diff --git a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
index c2a693d724..4265f0f5e6 100644
--- a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
@@ -167,7 +167,7 @@ releases:
 {{- end }}
 
   - name: cassandra
-    version: 0.21.3
+    version: 0.22.0
     condition: cassandra.enabled # From defaults.yaml or env overrides
     namespace: cassandra-system
     <<: *dependency # Inherits base values from the dependency template
diff --git a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
index 238c0ade99..f4a9f2f0f9 100644
--- a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
@@ -60,20 +60,20 @@ releases:
 
   # --- NVCF Services ---
   - name: api-keys
-    version: 1.8.0
+    version: 1.9.0
     namespace: api-keys
     inherit:
       - template: service
 
   - name: sis
-    version: 2.4.0
+    version: 2.5.0
     namespace: sis
     inherit:
       - template: service
     condition: icms.enabled
 
   - name: api
-    version: 1.27.1
+    version: 1.28.0
     namespace: nvcf
     inherit:
       - template: service
@@ -94,7 +94,7 @@ releases:
       - nvcf/reval
 
   - name: nvct-api
-    version: 1.6.0
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
@@ -114,7 +114,7 @@ releases:
       - nvcf/api
 
   - name: invocation-service
-    version: 1.6.1
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
@@ -122,7 +122,7 @@ releases:
       - nvcf/api
 
   - name: grpc-proxy
-    version: 1.7.4
+    version: 1.8.0
     namespace: nvcf
     inherit:
       - template: service
@@ -131,7 +131,7 @@ releases:
 
   - name: ratelimiter
     chart: nvcf/helm-nvcf-rate-limiter
-    version: 1.2.1
+    version: 1.3.0
     namespace: nvcf
     condition: rateLimiter.enabled
     values:
@@ -142,20 +142,20 @@ releases:
       - nvcf/api
 
   - name: ess-api
-    version: 1.8.2
+    version: 1.9.0
     namespace: ess
     inherit:
       - template: service
 
   - name: notary-service
-    version: 1.6.0
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
 
   - name: admin-issuer-proxy
     chart: nvcf/helm-admin-token-issuer-proxy
-    version: 1.5.3
+    version: 1.6.0
     namespace: api-keys
     values:
       - ../global.yaml.gotmpl
@@ -187,7 +187,7 @@ releases:
 
   - name: reval
     chart: nvcf/helm-reval
-    version: 1.4.1
+    version: 1.5.0
     namespace: nvcf
     values:
       - ../global.yaml.gotmpl
@@ -196,7 +196,7 @@ releases:
 
   - name: nats-auth-callout-service
     chart: nvcf/helm-nvcf-nats-auth-callout-service
-    version: 1.2.1
+    version: 1.3.0
     namespace: nats-system
     values:
       - ../global.yaml.gotmpl
@@ -232,7 +232,7 @@ releases:
     {{- $llmRequestRouterChartPath := dig "addons" "llm" "requestRouter" "chartPath" "" .Values }}
     chart: {{ $llmRequestRouterChartPath | default "nvcf/helm-nvcf-llm-request-router" | quote }}
     {{- if not $llmRequestRouterChartPath }}
-    version: 1.14.1
+    version: 1.15.0
     {{- end }}
     namespace: nvcf
     condition: addons.llm.enabled
@@ -245,7 +245,7 @@ releases:
 
   - name: llm-api-gateway
     chart: nvcf/helm-nvcf-llm-api-gateway
-    version: 1.4.3
+    version: 1.5.0
     namespace: nvcf
     condition: addons.llm.enabled
     values:
@@ -281,7 +281,7 @@ releases:
     {{- $gatewayRoutesChartPath := dig "ingress" "gatewayApi" "chartPath" "" .Values }}
     chart: {{ $gatewayRoutesChartPath | default "nvcf/nvcf-gateway-routes" | quote }}
     {{- if not $gatewayRoutesChartPath }}
-    version: 1.18.2
+    version: 1.18.3
     {{- end }}
     needs:
       - nvcf/notary-service