diff --git a/.github/workflows/eks-smoke.yml b/.github/workflows/eks-smoke.yml
index a15e7f5..04b414d 100644
--- a/.github/workflows/eks-smoke.yml
+++ b/.github/workflows/eks-smoke.yml
@@ -74,7 +74,7 @@ jobs:
           fi
 
       - name: Configure AWS credentials through OIDC
-        uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
+        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
         with:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
@@ -83,7 +83,7 @@ jobs:
       - name: Set up Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.15.4
+          version: v3.21.3
 
       - name: Set up kubectl
         uses: azure/setup-kubectl@829323503d1be3d00ca8346e5391ca0b07a9ab0d # v5.1.0
@@ -175,7 +175,7 @@ jobs:
 
       - name: Refresh AWS credentials for teardown
         if: always()
-        uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6.1.1
+        uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
         with:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 56c505b..ed9cd8e 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -27,7 +27,7 @@ jobs:
       - name: Set up Helm
         uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
-          version: v3.15.4
+          version: v3.21.3
 
       - name: Install ShellCheck
         run: |
diff --git a/charts/twc-lab/values.yaml b/charts/twc-lab/values.yaml
index 1a60618..1d2b181 100644
--- a/charts/twc-lab/values.yaml
+++ b/charts/twc-lab/values.yaml
@@ -25,7 +25,7 @@ simulator:
 cassandra:
   image:
     repository: cassandra
-    tag: "4.1.4"
+    tag: "4.1.11"
     pullPolicy: IfNotPresent
   resources:
     requests:
@@ -40,7 +40,7 @@ cassandra:
 zookeeper:
   image:
     repository: zookeeper
-    tag: "3.9.2"
+    tag: "3.9.5"
     pullPolicy: IfNotPresent
   resources:
     requests:
@@ -55,7 +55,7 @@ zookeeper:
 artemis:
   image:
     repository: apache/activemq-artemis
-    tag: "2.32.0"
+    tag: "2.44.0"
     pullPolicy: IfNotPresent
   resources:
     requests:
diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index abb7826..915a3c2 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -143,7 +143,7 @@ lab_helm repo update ingress-nginx
 verify_cluster_identity
 advance_phase HELM_STARTED
 lab_helm upgrade --install ingress-nginx ingress-nginx/ingress-nginx \
-  --version 4.13.3 --namespace ingress-nginx --create-namespace \
+  --version 4.15.1 --namespace ingress-nginx --create-namespace \
   --values "$SCRIPT_ROOT/cluster/ingress-nginx-values.yaml" --atomic --timeout 15m
 
 verify_cluster_identity