diff --git a/compose.tunnel.yml b/compose.tunnel.yml
index 4932e01..9b930b2 100644
--- a/compose.tunnel.yml
+++ b/compose.tunnel.yml
@@ -9,7 +9,7 @@
 
 services:
   cloudflared:
-    image: cloudflare/cloudflared:2026.7.0
+    image: cloudflare/cloudflared:2026.7.2
     restart: unless-stopped
     depends_on: [ grafana, otel-collector ]
     command: tunnel --no-autoupdate run --token ${CLOUDFLARE_TUNNEL_TOKEN:?set CLOUDFLARE_TUNNEL_TOKEN in .env}
diff --git a/compose.yml b/compose.yml
index f56343a..b34b795 100644
--- a/compose.yml
+++ b/compose.yml
@@ -20,7 +20,7 @@ x-logging: &default-logging
 
 services:
   otel-collector:
-    image: otel/opentelemetry-collector-contrib:0.156.0
+    image: otel/opentelemetry-collector-contrib:0.157.0
     restart: unless-stopped
     depends_on: [ loki, tempo, prometheus ]
     ports:
@@ -34,7 +34,7 @@ services:
     logging: *default-logging
 
   loki:
-    image: grafana/loki:3.7.3
+    image: grafana/loki:3.7.4
     restart: unless-stopped
     volumes:
       - ./config/loki.yaml:/etc/loki/loki.yaml:ro
@@ -52,7 +52,7 @@ services:
     logging: *default-logging
 
   prometheus:
-    image: prom/prometheus:v3.13.0
+    image: prom/prometheus:v3.13.1
     restart: unless-stopped
     volumes:
       - ./config/prometheus.yaml:/etc/prometheus/prometheus.yaml:ro
@@ -93,7 +93,7 @@ services:
     logging: *default-logging
 
   node-exporter:
-    image: prom/node-exporter:v1.11.1
+    image: prom/node-exporter:v1.12.1
     restart: unless-stopped
     command: [ "--path.rootfs=/host" ]
     pid: host
@@ -105,7 +105,7 @@ services:
     logging: *default-logging
 
   grafana:
-    image: grafana/grafana:13.1.0
+    image: grafana/grafana:13.1.1
     restart: unless-stopped
     depends_on: [ loki, tempo, prometheus ]
     ports: