diff --git a/.github/workflows/helm-release-differ.yaml b/.github/workflows/helm-release-differ.yaml
index 9eda0f79c..f89d4ffd3 100644
--- a/.github/workflows/helm-release-differ.yaml
+++ b/.github/workflows/helm-release-differ.yaml
@@ -23,7 +23,7 @@ jobs:
 
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@95690f9ece77c1740f4a55b7f1de9023ed6b1f87 # v39.2.3
+        uses: tj-actions/changed-files@fea790cb660e33aef4bdf07304e28fedd77dfa13 # v39.2.4
         with:
           json: true
           files: |
diff --git a/.github/workflows/schedule-renovate.yaml b/.github/workflows/schedule-renovate.yaml
index c9f480b13..907b9b25f 100644
--- a/.github/workflows/schedule-renovate.yaml
+++ b/.github/workflows/schedule-renovate.yaml
@@ -54,7 +54,7 @@ jobs:
 
       # https://github.com/marketplace/actions/renovate-bot-github-action
       - name: Renovate
-        uses: renovatebot/github-action@v39.1.0
+        uses: renovatebot/github-action@v39.1.1
         with:
           configurationFile: "${{ env.RENOVATE_CONFIG_FILE }}"
           token: "${{ steps.generate-token.outputs.token }}"
diff --git a/kubernetes/kube-nas/apps/kube-tools/reloader/app/helm-release.yaml b/kubernetes/kube-nas/apps/kube-tools/reloader/app/helm-release.yaml
index e891ca5a2..9766e4664 100644
--- a/kubernetes/kube-nas/apps/kube-tools/reloader/app/helm-release.yaml
+++ b/kubernetes/kube-nas/apps/kube-tools/reloader/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: reloader
-      version: 1.0.46
+      version: 1.0.48
       sourceRef:
         kind: HelmRepository
         name: stakater-charts
diff --git a/kubernetes/kube-nas/apps/nginx-ingress/nginx/app/helm-release.yaml b/kubernetes/kube-nas/apps/nginx-ingress/nginx/app/helm-release.yaml
index 16c31ffb5..a29fdf64a 100644
--- a/kubernetes/kube-nas/apps/nginx-ingress/nginx/app/helm-release.yaml
+++ b/kubernetes/kube-nas/apps/nginx-ingress/nginx/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: ingress-nginx
-      version: 4.8.2
+      version: 4.8.3
       sourceRef:
         kind: HelmRepository
         name: ingress-nginx-charts
diff --git a/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml b/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml
index 520e9b326..d5c87cac3 100644
--- a/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/atlantis/atlantis/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: atlantis
-      version: 4.15.3
+      version: 4.16.0
       sourceRef:
         kind: HelmRepository
         name: runatlantis-charts
diff --git a/kubernetes/talos-flux/apps/atlantis/atlantis/tyriis/helm-release.yaml b/kubernetes/talos-flux/apps/atlantis/atlantis/tyriis/helm-release.yaml
index 12919a24a..46f6cad4e 100644
--- a/kubernetes/talos-flux/apps/atlantis/atlantis/tyriis/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/atlantis/atlantis/tyriis/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: atlantis
-      version: 4.15.3
+      version: 4.16.0
       sourceRef:
         kind: HelmRepository
         name: runatlantis-charts
diff --git a/kubernetes/talos-flux/apps/flux-system/weave-gitops/app/helm-release.yaml b/kubernetes/talos-flux/apps/flux-system/weave-gitops/app/helm-release.yaml
index 66fec38fc..d2c2bccf0 100644
--- a/kubernetes/talos-flux/apps/flux-system/weave-gitops/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/flux-system/weave-gitops/app/helm-release.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: weave-gitops
-      version: 4.0.32
+      version: 4.0.33
       sourceRef:
         kind: HelmRepository
         name: weave-gitops-charts
diff --git a/kubernetes/talos-flux/apps/gaming/minecraft-bedrock/app/helm-release.yaml b/kubernetes/talos-flux/apps/gaming/minecraft-bedrock/app/helm-release.yaml
index 41e84399b..71b941f8a 100644
--- a/kubernetes/talos-flux/apps/gaming/minecraft-bedrock/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/gaming/minecraft-bedrock/app/helm-release.yaml
@@ -24,7 +24,7 @@ spec:
   values:
     env:
       EULA: "true"
-      VERSION: "1.20.32.03"
+      VERSION: "1.20.40.01"
       DIFFICULTY: normal
       SERVER_NAME: home
       WHITE_LIST: ""
@@ -40,8 +40,8 @@ spec:
       MAX_THREADS: "0"
       GAMEMODE: survival
       LEVEL_TYPE: DEFAULT
-      LEVEL_NAME: "island wonders"
-      LEVEL_SEED: "968565878525959881"
+      LEVEL_NAME: "lets go pew pew"
+      LEVEL_SEED: "147950563777164989"
       DEFAULT_PLAYER_PERMISSION_LEVEL: member
       TEXTUREPACK_REQUIRED: "false"
       ONLINE_MODE: "true"
@@ -129,5 +129,3 @@ spec:
       requests:
         cpu: 250m
         memory: 387Mi
-      limits:
-        memory: 387Mi
diff --git a/kubernetes/talos-flux/apps/home-automation/esphome/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/esphome/app/helm-release.yaml
index 10ceea3b7..9fc16e2d1 100644
--- a/kubernetes/talos-flux/apps/home-automation/esphome/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/home-automation/esphome/app/helm-release.yaml
@@ -29,7 +29,7 @@ spec:
   values:
     image:
       repository: ghcr.io/esphome/esphome
-      tag: 2023.10.1
+      tag: 2023.10.3
     env:
       TZ: ${SETTING_TZ}
