diff --git a/Makefile.vendor.mk b/Makefile.vendor.mk
index 1b1398749..679b5a369 100644
--- a/Makefile.vendor.mk
+++ b/Makefile.vendor.mk
@@ -1,4 +1,4 @@
-VERSION = 3.3.0
+VERSION = 3.3.1
 OPERATOR_NAME = servicemeshoperator3
 CHANNELS = "stable,stable-3.3"
 DEFAULT_CHANNEL=stable
diff --git a/bundle/manifests/servicemeshoperator3.clusterserviceversion.yaml b/bundle/manifests/servicemeshoperator3.clusterserviceversion.yaml
index 624ad90b6..158ea5a99 100644
--- a/bundle/manifests/servicemeshoperator3.clusterserviceversion.yaml
+++ b/bundle/manifests/servicemeshoperator3.clusterserviceversion.yaml
@@ -45,7 +45,7 @@ metadata:
     capabilities: Seamless Upgrades
     categories: OpenShift Optional, Integration & Delivery, Networking, Security
     containerImage: ${OSSM_OPERATOR_3_3}
-    createdAt: "2026-03-16T13:03:06Z"
+    createdAt: "2026-03-19T18:25:01Z"
     description: The OpenShift Service Mesh Operator enables you to install, configure, and manage an instance of Red Hat OpenShift Service Mesh. OpenShift Service Mesh is based on the open source Istio project.
     features.operators.openshift.io/cnf: "false"
     features.operators.openshift.io/cni: "true"
@@ -68,7 +68,7 @@ metadata:
     operatorframework.io/arch.arm64: supported
     operatorframework.io/arch.ppc64le: supported
     operatorframework.io/arch.s390x: supported
-  name: servicemeshoperator3.v3.3.0
+  name: servicemeshoperator3.v3.3.1
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -744,11 +744,11 @@ spec:
                   images.v1_27_5.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d1baba8cb454b62d804dc427d4ccfea928348631c384d1ab3d170e1e2a9d1178
                   images.v1_27_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:650da1e2ad1cb93e6a0231dba7ca1f27f4cccac84e5925135281adc629a0caea
                   images.v1_27_5.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0ae2919cd446e0e1f0a21d0850e7809ba8f44c06d484c023b3bee2787ca4bdd0
-                  images.v1_28_4.cni: ${ISTIO_CNI_1_28}
-                  images.v1_28_4.istiod: ${ISTIO_PILOT_1_28}
-                  images.v1_28_4.must-gather: ${OSSM_MUST_GATHER_3_3}
-                  images.v1_28_4.proxy: ${ISTIO_PROXY_1_28}
-                  images.v1_28_4.ztunnel: ${ISTIO_ZTUNNEL_1_28}
+                  images.v1_28_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:f8abbd0d6c7758cf2ccd49dba34921e3ac9b6e4cdbfed4e5fb38dc9a11d30a5d
+                  images.v1_28_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:978f840ceda7eb00c6f15740bcd60e241bee732cd215e9de464ce431b0156ffa
+                  images.v1_28_4.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d57d23fc8ec4053a3d819ffb87532d6aec6b5874fdf22e22afdd7f0f0712df52
+                  images.v1_28_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:ba78d718627a0662f61ec633fdd2867ba5c24be6bdbc6df672d46456fb399dba
+                  images.v1_28_4.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:2d5a3154e7b6b8d7eadb851a86cc5b7ee556b923843e73ae56197e875c564b03
                   kubectl.kubernetes.io/default-container: sail-operator
                 labels:
                   app.kubernetes.io/created-by: servicemeshoperator3
@@ -878,4 +878,4 @@ spec:
   maturity: alpha
   provider:
     name: Red Hat, Inc.
-  version: 3.3.0
+  version: 3.3.1
diff --git a/chart/Chart.yaml b/chart/Chart.yaml
index 26e315d0e..86a2c3cbf 100644
--- a/chart/Chart.yaml
+++ b/chart/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: sail-operator
 description: A Helm chart for Kubernetes
 type: application
-version: 3.3.0
-appVersion: "3.3.0"
+version: 3.3.1
+appVersion: "3.3.1"
diff --git a/ossm/values.yaml b/ossm/values.yaml
index 515354c99..5557f88bc 100644
--- a/ossm/values.yaml
+++ b/ossm/values.yaml
@@ -47,11 +47,11 @@ deployment:
     images.v1_27_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:650da1e2ad1cb93e6a0231dba7ca1f27f4cccac84e5925135281adc629a0caea
     images.v1_27_5.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0ae2919cd446e0e1f0a21d0850e7809ba8f44c06d484c023b3bee2787ca4bdd0
     # 1.28.4 images
-    images.v1_28_4.cni: ${ISTIO_CNI_1_28}
-    images.v1_28_4.istiod: ${ISTIO_PILOT_1_28}
-    images.v1_28_4.must-gather: ${OSSM_MUST_GATHER_3_3}
-    images.v1_28_4.proxy: ${ISTIO_PROXY_1_28}
-    images.v1_28_4.ztunnel: ${ISTIO_ZTUNNEL_1_28}
+    images.v1_28_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:f8abbd0d6c7758cf2ccd49dba34921e3ac9b6e4cdbfed4e5fb38dc9a11d30a5d
+    images.v1_28_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:978f840ceda7eb00c6f15740bcd60e241bee732cd215e9de464ce431b0156ffa
+    images.v1_28_4.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d57d23fc8ec4053a3d819ffb87532d6aec6b5874fdf22e22afdd7f0f0712df52
+    images.v1_28_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:ba78d718627a0662f61ec633fdd2867ba5c24be6bdbc6df672d46456fb399dba
+    images.v1_28_4.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:2d5a3154e7b6b8d7eadb851a86cc5b7ee556b923843e73ae56197e875c564b03
 service:
   port: 8443
 serviceAccountName: servicemesh-operator3
@@ -105,7 +105,7 @@ csv:
     * [Documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/latest/html/about/ossm-about-openshift-service-mesh)
     * [Bugs](https://issues.redhat.com/projects/OSSM)
   support: Red Hat, Inc.
-  version: 3.3.0
+  version: 3.3.1
   keywords:
   - istio
   - servicemesh