diff --git a/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml b/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml
index 3eafb8c45..15192c330 100644
--- a/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml
+++ b/clusters/cl01tl/manifests/booklore/Deployment-booklore.yaml
@@ -50,7 +50,7 @@ spec:
               value: "6060"
             - name: SWAGGER_ENABLED
               value: "false"
-          image: ghcr.io/booklore-app/booklore:v1.13.2
+          image: ghcr.io/booklore-app/booklore:v1.14.1
           imagePullPolicy: IfNotPresent
           name: main
           resources:
diff --git a/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml b/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
index d88709f8c..e7e9cbb00 100644
--- a/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
+++ b/clusters/cl01tl/manifests/code-server/Deployment-code-server.yaml
@@ -46,7 +46,7 @@ spec:
           envFrom:
             - secretRef:
                 name: codeserver-password-secret
-          image: ghcr.io/linuxserver/code-server:4.106.3@sha256:83793e4460090d6c46f4842ff6ab8aa26ad8a567885112bbe754b45c61935055
+          image: ghcr.io/linuxserver/code-server:4.107.0@sha256:0d48d3a48b7db214556bea453ed371f0d295130fb5c3d43534aedb41627446f2
           imagePullPolicy: IfNotPresent
           name: main
           resources:
diff --git a/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-meilisearch-environment.yaml b/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-meilisearch-environment.yaml
index cfdea44c3..805436ecf 100644
--- a/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-meilisearch-environment.yaml
+++ b/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-meilisearch-environment.yaml
@@ -3,10 +3,10 @@ kind: ConfigMap
 metadata:
   name: gitea-meilisearch-environment
   labels:
-    helm.sh/chart: meilisearch-0.18.0
+    helm.sh/chart: meilisearch-0.19.0
     app.kubernetes.io/name: meilisearch
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "v1.29.0"
+    app.kubernetes.io/version: "v1.30.0"
     app.kubernetes.io/component: search-engine
     app.kubernetes.io/part-of: meilisearch
     app.kubernetes.io/managed-by: Helm
diff --git a/clusters/cl01tl/manifests/gitea/PersistentVolumeClaim-gitea-meilisearch.yaml b/clusters/cl01tl/manifests/gitea/PersistentVolumeClaim-gitea-meilisearch.yaml
index 7ae648bed..09cabe9b6 100644
--- a/clusters/cl01tl/manifests/gitea/PersistentVolumeClaim-gitea-meilisearch.yaml
+++ b/clusters/cl01tl/manifests/gitea/PersistentVolumeClaim-gitea-meilisearch.yaml
@@ -3,10 +3,10 @@ apiVersion: v1
 metadata:
   name: gitea-meilisearch
   labels:
-    helm.sh/chart: meilisearch-0.18.0
+    helm.sh/chart: meilisearch-0.19.0
     app.kubernetes.io/name: meilisearch
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "v1.29.0"
+    app.kubernetes.io/version: "v1.30.0"
     app.kubernetes.io/component: search-engine
     app.kubernetes.io/part-of: meilisearch
     app.kubernetes.io/managed-by: Helm
diff --git a/clusters/cl01tl/manifests/gitea/Pod-gitea-meilisearch-test-connection.yaml b/clusters/cl01tl/manifests/gitea/Pod-gitea-meilisearch-test-connection.yaml
index e1b0ee4ed..401a65dee 100644
--- a/clusters/cl01tl/manifests/gitea/Pod-gitea-meilisearch-test-connection.yaml
+++ b/clusters/cl01tl/manifests/gitea/Pod-gitea-meilisearch-test-connection.yaml
@@ -4,7 +4,7 @@ metadata:
   name: gitea-meilisearch-test-connection
   labels:
     app.kubernetes.io/name: meilisearch
-    helm.sh/chart: meilisearch-0.18.0
+    helm.sh/chart: meilisearch-0.19.0
     app.kubernetes.io/instance: gitea
     app.kubernetes.io/managed-by: Helm
   annotations:
diff --git a/clusters/cl01tl/manifests/gitea/Service-gitea-meilisearch.yaml b/clusters/cl01tl/manifests/gitea/Service-gitea-meilisearch.yaml
index f4d2d8840..35b95a346 100644
--- a/clusters/cl01tl/manifests/gitea/Service-gitea-meilisearch.yaml
+++ b/clusters/cl01tl/manifests/gitea/Service-gitea-meilisearch.yaml
@@ -3,10 +3,10 @@ kind: Service
 metadata:
   name: gitea-meilisearch
   labels:
-    helm.sh/chart: meilisearch-0.18.0
+    helm.sh/chart: meilisearch-0.19.0
     app.kubernetes.io/name: meilisearch
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "v1.29.0"
+    app.kubernetes.io/version: "v1.30.0"
     app.kubernetes.io/component: search-engine
     app.kubernetes.io/part-of: meilisearch
     app.kubernetes.io/managed-by: Helm
diff --git a/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-meilisearch.yaml b/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-meilisearch.yaml
index f758ba42f..9eec005ef 100644
--- a/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-meilisearch.yaml
