diff --git a/output/staging/manifest.yaml b/output/staging/manifest.yaml
index 57e6d51..7ae2be3 100644
--- a/output/staging/manifest.yaml
+++ b/output/staging/manifest.yaml
@@ -118,7 +118,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+        image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
         name: default
         ports:
         - containerPort: 8080
@@ -274,7 +274,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+        image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
         name: apply-db-migrations
         resources:
           limits:
@@ -337,7 +337,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+        image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
         name: django-collectstatic
         resources:
           limits:
@@ -463,7 +463,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
@@ -564,7 +564,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
@@ -664,7 +664,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
@@ -765,7 +765,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
@@ -866,7 +866,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
@@ -968,7 +968,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
@@ -1069,7 +1069,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
@@ -1171,7 +1171,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.2-1-g9d22077@sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+            image: ghcr.io/lcogt/mop/mop:5.3.6.3-1-g8fff215@sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
             name: default
             securityContext:
               capabilities:
diff --git a/staging/base/Kptfile b/staging/base/Kptfile
index 28268ea..2835358 100644
--- a/staging/base/Kptfile
+++ b/staging/base/Kptfile
@@ -7,12 +7,12 @@ upstream:
   git:
     repo: https://github.com/LCOGT/mop
     directory: /k8s/base
-    ref: 9d22077ee55c8f30adcff8e7230cec26b8bf1d26
+    ref: 8fff215d8a5bcff824590ab22f5cc45619bae15c
   updateStrategy: resource-merge
 upstreamLock:
   type: git
   git:
     repo: https://github.com/LCOGT/mop
     directory: /k8s/base
-    ref: 9d22077ee55c8f30adcff8e7230cec26b8bf1d26
-    commit: 9d22077ee55c8f30adcff8e7230cec26b8bf1d26
+    ref: 8fff215d8a5bcff824590ab22f5cc45619bae15c
+    commit: 8fff215d8a5bcff824590ab22f5cc45619bae15c
diff --git a/staging/cd-set-images/kustomization.yaml b/staging/cd-set-images/kustomization.yaml
index 138ced6..dd61066 100644
--- a/staging/cd-set-images/kustomization.yaml
+++ b/staging/cd-set-images/kustomization.yaml
@@ -5,7 +5,7 @@ apiVersion: kustomize.config.k8s.io/v1alpha1
 kind: Component
 
 images:
-- digest: sha256:884d69a985f71a196e63e28c8d8a129be248f069e5fa9d880a909bc6a05fc8ce
+- digest: sha256:5d125b9f0a6bcd2dab37fbe868ea8d88fbe109df07c75ce4774464f42cee4a28
   name: mop
   newName: ghcr.io/lcogt/mop/mop
-  newTag: 5.3.6.2-1-g9d22077
+  newTag: 5.3.6.3-1-g8fff215