       ESPHOME_DASHBOARD_USE_PING: "true"
diff --git a/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml b/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml
index 51c7a0c95..779c89e64 100644
--- a/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/home-automation/home-assistant/app/helm-release.yaml
@@ -29,7 +29,7 @@ spec:
   values:
     image:
       repository: ghcr.io/home-assistant/home-assistant
-      tag: 2023.10.3
+      tag: 2023.10.5
     env:
       TZ: ${SETTING_TZ}
     envFrom:
diff --git a/kubernetes/talos-flux/apps/kube-system/snapshot-controller/app/helm-release.yaml b/kubernetes/talos-flux/apps/kube-system/snapshot-controller/app/helm-release.yaml
index b75ae32ae..8cd657037 100644
--- a/kubernetes/talos-flux/apps/kube-system/snapshot-controller/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/kube-system/snapshot-controller/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: snapshot-controller
-      version: 1.9.1
+      version: 1.9.2
       sourceRef:
         kind: HelmRepository
         name: piraeus-charts
diff --git a/kubernetes/talos-flux/apps/kube-tools/node-feature-discovery/app/helm-release.yaml b/kubernetes/talos-flux/apps/kube-tools/node-feature-discovery/app/helm-release.yaml
index 7681d39a6..8b08fa0f3 100644
--- a/kubernetes/talos-flux/apps/kube-tools/node-feature-discovery/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/kube-tools/node-feature-discovery/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: node-feature-discovery
-      version: 0.14.2
+      version: 0.14.3
       sourceRef:
         kind: HelmRepository
         name: node-feature-discovery-charts
diff --git a/kubernetes/talos-flux/apps/kube-tools/reloader/app/helm-release.yaml b/kubernetes/talos-flux/apps/kube-tools/reloader/app/helm-release.yaml
index e891ca5a2..9766e4664 100644
--- a/kubernetes/talos-flux/apps/kube-tools/reloader/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/kube-tools/reloader/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: reloader
-      version: 1.0.46
+      version: 1.0.48
       sourceRef:
         kind: HelmRepository
         name: stakater-charts
diff --git a/kubernetes/talos-flux/apps/metallb-system/metallb/app/helm-release.yaml b/kubernetes/talos-flux/apps/metallb-system/metallb/app/helm-release.yaml
index 30a13fb4b..f957af866 100644
--- a/kubernetes/talos-flux/apps/metallb-system/metallb/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/metallb-system/metallb/app/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: metallb
-      version: 0.13.11
+      version: 0.13.12
       sourceRef:
         kind: HelmRepository
         name: metallb-charts
diff --git a/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml b/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml
index dfef09951..b5c14b6d7 100644
--- a/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/observability/alertmanager-discord/app/helm-release.yaml
@@ -27,7 +27,7 @@ spec:
   values:
     image:
       repository: rogerrum/alertmanager-discord
-      tag: 1.0.4
+      tag: 1.0.5
     env:
       DISCORD_WEBHOOK: ${SECRET_DISCORD_WEBHOOK}
       DISCORD_USERNAME: ${SETTING_CLUSTERNAME}
diff --git a/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml b/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml
index 9350e9b37..782a99791 100644
--- a/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/observability/kube-prometheus-stack/app/helm-release.yaml
@@ -11,7 +11,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: 51.9.4
+      version: 52.0.1
       sourceRef:
         kind: HelmRepository
         name: prometheus-community-charts
diff --git a/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/cluster/helm-release.yaml b/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/cluster/helm-release.yaml
index 5f234e700..dd8f8558f 100644
--- a/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/cluster/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/cluster/helm-release.yaml
@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: rook-ceph-cluster
-      version: v1.12.5
+      version: v1.12.6
       sourceRef:
         kind: HelmRepository
         name: rook-ceph-charts
diff --git a/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/operator/helm-release.yaml b/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/operator/helm-release.yaml
index 8d662e9a0..4b1e79d8e 100644
--- a/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/operator/helm-release.yaml
+++ b/kubernetes/talos-flux/apps/rook-ceph/rook-ceph/operator/helm-release.yaml
@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: rook-ceph
-      version: v1.12.5
+      version: v1.12.6
       sourceRef:
         kind: HelmRepository
         name: rook-ceph-charts
diff --git a/shell.nix b/shell.nix
index c7cef1e4e..743c075f1 100644
--- a/shell.nix
+++ b/shell.nix
@@ -5,10 +5,12 @@ in
     packages = [
       pkgs.age
       pkgs.direnv
+      pkgs.fluxcd
       pkgs.go-task
       pkgs.k9s
       pkgs.kubectl
       pkgs.kubernetes-helm
+      pkgs.kustomize
       pkgs.pre-commit
       pkgs.gitleaks
       pkgs.ydiff