+++ b/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-meilisearch.yaml
@@ -3,10 +3,10 @@ kind: ServiceAccount
 metadata:
   name: gitea-meilisearch
   labels:
-    helm.sh/chart: meilisearch-0.18.0
+    helm.sh/chart: meilisearch-0.19.0
     app.kubernetes.io/name: meilisearch
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "v1.29.0"
+    app.kubernetes.io/version: "v1.30.0"
     app.kubernetes.io/component: search-engine
     app.kubernetes.io/part-of: meilisearch
     app.kubernetes.io/managed-by: Helm
diff --git a/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-meilisearch.yaml b/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-meilisearch.yaml
index fd7197e31..e72a2e35f 100644
--- a/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-meilisearch.yaml
+++ b/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-meilisearch.yaml
@@ -4,10 +4,10 @@ metadata:
   name: gitea-meilisearch
   namespace: gitea
   labels:
-    helm.sh/chart: meilisearch-0.18.0
+    helm.sh/chart: meilisearch-0.19.0
     app.kubernetes.io/name: meilisearch
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "v1.29.0"
+    app.kubernetes.io/version: "v1.30.0"
     app.kubernetes.io/component: search-engine
     app.kubernetes.io/part-of: meilisearch
     app.kubernetes.io/managed-by: Helm
diff --git a/clusters/cl01tl/manifests/gitea/StatefulSet-gitea-meilisearch.yaml b/clusters/cl01tl/manifests/gitea/StatefulSet-gitea-meilisearch.yaml
index 94c076dc0..49b95ecfa 100644
--- a/clusters/cl01tl/manifests/gitea/StatefulSet-gitea-meilisearch.yaml
+++ b/clusters/cl01tl/manifests/gitea/StatefulSet-gitea-meilisearch.yaml
@@ -3,10 +3,10 @@ kind: StatefulSet
 metadata:
   name: gitea-meilisearch
   labels:
-    helm.sh/chart: meilisearch-0.18.0
+    helm.sh/chart: meilisearch-0.19.0
     app.kubernetes.io/name: meilisearch
     app.kubernetes.io/instance: gitea
-    app.kubernetes.io/version: "v1.29.0"
+    app.kubernetes.io/version: "v1.30.0"
     app.kubernetes.io/component: search-engine
     app.kubernetes.io/part-of: meilisearch
     app.kubernetes.io/managed-by: Helm
@@ -20,15 +20,15 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: meilisearch-0.18.0
+        helm.sh/chart: meilisearch-0.19.0
         app.kubernetes.io/name: meilisearch
         app.kubernetes.io/instance: gitea
-        app.kubernetes.io/version: "v1.29.0"
+        app.kubernetes.io/version: "v1.30.0"
         app.kubernetes.io/component: search-engine
         app.kubernetes.io/part-of: meilisearch
         app.kubernetes.io/managed-by: Helm
       annotations:
-        checksum/config: 0dcdfebbe9f0558f0a01c68e43d6ae46a5d6da6a1df0b04b4272cc4bd66a3c20
+        checksum/config: ba12cd39231aea0d6d2aaf47a345c3a877553132986a6a55e59b318d7da313bb
     spec:
       serviceAccountName: gitea-meilisearch
       securityContext:
@@ -45,7 +45,7 @@ spec:
             claimName: gitea-meilisearch
       containers:
         - name: meilisearch
-          image: "getmeili/meilisearch:v1.29.0"
+          image: "getmeili/meilisearch:v1.30.0"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml b/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
index 7cefe7afc..b79c2385d 100644
--- a/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
+++ b/clusters/cl01tl/manifests/home-assistant/Deployment-home-assistant.yaml
@@ -46,7 +46,7 @@ spec:
           envFrom:
             - secretRef:
                 name: home-assistant-code-server-password-secret
-          image: ghcr.io/linuxserver/code-server:4.106.3@sha256:83793e4460090d6c46f4842ff6ab8aa26ad8a567885112bbe754b45c61935055
+          image: ghcr.io/linuxserver/code-server:4.107.0@sha256:0d48d3a48b7db214556bea453ed371f0d295130fb5c3d43534aedb41627446f2
           imagePullPolicy: IfNotPresent
           name: code-server
           resources:
diff --git a/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml b/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml
index f3a662315..6342640d2 100644
--- a/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml
+++ b/clusters/cl01tl/manifests/matrix-synapse/StatefulSet-mautrix-whatsapp.yaml
@@ -67,7 +67,7 @@ spec:
               readOnly: true
               subPath: mautrix-whatsapp-registration.yaml
       containers:
-        - image: dock.mau.dev/mautrix/whatsapp:v0.2511.0
+        - image: dock.mau.dev/mautrix/whatsapp:v0.2512.0
           imagePullPolicy: IfNotPresent
           name: main
           resources:
diff --git a/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-qui.yaml b/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-qui.yaml
index 348892c7d..ad28fa9d0 100644
--- a/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-qui.yaml
+++ b/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-qui.yaml
@@ -59,7 +59,7 @@ spec:
               value: https://qui.alexlebens.net/api/auth/oidc/callback
             - name: QUI__OIDC_DISABLE_BUILT_IN_LOGIN
               value: "false"
-          image: ghcr.io/autobrr/qui:v1.9.1
+          image: ghcr.io/autobrr/qui:v1.10.0
           imagePullPolicy: IfNotPresent
           name: qui
           resources:
diff --git a/clusters/cl01tl/manifests/s3-exporter/ServiceMonitor-s3-exporter-garage-remote.yaml b/clusters/cl01tl/manifests/s3-exporter/ServiceMonitor-s3-exporter-garage-remote.yaml
index 89ec457a2..486c63f3e 100644
--- a/clusters/cl01tl/manifests/s3-exporter/ServiceMonitor-s3-exporter-garage-remote.yaml
+++ b/clusters/cl01tl/manifests/s3-exporter/ServiceMonitor-s3-exporter-garage-remote.yaml
@@ -16,5 +16,5 @@ spec:
   endpoints:
     - port: metrics
       interval: 5m
-      scrapeTimeout: 120s
+      scrapeTimeout: 5m
       path: /metrics
diff --git a/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml b/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml
index 0f3dcfcca..48db3ef4b 100644
--- a/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml
+++ b/clusters/cl01tl/manifests/tailscale-operator/CustomResourceDefinition-recorders.tailscale.com.yaml
@@ -68,6 +68,11 @@ spec:
                     Corresponds to --ui tsrecorder flag https://tailscale.com/kb/1246/tailscale-ssh-session-recording#deploy-a-recorder-node.
                     Required if S3 storage is not set up, to ensure that recordings are accessible.
                   type: boolean
+                replicas:
+                  description: Replicas specifies how many instances of tsrecorder to run. Defaults to 1.
+                  type: integer
+                  format: int32
+                  minimum: 0
                 statefulSet:
                   description: |-
                     Configuration parameters for the Recorder's StatefulSet. The operator
@@ -1683,6 +1688,9 @@ spec:
                   items:
                     type: string
                     pattern: ^tag:[a-zA-Z][a-zA-Z0-9-]*$
+              x-kubernetes-validations:
+                - rule: '!(self.replicas > 1 && (!has(self.storage) || !has(self.storage.s3)))'
+                  message: S3 storage must be used when deploying multiple Recorder replicas
             status:
               description: |-
                 RecorderStatus describes the status of the recorder. This is set
diff --git a/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml b/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml
index ab239dd16..1e7e98447 100644
--- a/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml
+++ b/clusters/cl01tl/manifests/tailscale-operator/Deployment-operator.yaml
@@ -16,13 +16,9 @@ spec:
         app: operator
     spec:
       serviceAccountName: operator
-      volumes:
-        - name: oauth
-          secret:
-            secretName: operator-oauth
       containers:
         - name: operator
-          image: tailscale/k8s-operator:v1.90.9
+          image: tailscale/k8s-operator:v1.92.3
           imagePullPolicy: Always
           env:
             - name: OPERATOR_INITIAL_TAGS
@@ -41,12 +37,8 @@ spec:
               value:
             - name: OPERATOR_INGRESS_CLASS_NAME
               value: tailscale
-            - name: CLIENT_ID_FILE
-              value: /oauth/client_id
-            - name: CLIENT_SECRET_FILE
-              value: /oauth/client_secret
             - name: PROXY_IMAGE
-              value: tailscale/tailscale:v1.90.9
+              value: tailscale/tailscale:v1.92.3
             - name: PROXY_TAGS
               value: tag:k8s
             - name: APISERVER_PROXY
@@ -63,9 +55,5 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.uid
-          volumeMounts:
-            - name: oauth
-              mountPath: /oauth
-              readOnly: true
       nodeSelector:
         kubernetes.io/os: linux
diff --git a/clusters/cl01tl/manifests/unpoller/Deployment-unpoller.yaml b/clusters/cl01tl/manifests/unpoller/Deployment-unpoller.yaml
index a3b827a12..4af88f0b4 100644
--- a/clusters/cl01tl/manifests/unpoller/Deployment-unpoller.yaml
+++ b/clusters/cl01tl/manifests/unpoller/Deployment-unpoller.yaml
@@ -64,7 +64,7 @@ spec:
           envFrom:
             - secretRef:
                 name: unpoller-unifi-secret
-          image: ghcr.io/unpoller/unpoller:v2.18.0
+          image: ghcr.io/unpoller/unpoller:v2.19.0
           imagePullPolicy: IfNotPresent
           name: main
           resources: