diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 00a2c32..0f3e829 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -8,6 +8,8 @@ on:
   workflow_dispatch: {}
 
 env:
+  DOCKER_BUILDX_VERSION: 'v0.8.2'
+
   XPKG_ACCESS_ID: ${{ secrets.XPKG_ACCESS_ID }}
 
 jobs:
@@ -31,7 +33,7 @@ jobs:
 
     steps:
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
         with:
           version: ${{ env.DOCKER_BUILDX_VERSION }}
           install: true
@@ -52,7 +54,7 @@ jobs:
           BUILD_ARGS: "--load"
 
       - name: Publish Artifacts to GitHub
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
         with:
           name: output
           path: _output/**
diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml
index f42c8d6..d310447 100644
--- a/.github/workflows/e2e.yaml
+++ b/.github/workflows/e2e.yaml
@@ -11,3 +11,4 @@ jobs:
       package-type: configuration
     secrets:
       UPTEST_CLOUD_CREDENTIALS: ${{ secrets.UPTEST_CLOUD_CREDENTIALS }}
+      UPTEST_DATASOURCE: ${{ secrets.UPTEST_DATASOURCE }}
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
index eb4c74d..4c9f1ea 100644
--- a/.github/workflows/tag.yml
+++ b/.github/workflows/tag.yml
@@ -12,7 +12,7 @@ on:
 
 jobs:
   create-tag:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout
diff --git a/Makefile b/Makefile
index 5597e56..4780ee0 100644
--- a/Makefile
+++ b/Makefile
@@ -117,7 +117,7 @@ PLATFORMS ?= linux_amd64
 
 # Tool Versions
 # ------------------
-UP_VERSION = v0.35.0
+UP_VERSION = v0.36.2
 UP_CHANNEL = stable
 CROSSPLANE_CLI_VERSION = v1.18.0
 CROSSPLANE_VERSION = v1.18.0-up.1
@@ -134,7 +134,7 @@ KIND_CLUSTER_NAME ?= uptest-$(PROJECT_NAME)
 # XPKG Configuration
 # ------------------
 XPKG_DIR = $(shell pwd)
-XPKG_IGNORE = .github/workflows/*.yaml,.github/workflows/*.yml,examples/*.yaml,.work/uptest-datasource.yaml,.cache/render/*
+XPKG_IGNORE ?= .github/workflows/*.yaml,.github/workflows/*.yml,examples/*.yaml,.work/uptest-datasource.yaml,.cache/render/*
 XPKG_REG_ORGS ?= xpkg.upbound.io/upbound
 # NOTE: Skip promoting on xpkg.upbound.io as channel tags are inferred
 XPKG_REG_ORGS_NO_PROMOTE ?= xpkg.upbound.io/upbound