diff --git a/src/istio/ambient/zarf.yaml b/src/istio/ambient/zarf.yaml
index b5fc9cc8ae..cd5d3b6f33 100644
--- a/src/istio/ambient/zarf.yaml
+++ b/src/istio/ambient/zarf.yaml
@@ -24,13 +24,13 @@ components:
         localPath: chart
       - name: cni
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.25.0
+        version: 1.25.1
         namespace: istio-system
         valuesFiles:
           - "../values/base-cni.yaml"
       - name: ztunnel
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.25.0
+        version: 1.25.1
         namespace: istio-system
         valuesFiles:
           - "../values/base-ztunnel.yaml"
diff --git a/src/istio/common/zarf.yaml b/src/istio/common/zarf.yaml
index 8535b82e2d..e031d67e63 100644
--- a/src/istio/common/zarf.yaml
+++ b/src/istio/common/zarf.yaml
@@ -13,11 +13,11 @@ components:
     charts:
       - name: base
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.25.0
+        version: 1.25.1
         namespace: istio-system
       - name: istiod
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.25.0
+        version: 1.25.1
         namespace: istio-system
         valuesFiles:
           - "../values/base-istiod.yaml"
diff --git a/src/istio/values/registry1/cni.yaml b/src/istio/values/registry1/cni.yaml
index 3d5ddad31e..1a99e3d463 100644
--- a/src/istio/values/registry1/cni.yaml
+++ b/src/istio/values/registry1/cni.yaml
@@ -2,4 +2,4 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 cni:
-  image: registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.25.0-tetratefips0
+  image: registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.25.1-tetratefipslatest1
diff --git a/src/istio/values/registry1/istiod.yaml b/src/istio/values/registry1/istiod.yaml
index 661fdc818d..cbf82a37f4 100644
--- a/src/istio/values/registry1/istiod.yaml
+++ b/src/istio/values/registry1/istiod.yaml
@@ -2,11 +2,11 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 pilot:
-  image: registry1.dso.mil/ironbank/tetrate/istio/pilot:1.25.0-tetratefips0
+  image: registry1.dso.mil/ironbank/tetrate/istio/pilot:1.25.1-tetratefipslatest1
 global:
   proxy_init:
     # renovate: image=registry1.dso.mil/ironbank/tetrate/istio/proxyv2
-    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.25.0-tetratefips0"
+    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.25.1-tetratefipslatest1"
   proxy:
     # renovate: image=registry1.dso.mil/ironbank/tetrate/istio/proxyv2
-    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.25.0-tetratefips0"
+    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.25.1-tetratefipslatest1"
diff --git a/src/istio/values/registry1/ztunnel.yaml b/src/istio/values/registry1/ztunnel.yaml
index ab3798931c..257f8db5aa 100644
--- a/src/istio/values/registry1/ztunnel.yaml
+++ b/src/istio/values/registry1/ztunnel.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
-image: registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.25.0-tetratefips0
+image: registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.25.1-tetratefipslatest1
diff --git a/src/istio/values/unicorn/cni.yaml b/src/istio/values/unicorn/cni.yaml
index 103766474b..db1e49136f 100644
--- a/src/istio/values/unicorn/cni.yaml
+++ b/src/istio/values/unicorn/cni.yaml
@@ -2,4 +2,4 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 cni:
-  image: cgr.dev/du-uds-defenseunicorns/istio-install-cni:1.25.0
+  image: cgr.dev/du-uds-defenseunicorns/istio-install-cni:1.25.1
diff --git a/src/istio/values/unicorn/istiod.yaml b/src/istio/values/unicorn/istiod.yaml
index 9cd84e135c..cd64cf47ee 100644
--- a/src/istio/values/unicorn/istiod.yaml
+++ b/src/istio/values/unicorn/istiod.yaml
@@ -2,11 +2,11 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 pilot:
-  image: "cgr.dev/du-uds-defenseunicorns/istio-pilot-fips:1.25.0"
+  image: "cgr.dev/du-uds-defenseunicorns/istio-pilot-fips:1.25.1"
 global:
   proxy_init:
     # renovate: image=cgr.dev/du-uds-defenseunicorns/istio-proxy-fips
-    image: "###ZARF_REGISTRY###/du-uds-defenseunicorns/istio-proxy-fips:1.25.0"
+    image: "###ZARF_REGISTRY###/du-uds-defenseunicorns/istio-proxy-fips:1.25.1"
   proxy:
     # renovate: image=cgr.dev/du-uds-defenseunicorns/istio-proxy-fips
-    image: "###ZARF_REGISTRY###/du-uds-defenseunicorns/istio-proxy-fips:1.25.0"
+    image: "###ZARF_REGISTRY###/du-uds-defenseunicorns/istio-proxy-fips:1.25.1"
diff --git a/src/istio/values/unicorn/ztunnel.yaml b/src/istio/values/unicorn/ztunnel.yaml
index c072888e9f..2db76ae342 100644
--- a/src/istio/values/unicorn/ztunnel.yaml
+++ b/src/istio/values/unicorn/ztunnel.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
-image: cgr.dev/du-uds-defenseunicorns/ztunnel-fips:1.25.0
+image: cgr.dev/du-uds-defenseunicorns/ztunnel-fips:1.25.1
diff --git a/src/istio/values/upstream/cni.yaml b/src/istio/values/upstream/cni.yaml
index fcebce9a56..47f46bf53d 100644
--- a/src/istio/values/upstream/cni.yaml
+++ b/src/istio/values/upstream/cni.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 cni:
- image: docker.io/istio/install-cni:1.25.0-distroless
+ image: docker.io/istio/install-cni:1.25.1-distroless
diff --git a/src/istio/values/upstream/istiod.yaml b/src/istio/values/upstream/istiod.yaml
index be3cb7f96c..f2976991e8 100644
--- a/src/istio/values/upstream/istiod.yaml
+++ b/src/istio/values/upstream/istiod.yaml
@@ -2,11 +2,11 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 pilot:
-  image: "docker.io/istio/pilot:1.25.0-distroless"
+  image: "docker.io/istio/pilot:1.25.1-distroless"
 global:
   proxy_init:
     # renovate: image=docker.io/istio/proxyv2
-    image: "###ZARF_REGISTRY###/istio/proxyv2:1.25.0-distroless"
+    image: "###ZARF_REGISTRY###/istio/proxyv2:1.25.1-distroless"
   proxy:
     # renovate: image=docker.io/istio/proxyv2
-    image: "###ZARF_REGISTRY###/istio/proxyv2:1.25.0-distroless"
+    image: "###ZARF_REGISTRY###/istio/proxyv2:1.25.1-distroless"
diff --git a/src/istio/values/upstream/ztunnel.yaml b/src/istio/values/upstream/ztunnel.yaml
index 46b3be48d2..ffc4f7fd37 100644
--- a/src/istio/values/upstream/ztunnel.yaml
+++ b/src/istio/values/upstream/ztunnel.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
-image: docker.io/istio/ztunnel:1.25.0-distroless
+image: docker.io/istio/ztunnel:1.25.1-distroless
diff --git a/src/istio/zarf.yaml b/src/istio/zarf.yaml
index 3b9c4e9f66..9682fcd5a9 100644
--- a/src/istio/zarf.yaml
+++ b/src/istio/zarf.yaml
@@ -27,8 +27,8 @@ components:
         valuesFiles:
           - "values/upstream/istiod.yaml"
     images:
-      - "docker.io/istio/pilot:1.25.0-distroless"
-      - "docker.io/istio/proxyv2:1.25.0-distroless"
+      - "docker.io/istio/pilot:1.25.1-distroless"
+      - "docker.io/istio/proxyv2:1.25.1-distroless"
 
