diff --git a/apps/netbird/manifest.yml b/apps/netbird/manifest.yml
index 92a204e0..c64c28fe 100644
--- a/apps/netbird/manifest.yml
+++ b/apps/netbird/manifest.yml
@@ -18,7 +18,7 @@ app:
   container_name: netbird
 
   container:
-    image: docker.io/library/nginx:1.27-alpine
+    image: docker.io/library/nginx:1.31.3-alpine
     pull_policy: if-not-present
     network: netbird-net
     # Self-signed TLS cert materialised before create — the dashboard needs a
diff --git a/apps/nostr-rs-relay/manifest.yml b/apps/nostr-rs-relay/manifest.yml
index e8df12ad..69687072 100644
--- a/apps/nostr-rs-relay/manifest.yml
+++ b/apps/nostr-rs-relay/manifest.yml
@@ -1,7 +1,7 @@
 app:
   id: nostr-rs-relay
   name: Nostr Relay (Rust)
-  version: 0.8.0
+  version: 0.10.0
   # Where this app comes from, so scripts/check-upstream-releases.py can
   # tell us when the pin below has fallen behind. Without it nothing can:
   # container.image names our mirror, not the project it was mirrored from.
@@ -11,7 +11,7 @@ app:
   description: High-performance Nostr relay written in Rust. Host your own decentralized social media relay and earn networking profits.
   
   container:
-    image: scsibug/nostr-rs-relay:0.8.9
+    image: scsibug/nostr-rs-relay:0.10.0
     image_signature: cosign://...
     pull_policy: verify-signature
     data_uid: "1000:1000"
diff --git a/apps/pine-piper/manifest.yml b/apps/pine-piper/manifest.yml
index 709b6d8d..5b383e1f 100644
--- a/apps/pine-piper/manifest.yml
+++ b/apps/pine-piper/manifest.yml
@@ -1,7 +1,7 @@
 app:
   id: pine-piper
   name: Pine Piper (TTS)
-  version: "2.2.2"
+  version: "2.4.2"
   # Where this app comes from, so scripts/check-upstream-releases.py can
   # tell us when the pin below has fallen behind. Without it nothing can:
   # container.image names our mirror, not the project it was mirrored from.
@@ -18,7 +18,7 @@ app:
   container_name: pine-piper
 
   container:
-    image: docker.io/rhasspy/wyoming-piper:2.2.2
+    image: docker.io/rhasspy/wyoming-piper:2.4.2
     pull_policy: if-not-present
     network: archy-net
     network_aliases: [pine-piper]
diff --git a/apps/pine/manifest.yml b/apps/pine/manifest.yml
index a8cfd7b8..44bf1729 100644
--- a/apps/pine/manifest.yml
+++ b/apps/pine/manifest.yml
@@ -19,7 +19,7 @@ app:
   container_name: pine
 
   container:
-    image: docker.io/library/nginx:1.27-alpine
+    image: docker.io/library/nginx:1.31.3-alpine
     pull_policy: if-not-present
     network: archy-net
     network_aliases: [pine]
diff --git a/apps/strfry/manifest.yml b/apps/strfry/manifest.yml
index 0dde8a64..7a69380b 100644
--- a/apps/strfry/manifest.yml
+++ b/apps/strfry/manifest.yml
@@ -1,7 +1,7 @@
 app:
   id: strfry
   name: Strfry Nostr Relay
-  version: 0.9.0
+  version: 1.1.1
   # Where this app comes from, so scripts/check-upstream-releases.py can
   # tell us when the pin below has fallen behind. Without it nothing can:
   # container.image names our mirror, not the project it was mirrored from.
@@ -11,7 +11,7 @@ app:
   description: Lightweight Nostr relay written in C++. Alternative to nostr-rs-relay with lower resource usage.
 
   container:
-    image: dockurr/strfry:1.0.4
+    image: dockurr/strfry:1.1.1
     image_signature: cosign://...
     pull_policy: verify-signature