diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
index d370386..4552b3c 100644
--- a/.github/workflows/scorecard.yaml
+++ b/.github/workflows/scorecard.yaml
@@ -37,7 +37,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
         with:
           name: SARIF file
           path: results.sarif
@@ -45,6 +45,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@883d8588e56d1753a8a58c1c86e88976f0c23449 # v3.26.3
+        uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
         with:
           sarif_file: results.sarif
diff --git a/README.md b/README.md
index 5ff3020..54518d1 100644
--- a/README.md
+++ b/README.md
@@ -96,7 +96,7 @@ Run the below command to deploy the `k3d-core-slim-dev` bundle:
 > You can append `--set INSECURE_ADMIN_PASSWORD_GENERATION=true` to the below command to enable a default keycloak admin. This is useful for development and testing of the SWF stack and enables the ability to run `uds run setup:create-doug-user` to create a user to test with using the username `doug` and the password `unicorn123!@#UN`.
 
 ```bash
-uds deploy k3d-core-slim-dev:0.25.2
+uds deploy k3d-core-slim-dev:0.26.1
 ```
 
 Run the below command to deploy the `swf-dev` bundle on top of the dev cluster:
diff --git a/bundles/dev/uds-bundle.yaml b/bundles/dev/uds-bundle.yaml
index bbf946a..1f744c4 100644
--- a/bundles/dev/uds-bundle.yaml
+++ b/bundles/dev/uds-bundle.yaml
@@ -40,7 +40,7 @@ packages:
 
   - name: postgres-operator
     repository: ghcr.io/defenseunicorns/packages/uds/postgres-operator
-    ref: 1.12.2-uds.2-upstream
+    ref: 1.13.0-uds.0-upstream
     overrides:
       postgres-operator:
         uds-postgres-config:
@@ -110,7 +110,7 @@ packages:
 
   - name: gitlab
     repository: ghcr.io/defenseunicorns/packages/uds/gitlab
-    ref: 17.2.2-uds.0-upstream
+    ref: 17.2.4-uds.0-upstream
     overrides:
       gitlab:
         uds-gitlab-config:
@@ -212,7 +212,7 @@ packages:
 
   - name: gitlab-runner
     repository: ghcr.io/defenseunicorns/packages/uds/gitlab-runner
-    ref: 17.1.0-uds.1-upstream
+    ref: 17.2.1-uds.0-upstream
 
   - name: sonarqube
     repository: ghcr.io/defenseunicorns/packages/uds/sonarqube
@@ -240,7 +240,7 @@ packages:
 
   - name: mattermost
     repository: ghcr.io/defenseunicorns/packages/uds/mattermost
-    ref: 9.10.1-uds.1-upstream
+    ref: 9.11.1-uds.0-upstream
     imports:
       - name: ACCESS_KEY
         package: dev-secrets
diff --git a/bundles/k3d-demo/uds-bundle.yaml b/bundles/k3d-demo/uds-bundle.yaml
index 6e80f63..5ac6262 100644
--- a/bundles/k3d-demo/uds-bundle.yaml
+++ b/bundles/k3d-demo/uds-bundle.yaml
@@ -17,7 +17,7 @@ packages:
 
   - name: uds-core
     repository: ghcr.io/defenseunicorns/packages/uds/core
-    ref: "0.25.2-upstream"
+    ref: "0.26.1-upstream"
     overrides:
       keycloak:
         keycloak:
@@ -59,7 +59,7 @@ packages:
 
   - name: postgres-operator
     repository: ghcr.io/defenseunicorns/packages/uds/postgres-operator
-    ref: 1.12.2-uds.2-upstream
+    ref: 1.13.0-uds.0-upstream
     overrides:
       postgres-operator:
         uds-postgres-config:
@@ -129,7 +129,7 @@ packages:
 
   - name: gitlab
     repository: ghcr.io/defenseunicorns/packages/uds/gitlab
-    ref: 17.2.2-uds.0-upstream
+    ref: 17.2.4-uds.0-upstream
     overrides:
       gitlab:
         uds-gitlab-config:
@@ -231,7 +231,7 @@ packages:
 
   - name: gitlab-runner
     repository: ghcr.io/defenseunicorns/packages/uds/gitlab-runner
-    ref: 17.1.0-uds.1-upstream
+    ref: 17.2.1-uds.0-upstream
 
   - name: sonarqube
     repository: ghcr.io/defenseunicorns/packages/uds/sonarqube
@@ -259,7 +259,7 @@ packages:
 
   - name: mattermost
     repository: ghcr.io/defenseunicorns/packages/uds/mattermost
-    ref: 9.10.1-uds.1-upstream
+    ref: 9.11.1-uds.0-upstream
     imports:
       - name: ACCESS_KEY
         package: dev-secrets
diff --git a/tasks/test.yaml b/tasks/test.yaml
index 9cd8823..5d4be16 100644
--- a/tasks/test.yaml
+++ b/tasks/test.yaml
@@ -1,8 +1,8 @@
 includes:
-  - mm: https://raw.githubusercontent.com/defenseunicorns/uds-package-mattermost/v9.10.1-uds.1/tasks/test.yaml
-  - gl: https://raw.githubusercontent.com/defenseunicorns/uds-package-gitlab/v17.2.2-uds.0/tasks/test.yaml
+  - mm: https://raw.githubusercontent.com/defenseunicorns/uds-package-mattermost/v9.11.1-uds.0/tasks/test.yaml
+  - gl: https://raw.githubusercontent.com/defenseunicorns/uds-package-gitlab/v17.2.4-uds.0/tasks/test.yaml
   - sq: https://raw.githubusercontent.com/defenseunicorns/uds-package-sonarqube/v10.6.0-uds.1/tasks/test.yaml
-  - glr: https://raw.githubusercontent.com/defenseunicorns/uds-package-gitlab-runner/v17.1.0-uds.1/tasks/test.yaml
+  - glr: https://raw.githubusercontent.com/defenseunicorns/uds-package-gitlab-runner/v17.2.1-uds.0/tasks/test.yaml
 
 tasks:
   - name: test-swf-bundle