   - name: istio-ambient
     required: false
@@ -44,8 +44,8 @@ components:
         valuesFiles:
           - "values/upstream/ztunnel.yaml"
     images:
-      - "docker.io/istio/install-cni:1.25.0-distroless"
-      - "docker.io/istio/ztunnel:1.25.0-distroless"
+      - "docker.io/istio/install-cni:1.25.1-distroless"
+      - "docker.io/istio/ztunnel:1.25.1-distroless"
 
   - name: istio-controlplane
     required: true
@@ -58,8 +58,8 @@ components:
         valuesFiles:
           - "values/registry1/istiod.yaml"
     images:
-      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.25.0-tetratefips0
-      - registry1.dso.mil/ironbank/tetrate/istio/pilot:1.25.0-tetratefips0
+      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.25.1-tetratefipslatest1
+      - registry1.dso.mil/ironbank/tetrate/istio/pilot:1.25.1-tetratefipslatest1
 
   - name: istio-ambient
     required: false
@@ -75,8 +75,8 @@ components:
         valuesFiles:
           - "values/registry1/ztunnel.yaml"
     images:
-      - registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.25.0-tetratefips0
-      - registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.25.0-tetratefips0
+      - registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.25.1-tetratefipslatest1
+      - registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.25.1-tetratefipslatest1
 
   - name: istio-controlplane
     required: true
@@ -89,8 +89,8 @@ components:
         valuesFiles:
           - "values/unicorn/istiod.yaml"
     images:
-      - cgr.dev/du-uds-defenseunicorns/istio-pilot-fips:1.25.0
-      - cgr.dev/du-uds-defenseunicorns/istio-proxy-fips:1.25.0
+      - cgr.dev/du-uds-defenseunicorns/istio-pilot-fips:1.25.1
+      - cgr.dev/du-uds-defenseunicorns/istio-proxy-fips:1.25.1
 
   - name: istio-ambient
     required: false
@@ -106,15 +106,15 @@ components:
         valuesFiles:
           - "values/unicorn/ztunnel.yaml"
     images:
-      - cgr.dev/du-uds-defenseunicorns/istio-install-cni:1.25.0
-      - cgr.dev/du-uds-defenseunicorns/ztunnel-fips:1.25.0
+      - cgr.dev/du-uds-defenseunicorns/istio-install-cni:1.25.1
+      - cgr.dev/du-uds-defenseunicorns/ztunnel-fips:1.25.1
 
   - name: istio-admin-gateway
     required: true
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.25.0
+        version: 1.25.1
         releaseName: admin-ingressgateway
         namespace: istio-admin-gateway
       - name: uds-istio-config
@@ -129,7 +129,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.25.0
+        version: 1.25.1
         releaseName: tenant-ingressgateway
         namespace: istio-tenant-gateway
       - name: uds-istio-config
@@ -144,7 +144,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.25.0
+        version: 1.25.1
         releaseName: passthrough-ingressgateway
         namespace: istio-passthrough-gateway
       - name: uds-istio-config