diff --git a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
index 4265f0f5e6..221fa43379 100644
--- a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
@@ -113,7 +113,7 @@ releases:
 
   # --- NVCF NCP Dependencies ---
   - name: nats
-    version: 0.8.4
+    version: 0.8.5
     condition: nats.enabled # From defaults.yaml or env overrides
     namespace: nats-system
     <<: *dependency # Inherits base values from the dependency template
@@ -125,7 +125,7 @@ releases:
     <<: *dependency
 
   - name: openbao-server # this name MUST not change
-    version: 0.32.6
+    version: 0.33.1
     condition: openbao.enabled # From defaults.yaml or env overrides
     namespace: vault-system
     <<: *dependency # Inherits base values from the dependency template
diff --git a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
index a5efe9bee1..51e2cbc329 100644
--- a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
@@ -60,7 +60,7 @@ releases:
 
   # --- NVCF Services ---
   - name: api-keys
-    version: 1.9.0
+    version: 1.9.1
     namespace: api-keys
     inherit:
       - template: service
@@ -69,7 +69,7 @@ releases:
     {{- $sisChartPath := dig "sis" "chartPath" "" .Values }}
     chart: {{ $sisChartPath | default "nvcf/helm-nvcf-sis" | quote }}
     {{- if not $sisChartPath }}
-    version: 2.6.0
+    version: 2.6.1
     {{- end }}
     namespace: sis
     condition: icms.enabled
@@ -80,7 +80,7 @@ releases:
       release-group: services
 
   - name: api
-    version: 1.28.0
+    version: 1.28.1
     namespace: nvcf
     inherit:
       - template: service
@@ -239,7 +239,7 @@ releases:
     {{- $llmRequestRouterChartPath := dig "addons" "llm" "requestRouter" "chartPath" "" .Values }}
     chart: {{ $llmRequestRouterChartPath | default "nvcf/helm-nvcf-llm-request-router" | quote }}
     {{- if not $llmRequestRouterChartPath }}
-    version: 1.15.0
+    version: 1.15.2
     {{- end }}
     namespace: nvcf
     condition: addons.llm.enabled
@@ -285,7 +285,7 @@ releases:
 
   - name: event-ledger
     chart: nvcf/helm-nvcf-event-ledger
-    version: 0.5.0
+    version: 0.6.0
     namespace: nvcf
     condition: addons.eventLedger.enabled
     values: