diff --git a/argocd-cmp/Dockerfile b/argocd-cmp/Dockerfile
index 13f049c..7c888aa 100644
--- a/argocd-cmp/Dockerfile
+++ b/argocd-cmp/Dockerfile
@@ -1,5 +1,5 @@
 FROM python:3.14-slim AS build_base
-COPY --from=ghcr.io/astral-sh/uv:0.9.25 /uv /bin/uv
+COPY --from=ghcr.io/astral-sh/uv:0.9.28 /uv /bin/uv
 
 #: Build Nyl itself.
 #: -----------------
@@ -41,7 +41,7 @@ RUN \
 FROM fetch-bin-base AS argocd-bin
 # Find ArgoCD releases at https://github.com/argoproj/argo-cd/releases
 # renovate: datasource=github-releases depName=argocd packageName=argoproj/argo-cd
-ARG ARGOCD_VERSION=v3.2.5
+ARG ARGOCD_VERSION=v3.2.6
 RUN curl -sSfLo /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releases/download/${ARGOCD_VERSION}/argocd-linux-$(cat /BINARY_ARCH) \
     && chmod +x /usr/local/bin/argocd \
     && upx /usr/local/bin/argocd \
@@ -50,7 +50,7 @@ RUN curl -sSfLo /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releas
 FROM fetch-bin-base AS helm-bin
 # Find Helm releases at https://github.com/helm/helm/releases
 # renovate: datasource=github-releases depName=helm packageName=helm/helm
-ARG HELM_VERSION=v3.19.5
+ARG HELM_VERSION=v3.20.0
 RUN curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 \
     && chmod 700 get_helm.sh \
     && ./get_helm.sh --version $HELM_VERSION \
@@ -69,7 +69,7 @@ RUN curl -fLO https://github.com/getsops/sops/releases/download/${SOPS_VERSION}/
 
 FROM fetch-bin-base AS kyverno-bin
 # renovate: datasource=github-releases depName=kyverno packageName=kyverno/kyverno
-ARG KYVERNO_VERSION=1.16.2
+ARG KYVERNO_VERSION=1.16.3
 RUN \
     case "$(uname -m)" in \
         x86_64) KYVERNO_ARCH='x86_64' ;; \
diff --git a/mise.toml b/mise.toml
index 8ad12b8..b9602d8 100644
--- a/mise.toml
+++ b/mise.toml
@@ -1,9 +1,9 @@
 [tools]
 "cargo:tire" = "0.1.2"
 kyverno = "1.14.4"
-uv = "0.9.25"
+uv = "0.9.28"
 sops = "3.11.0"
-helm = "3.19.5"
+helm = "3.20.0"
 kubectl = "1.35.0"
 "pipx:slap-cli" = "1.15.0"