=",
-    "h1:yjBsfwPmi+DDOtBtygDfCsyeHvJLYYc1+rDfEpzy5jQ=",
+    "h1:2dAWD2rD/OTft3Q86JzqW4M7ejQOxGZoj9xwiq0xvCk=",
+    "h1:3awk/aXgcvtd2liC1zR+LNSA7qmC6k0mmsghSOZxvOU=",
+    "h1:8XZz93HnoaQvBxNVf8tEGBOf69pbH3owbcSE8+dq0Qw=",
+    "h1:COnsmL+xVNKxKesHhCBs3Q2p64sawrtk7cTfsmP8qak=",
+    "h1:FS3abfqGZcGqzyKLn4QTPEpJIrjsOaFdFfsneBW6b6U=",
+    "h1:K8LUSSIrHN2vgJp0lQ5CkRnn/xbYqdMadL6S7mz2Hzc=",
+    "h1:LB1rEIa02+Z0ex1Qssnsv5Kasuxm8s7J4o6IYE5b+oo=",
+    "h1:O7naw5Q7JV2BTLSAa8HLa7gxqC1AZ4Ox2Mg5VqU0L9I=",
+    "h1:WgcbfIqVyKxvLZzYz/OtQy+3bqlu4yR4Vl70vwnaBLo=",
+    "h1:dVnQVtBd0kp1oa51eoOr7vLP53ZExkC769z5LyOEs1w=",
+    "h1:h+Rop7XizaIIiae7dduzt123Umwwji/6KbYHSUvNEcM=",
+    "h1:pj38TCIJqnI39DARwnPEx1Sp+r+asiVGL+KGqUjK43I=",
+    "h1:wPjhThduuzsFaYwktrYt8hFeIMEByUi75gGSnRnvewE=",
+    "h1:yHRHpg2/3V6ZTaw+pnA+qjN/6bnP9jiXzkZoahIXCrg=",
   ]
 }
diff --git a/terraform/oracle/free-account/main.tf b/terraform/oracle/free-account/main.tf
index 16f18301..b1335169 100644
--- a/terraform/oracle/free-account/main.tf
+++ b/terraform/oracle/free-account/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     oci = {
       source = "oracle/oci"
-      version = "5.12.0"
+      version = "5.17.0"
     }
   }