diff --git a/.github/workflows/Renovate.yml b/.github/workflows/Renovate.yml
index 2be52c0c..4622001e 100644
--- a/.github/workflows/Renovate.yml
+++ b/.github/workflows/Renovate.yml
@@ -62,7 +62,7 @@ jobs:
           persist-credentials: false
 
       - name: Renovate
-        uses: renovatebot/github-action@v46.3.8
+        uses: renovatebot/github-action@v46.3.9
         with:
           configurationFile: .github/renovate.json5
           token: "${{ steps.app-token.outputs.token }}"
diff --git a/infra/.terraform.lock.hcl b/infra/.terraform.lock.hcl
index 7608c5f1..37f58fb4 100644
--- a/infra/.terraform.lock.hcl
+++ b/infra/.terraform.lock.hcl
@@ -57,40 +57,40 @@ provider "registry.terraform.io/cloudflare/cloudflare" {
 }
 
 provider "registry.terraform.io/hashicorp/aws" {
-  version     = "6.69.0"
-  constraints = "6.69.0"
+  version     = "6.69.1"
+  constraints = "6.69.1"
   hashes = [
-    "h1:4dWi9vWKWDZA88u4TeOv9oo1xkJyS6tx1o0ZrDo0ueg=",
-    "h1:6kNysFNLn74D13lCZ8i5YshUAbCY6N8QS4rUjxd6iZA=",
-    "h1:PTt/gQYZehfw51/30IQgR5LkbwwMXHhUC1Do6jusx8Q=",
-    "h1:U72htN2PdvV1JxM/QClrSdNjcPxirptR2wTR3djoM/g=",
-    "h1:UC4E63G3JKD7P262BEnjeVpfllA+6odzrccwpRyyABE=",
-    "h1:WI1aPGLaRX73RNGz0db7XgS1kQ3/LExu8Lm9MSN1EyM=",
-    "h1:YLTQjmvgaGm4poTMiYBviBvJhR+B/y0rj6SecbVu37c=",
-    "h1:cBX5c4suT/4kfh126UhtKFtJbuIXmnS1QuAwcSGDIOE=",
-    "h1:cwOO9QH9PNf/gI2QsY5wbnE5gxZsLg+jwKwsA7aGBsM=",
-    "h1:gB/TyZq4qkdCnnuVJb3+HBjtW5uOcaxwnEiETEo5h9Y=",
-    "h1:q1qLvNhFtfSGP4feImQzjtiMDHBH7svRflzhpv2ug/c=",
-    "h1:qXrrhlmTiAWFOE/8XyuAQYTDwNCYI6fcH6M1/aveJZg=",
-    "h1:rAIvvIuv4eIEuaj7gt/EdcY7ft+oGw/FNQvyQdAUbGg=",
-    "h1:upGWPdJ4575bavhjqYSO03/kgiW2cqeh3+b/oR9F6uM=",
-    "h1:wEElHdb2IKAuk1V08983d3buRexwJ++jAOUJwcfU2IM=",
-    "zh:022168fc88b7449744d1f72967d661316b2d51e93e0d34739ac712ad8f9d8e82",
-    "zh:06c3c380227d547516c678345f738f545e8b96f90f3bbefae8b04720e5367821",
-    "zh:0771062b8f13ed7c8838bab43620f8c6d3104572ccd1e74fd9ed0fadaefea276",
-    "zh:09ac3b34caf0f5cf88781b9e2addb26ce4400c0b7920852788096483a90edcc3",
-    "zh:2d43e5e2ed65199335f9a3634977672df7b1eb116edff1a409949d7cff6f8be4",
-    "zh:367dedd5a6bcf04ebd178cee6a0b4aa3ebaa7e3779849af9064ac084dffd2bdf",
-    "zh:41f5002431353ef37eebbf669b6137d1a5b46b79ac69350a0e90b336ea314eec",
-    "zh:4fc96a44db4129f76db0c229d03d5372a6a979ec7d9c1663d612ab212d50a887",
-    "zh:7cff68baf94c7f94a0013f172da37eb3c86f942e4a73bd4aedfdaa34d3b6f043",
-    "zh:8159b5eed58351f746c9b25cb596f01247a69b6506b2b9c586adc70a29610f09",
