diff --git a/deploy/helm/icms/icms-api/Chart.yaml b/deploy/helm/icms/icms-api/Chart.yaml
index 6d73101ec4..d39405cb1a 100644
--- a/deploy/helm/icms/icms-api/Chart.yaml
+++ b/deploy/helm/icms/icms-api/Chart.yaml
@@ -19,4 +19,4 @@ description: A Helm chart for Spot Instance Service (SIS) deployment
 
 type: application
 version: 0.0.0 # set by CI. found in git tags.
-appVersion: "0.7.2"
+appVersion: "0.8.3"
diff --git a/deploy/helm/icms/icms-api/values.yaml b/deploy/helm/icms/icms-api/values.yaml
index 707ad2b64b..d46e56beba 100644
--- a/deploy/helm/icms/icms-api/values.yaml
+++ b/deploy/helm/icms/icms-api/values.yaml
@@ -72,7 +72,7 @@ sis:
     pullPolicy: IfNotPresent
     # Pin the runtime image tag because the chart release pipeline rewrites
     # Chart.appVersion to the chart version.
-    tag: "0.7.2"
+    tag: "0.8.3"
     # Optional immutable manifest digest. When set, this takes precedence over
     # `tag` and `Chart.AppVersion`.
     digest: ""
diff --git a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
index c2a693d724..4265f0f5e6 100644
--- a/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/01-dependencies.yaml.gotmpl
@@ -167,7 +167,7 @@ releases:
 {{- end }}
 
   - name: cassandra
-    version: 0.21.3
+    version: 0.22.0
     condition: cassandra.enabled # From defaults.yaml or env overrides
     namespace: cassandra-system
     <<: *dependency # Inherits base values from the dependency template
diff --git a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
index 238c0ade99..716f5c5b3e 100644
--- a/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
+++ b/deploy/stacks/self-managed/helmfile.d/02-core.yaml.gotmpl
@@ -60,20 +60,20 @@ releases:
 
   # --- NVCF Services ---
   - name: api-keys
-    version: 1.8.0
+    version: 1.9.0
     namespace: api-keys
     inherit:
       - template: service
 
   - name: sis
-    version: 2.4.0
+    version: 2.5.0
     namespace: sis
     inherit:
       - template: service
     condition: icms.enabled
 
   - name: api
-    version: 1.27.1
+    version: 1.28.0
     namespace: nvcf
     inherit:
       - template: service
@@ -94,7 +94,7 @@ releases:
       - nvcf/reval
 
   - name: nvct-api
-    version: 1.6.0
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
@@ -114,7 +114,7 @@ releases:
       - nvcf/api
 
   - name: invocation-service
-    version: 1.6.1
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
@@ -122,7 +122,7 @@ releases:
       - nvcf/api
 
   - name: grpc-proxy
-    version: 1.7.4
+    version: 1.8.0
     namespace: nvcf
     inherit:
       - template: service
@@ -131,7 +131,7 @@ releases:
 
   - name: ratelimiter
     chart: nvcf/helm-nvcf-rate-limiter
-    version: 1.2.1
+    version: 1.3.0
     namespace: nvcf
     condition: rateLimiter.enabled
     values:
@@ -142,20 +142,20 @@ releases:
       - nvcf/api
 
   - name: ess-api
-    version: 1.8.2
+    version: 1.9.0
     namespace: ess
     inherit:
       - template: service
 
   - name: notary-service
-    version: 1.6.0
+    version: 1.7.0
     namespace: nvcf
     inherit:
       - template: service
 
   - name: admin-issuer-proxy
     chart: nvcf/helm-admin-token-issuer-proxy
-    version: 1.5.3
+    version: 1.6.0
     namespace: api-keys
     values:
       - ../global.yaml.gotmpl
@@ -187,7 +187,7 @@ releases:
 
   - name: reval
     chart: nvcf/helm-reval
-    version: 1.4.1
+    version: 1.5.0
     namespace: nvcf
     values:
       - ../global.yaml.gotmpl
@@ -196,7 +196,7 @@ releases:
 
   - name: nats-auth-callout-service
     chart: nvcf/helm-nvcf-nats-auth-callout-service
-    version: 1.2.1
+    version: 1.3.0
     namespace: nats-system
     values:
       - ../global.yaml.gotmpl
@@ -245,7 +245,7 @@ releases:
 
   - name: llm-api-gateway
     chart: nvcf/helm-nvcf-llm-api-gateway
-    version: 1.4.3
+    version: 1.5.0
     namespace: nvcf
     condition: addons.llm.enabled
     values: