diff --git a/deploy/helm/cassandra/helm/Chart.yaml b/deploy/helm/cassandra/helm/Chart.yaml
index 18192ef2f5..8f14aa52ed 100644
--- a/deploy/helm/cassandra/helm/Chart.yaml
+++ b/deploy/helm/cassandra/helm/Chart.yaml
@@ -24,4 +24,4 @@ description: >
 type: application
 
 version: 0.8.0
-appVersion: 5.0.9-nv-2.0.5
+appVersion: 5.0.9-nv-2.0.6
diff --git a/deploy/helm/cassandra/helm/values.yaml b/deploy/helm/cassandra/helm/values.yaml
index b766b25b90..023ff3d669 100644
--- a/deploy/helm/cassandra/helm/values.yaml
+++ b/deploy/helm/cassandra/helm/values.yaml
@@ -31,7 +31,7 @@ cassandra:
     # repository: must be supplied in additional values
     registry: ""
     repository: ""
-    tag: 5.0.9-nv-2.0.5
+    tag: 5.0.9-nv-2.0.6
     pullPolicy: IfNotPresent
 
   replicaCount: 3
@@ -233,7 +233,7 @@ cassandra:
       # repository: must be supplied in additional values
       registry: ""
       repository: ""
-      tag: 0.18.1
+      tag: 0.19.2
       pullPolicy: Always
 
   dbUser:
diff --git a/deploy/helm/cloud-functions/nvcf-api/values.yaml b/deploy/helm/cloud-functions/nvcf-api/values.yaml
index c19565d850..c715896527 100644
--- a/deploy/helm/cloud-functions/nvcf-api/values.yaml
+++ b/deploy/helm/cloud-functions/nvcf-api/values.yaml
@@ -250,9 +250,9 @@ api:
     # Release automation moves these keys when a worker releases. Set the
     # matching configData.nvcf.sidecars entry to replace a whole reference.
     workerImageTags:
-      init: "1.3.1"
+      init: "1.3.2"
       utils: "1.4.2"
-      llmCredentials: "1.1.2"
+      llmCredentials: "1.2.2"
     # Can be used for remote configuration by adding NVCF-specific properties here. 
     # Add only the keys you need to override.
     # Placeholders like ${nvcf.sidecars.hostname} resolve from environment variables,
diff --git a/deploy/helm/cloud-tasks/nvct-api/Chart.yaml b/deploy/helm/cloud-tasks/nvct-api/Chart.yaml
index 76f62290e4..2fe6e01c10 100644
--- a/deploy/helm/cloud-tasks/nvct-api/Chart.yaml
+++ b/deploy/helm/cloud-tasks/nvct-api/Chart.yaml
@@ -4,4 +4,4 @@ description: NCP Compatible deployment of NVCT API (nvct-service)
 
 type: application
 version: 0.0.0 # autoversioning enabled via release pipeline
-appVersion: "1.69.8"
+appVersion: "1.70.2"
diff --git a/deploy/helm/cloud-tasks/nvct-api/values.yaml b/deploy/helm/cloud-tasks/nvct-api/values.yaml
index ff45db562a..f990963116 100644
--- a/deploy/helm/cloud-tasks/nvct-api/values.yaml
+++ b/deploy/helm/cloud-tasks/nvct-api/values.yaml
@@ -3,7 +3,7 @@ nvctApi:
     registry: "" # must be supplied
     repository: "" # must be supplied
     pullPolicy: IfNotPresent
-    tag: "1.69.8"
+    tag: "1.70.2"
 
   # Namespace to deploy the resources. The default value is the release namespace.
   namespace: ""
@@ -111,8 +111,8 @@ nvctApi:
     # Release automation moves these keys when a worker releases. Set the
     # matching configData.nvct.sidecars entry to replace a whole reference.
     workerImageTags:
-      init: "1.3.1"
-      task: "1.2.2"
+      init: "1.3.2"
+      task: "1.2.3"
     # Can be used for remote configuration by adding NVCT-specific properties here.
     # Add only the keys you need to override.
     # Placeholders like ${nvct.sidecars.hostname} resolve from environment variables
diff --git a/deploy/helm/event-ledger/Chart.yaml b/deploy/helm/event-ledger/Chart.yaml
index d426e1da65..d8eb796a30 100644
--- a/deploy/helm/event-ledger/Chart.yaml
+++ b/deploy/helm/event-ledger/Chart.yaml
@@ -21,4 +21,4 @@ type: application
 
 version: 0.0.0 # autoversioning enabled via release pipeline
 
-appVersion: "0.19.0"
+appVersion: "0.21.0"
diff --git a/deploy/helm/event-ledger/values.yaml b/deploy/helm/event-ledger/values.yaml
index daabc425fe..344bea664c 100644
--- a/deploy/helm/event-ledger/values.yaml
+++ b/deploy/helm/event-ledger/values.yaml
@@ -37,7 +37,7 @@ eventLedger:
     # Image name is chart-owned and appended to registry/repository.
     name: "nvcf-event-ledger"
     pullPolicy: IfNotPresent
-    tag: "0.19.0"
+    tag: "0.21.0"
     digest: ""
 
   imagePullSecrets: []
diff --git a/deploy/helm/grpc-proxy/grpc-proxy/Chart.yaml b/deploy/helm/grpc-proxy/grpc-proxy/Chart.yaml
index 7f3427a1de..3096ae209a 100644
--- a/deploy/helm/grpc-proxy/grpc-proxy/Chart.yaml
+++ b/deploy/helm/grpc-proxy/grpc-proxy/Chart.yaml
@@ -20,4 +20,4 @@ description: Colocated gRPC proxy for NCP deployments
 type: application
 
 version: 0.0.0 # autoversioning enabled via release pipeline
-appVersion: "1.35.0"
+appVersion: "1.35.1"
diff --git a/deploy/helm/grpc-proxy/grpc-proxy/values.yaml b/deploy/helm/grpc-proxy/grpc-proxy/values.yaml
index 54e4ce6375..7ff65d5c94 100644
--- a/deploy/helm/grpc-proxy/grpc-proxy/values.yaml
+++ b/deploy/helm/grpc-proxy/grpc-proxy/values.yaml
@@ -36,7 +36,7 @@ grpcproxy:
 
     pullPolicy: IfNotPresent
 
-    tag: "1.35.0"
+    tag: "1.35.1"
 
   # Image pull secrets for private registries
   imagePullSecrets: []
diff --git a/deploy/helm/nvca-operator/nvca-operator/values.yaml b/deploy/helm/nvca-operator/nvca-operator/values.yaml
index 8ff17b655a..a3713d83b9 100644
--- a/deploy/helm/nvca-operator/nvca-operator/values.yaml
+++ b/deploy/helm/nvca-operator/nvca-operator/values.yaml
@@ -37,7 +37,7 @@ nvcaImage:
 otelCollector:
   enabled: false
   imageRepository: ""
-  imageTag: 0.160.0-nv-0.4.7
+  imageTag: 0.160.0-nv-0.4.8
   resources:
     limits:
       cpu: 1000m
@@ -307,7 +307,7 @@ agent:
   ## @param agent.byooOtelCollector.imageTag BYOO OpenTelemetry Collector image tag.
   byooOtelCollector:
     imageRepository: ""
-    imageTag: "0.160.0-nv-0.4.7"
+    imageTag: "0.160.0-nv-0.4.8"
   ## @param agent.byooFluentBit.imageRepository Optional BYOO Fluent Bit image repository, including the registry. If unset, NVCA uses its built-in upstream Fluent Bit image.
   ## @param agent.byooFluentBit.imageTag BYOO Fluent Bit image tag. Required when agent.byooFluentBit.imageRepository is set.
   byooFluentBit:
@@ -429,7 +429,7 @@ helmManaged:
   otelCollector:
     enabled: false
     imageRepository: ""
-    imageTag: 0.160.0-nv-0.4.7
+    imageTag: 0.160.0-nv-0.4.8
 ## @section Self Managed NVCF Backend Configuration
 ## Only used when ngcConfig.clusterSource is "self-managed"
 ## All values below are under the 'selfManaged:' key, e.g. 'selfManaged.nvcaVersion'
@@ -455,7 +455,7 @@ selfManaged:
   otelCollector:
     enabled: false
     imageRepository: ""
-    imageTag: 0.160.0-nv-0.4.7
+    imageTag: 0.160.0-nv-0.4.8
   ## @param selfManaged.icmsServiceURL (REQUIRED for self-managed clusters) URL of the ICMS service. Set the endpoint generated during cluster registration.
   icmsServiceURL: ""
   ## @param selfManaged.icmsServiceHostHeaderOverride Optional Host header override for selfManaged.icmsServiceURL.
diff --git a/deploy/helm/openbao/helm/Chart.yaml b/deploy/helm/openbao/helm/Chart.yaml
index 5684b3a033..5e732beeed 100644
--- a/deploy/helm/openbao/helm/Chart.yaml
+++ b/deploy/helm/openbao/helm/Chart.yaml
@@ -19,7 +19,7 @@ description: OpenBao self-managed deployment
 type: application
 
 version: 0.0.0 # managed by semantic-release
-appVersion: 2.6.3-nv-1.3.6
+appVersion: 2.6.3-nv-1.3.7
 
 dependencies:
   - name: openbao
diff --git a/deploy/helm/openbao/helm/values.yaml b/deploy/helm/openbao/helm/values.yaml
index 2f1adee24f..86826d49ce 100644
--- a/deploy/helm/openbao/helm/values.yaml
+++ b/deploy/helm/openbao/helm/values.yaml
@@ -56,7 +56,7 @@ openbao:
     image:
       registry: ""
       repository: ""
-      tag: 0.23.0
+      tag: 0.23.1
       pullPolicy: IfNotPresent
     issuerDiscovery:
       enabled: false
@@ -84,7 +84,7 @@ openbao:
     image:
       registry: ""
       repository: ""
-      tag: 2.6.3-nv-1.3.6
+      tag: 2.6.3-nv-1.3.7
       pullPolicy: IfNotPresent
 
     podManagementPolicy: Parallel
@@ -289,5 +289,5 @@ openbao:
     agentImage:
       registry: ""
       repository: ""
-      tag: 2.6.3-nv-1.3.6
+      tag: 2.6.3-nv-1.3.7
       pullPolicy: IfNotPresent
diff --git a/deploy/helm/openbao/upgrade/values-upgrades.yaml b/deploy/helm/openbao/upgrade/values-upgrades.yaml
index 31b3c8c1e0..bfdd06c738 100644
--- a/deploy/helm/openbao/upgrade/values-upgrades.yaml
+++ b/deploy/helm/openbao/upgrade/values-upgrades.yaml
@@ -4,7 +4,7 @@
 openbao:
   server:
     image:
-      tag: 2.6.3-nv-1.3.6
+      tag: 2.6.3-nv-1.3.7
 
     # Update auto-unseal sidecar to match server version
     extraContainers:
@@ -52,4 +52,4 @@ openbao:
 
   injector:
     agentImage:
-      tag: 2.6.3-nv-1.3.6
+      tag: 2.6.3-nv-1.3.7
diff --git a/deploy/helm/vanity-gateway/helm-nvcf-vanity-gateway/Chart.yaml b/deploy/helm/vanity-gateway/helm-nvcf-vanity-gateway/Chart.yaml
index c6b853db6e..b0d1553eec 100644
--- a/deploy/helm/vanity-gateway/helm-nvcf-vanity-gateway/Chart.yaml
+++ b/deploy/helm/vanity-gateway/helm-nvcf-vanity-gateway/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "1.42.0"
+appVersion: "1.42.1"
 description: Helm chart for the NVCF Vanity Gateway
 name: helm-nvcf-vanity-gateway
 type: application
diff --git a/deploy/stacks/nvcf-compute-plane/environments/base.yaml b/deploy/stacks/nvcf-compute-plane/environments/base.yaml
index 796a9c5664..86b4960844 100644
--- a/deploy/stacks/nvcf-compute-plane/environments/base.yaml
+++ b/deploy/stacks/nvcf-compute-plane/environments/base.yaml
@@ -80,7 +80,7 @@ global:
     # Set it only when the collector is published outside global.image.
     byooOtelCollector:
       # imageRepository: <registry>/<repository>/byoo-otel-collector
-      imageTag: "0.160.0-nv-0.4.7"
+      imageTag: "0.160.0-nv-0.4.8"
     # BYOO Fluent Bit log collector. enabled turns on the BYOOFluentBit NVCA
     # feature gate, which adds a Fluent Bit sidecar to BYOO workloads that
     # export logs. It needs BYOObservability, which observability.profile
@@ -109,7 +109,7 @@ global:
         # Self-hosted registries do not always mirror this optional image.
         # Enable it only after publishing the collector in global.image.
         enabled: false
-        imageTag: "0.160.0-nv-0.4.7"
+        imageTag: "0.160.0-nv-0.4.8"
       # ICMS (SIS) service URL: required; set per environment.
       icmsServiceURL: ""
       icmsServiceHostHeaderOverride: ""
diff --git a/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/deployment.yaml b/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/deployment.yaml
index ae5cbbfaa5..592b6035b3 100644
--- a/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/deployment.yaml
+++ b/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/deployment.yaml
@@ -95,7 +95,7 @@ spec:
         - name: OTEL_COLLECTOR_IMAGE_REPO
           value: "nvcr.io/0651155215864979/ncp-dev/nvcf-otel-collector"
         - name: OTEL_COLLECTOR_IMAGE_TAG
-          value: "0.160.0-nv-0.4.7"
+          value: "0.160.0-nv-0.4.8"
         - name: OTEL_COLLECTOR_RESOURCES_B64
           value: "eyJsaW1pdHMiOnsiY3B1IjoiMTAwMG0iLCJtZW1vcnkiOiIxR2kifSwicmVxdWVzdHMiOnsiY3B1IjoiMjAwbSIsIm1lbW9yeSI6IjI1Nk1pIn19"
         - name: OPERATOR_NAMESPACE
@@ -127,9 +127,9 @@ spec:
           - --nvca-cache-mount-options
           - "ro,norecovery,nouuid"
           - --function-env-overrides-b64
-          - "eyJCWU9PX0ZMVUVOVEJJVF9DT05UQUlORVIiOiJkb2NrZXIuaW8vZmx1ZW50L2ZsdWVudC1iaXQ6My4yIiwiQllPT19PVEVMX0NPTExFQ1RPUl9DT05UQUlORVIiOiJudmNyLmlvLzA2NTExNTUyMTU4NjQ5NzkvbmNwLWRldi9ieW9vLW90ZWwtY29sbGVjdG9yOjAuMTYwLjAtbnYtMC40LjcifQ=="
+          - "eyJCWU9PX0ZMVUVOVEJJVF9DT05UQUlORVIiOiJkb2NrZXIuaW8vZmx1ZW50L2ZsdWVudC1iaXQ6My4yIiwiQllPT19PVEVMX0NPTExFQ1RPUl9DT05UQUlORVIiOiJudmNyLmlvLzA2NTExNTUyMTU4NjQ5NzkvbmNwLWRldi9ieW9vLW90ZWwtY29sbGVjdG9yOjAuMTYwLjAtbnYtMC40LjgifQ=="
           - --task-env-overrides-b64
-          - "eyJCWU9PX0ZMVUVOVEJJVF9DT05UQUlORVIiOiJkb2NrZXIuaW8vZmx1ZW50L2ZsdWVudC1iaXQ6My4yIiwiQllPT19PVEVMX0NPTExFQ1RPUl9DT05UQUlORVIiOiJudmNyLmlvLzA2NTExNTUyMTU4NjQ5NzkvbmNwLWRldi9ieW9vLW90ZWwtY29sbGVjdG9yOjAuMTYwLjAtbnYtMC40LjcifQ=="
+          - "eyJCWU9PX0ZMVUVOVEJJVF9DT05UQUlORVIiOiJkb2NrZXIuaW8vZmx1ZW50L2ZsdWVudC1iaXQ6My4yIiwiQllPT19PVEVMX0NPTExFQ1RPUl9DT05UQUlORVIiOiJudmNyLmlvLzA2NTExNTUyMTU4NjQ5NzkvbmNwLWRldi9ieW9vLW90ZWwtY29sbGVjdG9yOjAuMTYwLjAtbnYtMC40LjgifQ=="
         image: nvcr.io/0651155215864979/ncp-dev/nvca-operator:3.18.6
         imagePullPolicy: IfNotPresent
         securityContext:
diff --git a/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/self-managed-nvcfbackend-cm.yaml b/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/self-managed-nvcfbackend-cm.yaml
index 75a9de4888..a7e3554246 100644
--- a/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/self-managed-nvcfbackend-cm.yaml
+++ b/deploy/stacks/nvcf-compute-plane/testdata/golden/local/02-nvca.yaml-nvca-operator/helm-nvca-operator/templates/self-managed-nvcfbackend-cm.yaml
@@ -23,7 +23,7 @@ metadata:
     release-artifact-nvca-image: "nvcr.io/0651155215864979/ncp-dev/nvca:3.18.6"
     release-artifact-nvcf-image-credential-helper-image: "nvcr.io/0651155215864979/ncp-dev/nvcf-image-credential-helper:0.11.4"
     release-artifact-samba-image: "nvcr.io/0651155215864979/ncp-dev/samba:1.0.9"
-    release-artifact-byoo-otel-collector-image: "nvcr.io/0651155215864979/ncp-dev/byoo-otel-collector:0.160.0-nv-0.4.7"
+    release-artifact-byoo-otel-collector-image: "nvcr.io/0651155215864979/ncp-dev/byoo-otel-collector:0.160.0-nv-0.4.8"
   labels:
     helm.sh/chart: helm-nvca-operator-1.37.2
     app.kubernetes.io/name: nvca-operator
@@ -65,7 +65,7 @@ data:
       enabled: false
       imageConfig:
         repository: "nvcr.io/0651155215864979/ncp-dev/nvcf-otel-collector"
-        tag: "0.160.0-nv-0.4.7"
+        tag: "0.160.0-nv-0.4.8"
     agent:
       natsURL: "nats://nats.nats-system.svc.cluster.local:4222"
       helmReValStageOAuthTokenURL: ""