+    "h1:JwemSDdwpiD/nw7exJlatpTTckHvwOoo9L53L+AdoZw=",
+    "h1:P8yFqjGg6/8HbZOY0qtFSKm9v67asCwQEbqQzxYVzoI=",
+    "h1:POg97WB0GrcktmcyE76PQZLeLAVIphDK4olaCf67HAE=",
+    "h1:R7Y9dzrvqE7tD89u6ngwnJshFk8jUoOY3tMJYYF5zcI=",
+    "h1:VCLG26frd0ZRApDQ0l4pqjMCBUi1VPm0/M6c3pnUDgg=",
+    "h1:X1KsDgAPtUfTB4TRkwLcxfkTxgAuvX+HlOFce4Mc1Ds=",
+    "h1:abf9Jox0bkBqO4MjUFdeWyB6l5DPvpvfo+qdk+9WbCU=",
+    "h1:fAaHsk0hQvy8ComS16dV8MjGNDNX42LEyHbuYu/Bsa8=",
+    "h1:fdynuf4Y8WZ95RtQXa4tJpzcRwTnOio8XJiA/F8x7ms=",
+    "h1:id4hVsYQIPuf7/RKmJdiP0/90uwbEbsjg3ZOo8nprBQ=",
+    "h1:j8OcftKysEw0hTrFA5FczfGrXOFGMyorSTEiQihUw4o=",
+    "h1:l4CfdB3t4sniZcsOOhGxrg6sStCpHTseJbOqZLRg4kA=",
+    "h1:ohekeOL8kUQHLLYSlBwX+grRPu9uSDhsHkM6Xz7jgVE=",
+    "h1:s4cK4H0JCMgWlxXSZH/0w8nkg3mcXWy5EkBNN2GMnRE=",
+    "h1:xewHdW9nOeptxXzv2FhYLIsK+wLtMOKGdAksoOWhfpc=",
+    "zh:0ad1319a9fea21dacf084152e236cfd6c150ccc91854ad547c5ab9bc1cddad9a",
+    "zh:113d7ceaca21f0e4b84f45e69369263311512f858a402955f9e9a8a5bb7f3151",
+    "zh:1828581462a8a985361c2f4e9af90b2bd5b7d4603b00146bb23a88c5b7d50888",
+    "zh:28d454d8ac98a88903540bf17bf63d6935dd2e08e572e41152d06db926a5333a",
+    "zh:2a3b594a98fedc396a4eb5f0fd324e641f83db0906d0129c2ddeffd8002fbe86",
+    "zh:32c3103af70480b5c3be86ab00af2f46d3a2a6f269ddadf8c1e53a7a3ea0031b",
+    "zh:3df1dd01ec3a65291f51f26b4d28dcd1bf7b4c73ed0bd3ab1e94e1153ce9b13d",
+    "zh:42699fbd59bf14adb1cf2836c80c209b3ce815d252f4e983afc8defa754b1dfe",
+    "zh:5522afd762a1ee95e6ef0d7ad1f165185303a3039e45e1632a3cd13314b7a1a4",
+    "zh:69f3537ccb012cf24cc11af3cfc3b4be5602b4a3bfbaae2dcab78e41b40f280b",
     "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425",
-    "zh:bd58d54048dded436e822a55febab4d8532d669640d632b91739eaa1c26cb71d",
-    "zh:cdd6b07d778b32bc1be3549141a3d4a5d37461c042aed067550439de5d3914d1",
-    "zh:cf0ca81f270b75fbfa8c828af42aa388f745499c635e8a5cca77349e77bec051",
-    "zh:d6d37acc6cd118761af61f6c3d8e4a444b7e7fcbb109236092e92ea6c2f15d2e",
-    "zh:ecb91260f069f90c09c45223ecf94f60eb45b3de4f47b95a6f4546bf3b279759",
+    "zh:a0c5bf13ba5e17a993aab381603a32d6c9dc2ae8d9f982b6a8c6407b5d7c4a50",
+    "zh:b9f8a73e11e0b82ba51474b6a6eb4ac3080d7f268087162cb10884655878670a",
+    "zh:be1f9728404d67dee586d16b69a445931e5e4dafbf7b996df3a7eed519a557b0",
+    "zh:dc15fb3443312a42deb8b13f92c8d10a701e46eca0155f0709ad763057a85a1d",
+    "zh:e9f6567a13f21123838aaf78d94f76da8c8f7783eff7f7aa781fd1c21d18d86c",
   ]
 }
 
diff --git a/infra/containers/home-assistant/home-assistant.MODULE.bazel b/infra/containers/home-assistant/home-assistant.MODULE.bazel
index 7aadece5..611781a5 100644
--- a/infra/containers/home-assistant/home-assistant.MODULE.bazel
+++ b/infra/containers/home-assistant/home-assistant.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/homeassistant/home-assistant
 oci.pull(
     name = "home-assistant",
-    digest = "sha256:130241f28d01fa80dfa3b44f7d89781c188d8642ecab9024f079f19f9f82baa0",
+    digest = "sha256:33afb0659d786213264c2211f8d91c5fe87461c56eba6a3a546eb05fc71e89f4",
     image = "docker.io/homeassistant/home-assistant",
     platforms = [
         "linux/arm64",
diff --git a/infra/containers/nginx/nginx.MODULE.bazel b/infra/containers/nginx/nginx.MODULE.bazel
index 13e6eae7..fd8032b2 100644
--- a/infra/containers/nginx/nginx.MODULE.bazel
+++ b/infra/containers/nginx/nginx.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/library/nginx
 oci.pull(
     name = "nginx",
-    digest = "sha256:332d0beea97cff8c0d5d27976c0778a4b00345b9d74c2feaaf8efde548314948",
+    digest = "sha256:bc4cad49969aaf95eb4eecec5572846f86e59f1e8332aba36ed64b91aff8b724",
     image = "docker.io/library/nginx",
     platforms = [
         "linux/386",
diff --git a/infra/containers/prowlarr/prowlarr.MODULE.bazel b/infra/containers/prowlarr/prowlarr.MODULE.bazel
index eea96dcc..bf4f581f 100644
--- a/infra/containers/prowlarr/prowlarr.MODULE.bazel
+++ b/infra/containers/prowlarr/prowlarr.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/prowlarr
 oci.pull(
     name = "prowlarr",
-    digest = "sha256:f9151e5bc1025c6d0a630d503210cdcb6bb55a7cc098562609d96a408d838902",
+    digest = "sha256:4e992f9b9229bc8c97c666b10b042a7360bce1d99b196e8aa29fd9805849cbf1",
     image = "docker.io/linuxserver/prowlarr",
     platforms = [
         "linux/amd64",
diff --git a/infra/containers/qbittorrent/qbittorrent.MODULE.bazel b/infra/containers/qbittorrent/qbittorrent.MODULE.bazel
index 1fe5ae99..c54d517e 100644
--- a/infra/containers/qbittorrent/qbittorrent.MODULE.bazel
+++ b/infra/containers/qbittorrent/qbittorrent.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/qbittorrent
 oci.pull(
     name = "qbittorrent",
-    digest = "sha256:97333cc1ccf903e0bbcd8eb67e3332e4970e9c1ecabe145e499e9c0847ebcaed",
+    digest = "sha256:1ea873647c43d566f251a7122aee330b184509c57ee3257ed19f62dac0f8f24b",
     image = "docker.io/linuxserver/qbittorrent",
     platforms = [
         "linux/amd64",
diff --git a/infra/containers/radarr/radarr.MODULE.bazel b/infra/containers/radarr/radarr.MODULE.bazel
index 6f65bf6e..a1c8a735 100644
--- a/infra/containers/radarr/radarr.MODULE.bazel
+++ b/infra/containers/radarr/radarr.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/radarr
 oci.pull(
     name = "radarr",
-    digest = "sha256:cfbc4fa09dc9d78f7cedc898f4ec48c6277cacedc523c4e159db6ff1c741959c",
+    digest = "sha256:ff4430fe2d6159b4dbaac9903acfecee5aa68dec8c929259e2f3114c63f7a09e",
     image = "docker.io/linuxserver/radarr",
     platforms = [
         "linux/amd64",
diff --git a/infra/containers/sonarr/sonarr.MODULE.bazel b/infra/containers/sonarr/sonarr.MODULE.bazel
index 839f5443..4374466b 100644
--- a/infra/containers/sonarr/sonarr.MODULE.bazel
+++ b/infra/containers/sonarr/sonarr.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/sonarr
 oci.pull(
     name = "sonarr",
-    digest = "sha256:0deb8db6c839ac475e9cd86277712772c40ba7f929a003d7e1de36c4b666bc13",
+    digest = "sha256:44b06045a98bc1f237b9ffefc4b28dab64cb29305e4a2a94875ae93b5224e4cc",
     image = "docker.io/linuxserver/sonarr",
     platforms = [
         "linux/amd64",
diff --git a/infra/containers/wireguard/wireguard.MODULE.bazel b/infra/containers/wireguard/wireguard.MODULE.bazel
index 0ecb6523..57f7aa94 100644
--- a/infra/containers/wireguard/wireguard.MODULE.bazel
+++ b/infra/containers/wireguard/wireguard.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/wireguard
 oci.pull(
     name = "wireguard",
-    digest = "sha256:437a490f7afc6969434251351ba47455a3829e71cef9c6172f3f533332d04063",
+    digest = "sha256:6bcf5d2f5a265c7e9835eaadd989938e681aabe8bf8bcd4556b61d463da6555c",
     image = "docker.io/linuxserver/wireguard",
     platforms = [
         "linux/amd64",
diff --git a/infra/main.tf b/infra/main.tf
index 93894584..b048e900 100644
--- a/infra/main.tf
+++ b/infra/main.tf
@@ -16,7 +16,7 @@ terraform {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.69.0"
+      version = "6.69.1"
     }
     cloudflare = {
       source  = "cloudflare/cloudflare"
diff --git a/java.MODULE.bazel b/java.MODULE.bazel
index 84feb94f..5a8ffb84 100644
--- a/java.MODULE.bazel
+++ b/java.MODULE.bazel
@@ -17,7 +17,7 @@ JERSEY_VERSION = "5.0.0-M1"
 FLYWAY_VERSION = "13.10.3"
 
 # renovate: datasource=maven depName=com.fasterxml.jackson:jackson-bom
-JACKSON_VERSION = "2.22.3"
+JACKSON_VERSION = "2.22.4"
 
 # renovate: datasource=maven depName=org.jooq:jooq
 JOOQ_VERSION = "3.21.9"