diff --git a/MODULE.bazel b/MODULE.bazel
index aaa91c88..411803cb 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -2,7 +2,7 @@
 
 bazel_dep(name = "gazelle", version = "0.54.0")
 bazel_dep(name = "contrib_rules_jvm", version = "0.34.0")
-bazel_dep(name = "rules_go", version = "0.64.1")
+bazel_dep(name = "rules_go", version = "0.64.2")
 bazel_dep(name = "rules_java", version = "9.9.0")
 bazel_dep(name = "rules_jvm_external", version = "7.1")
 bazel_dep(name = "rules_pkg", version = "1.3.0")
diff --git a/MODULE.bazel.lock b/MODULE.bazel.lock
index a324efe6..3c995836 100644
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -194,8 +194,8 @@
     "https://bcr.bazel.build/modules/rules_go/0.52.0/MODULE.bazel": "0cf080a2706aa8fc9abf64286cee60fdf0238db37b7f1793b0f7d550d59ea3ae",
     "https://bcr.bazel.build/modules/rules_go/0.53.0/MODULE.bazel": "a4ed760d3ac0dbc0d7b967631a9a3fd9100d28f7d9fcf214b4df87d4bfff5f9a",
     "https://bcr.bazel.build/modules/rules_go/0.59.0/MODULE.bazel": "b7e43e7414a3139a7547d1b4909b29085fbe5182b6c58cbe1ed4c6272815aeae",
-    "https://bcr.bazel.build/modules/rules_go/0.64.1/MODULE.bazel": "fed5606cfca6cf9e90618318f7d3d37451a9b2f2b61dc33b82917ebe2fd42396",
-    "https://bcr.bazel.build/modules/rules_go/0.64.1/source.json": "04fe02350ffc3b4564f72ff2fb346631ef7c3faf91fe3b28d6babdeebbe32d6e",
+    "https://bcr.bazel.build/modules/rules_go/0.64.2/MODULE.bazel": "178287400ec88bc4e20c048b5cf9b8e619d9879eb6118592f8572e49d5342c74",
+    "https://bcr.bazel.build/modules/rules_go/0.64.2/source.json": "322caa7c76104d7c03d5b3cc097836b47ab20c5f14b92b6c6bdcffe6a2e732d2",
     "https://bcr.bazel.build/modules/rules_java/4.0.0/MODULE.bazel": "5a78a7ae82cd1a33cef56dc578c7d2a46ed0dca12643ee45edbb8417899e6f74",
     "https://bcr.bazel.build/modules/rules_java/5.3.5/MODULE.bazel": "a4ec4f2db570171e3e5eb753276ee4b389bae16b96207e9d3230895c99644b86",
     "https://bcr.bazel.build/modules/rules_java/6.0.0/MODULE.bazel": "8a43b7df601a7ec1af61d79345c17b31ea1fedc6711fd4abfd013ea612978e39",
@@ -1067,162 +1067,162 @@
           "6f1b08de9e2dd94f69c52e524ab6834737275253291e8fd7f1c12ed4eceeda89"
         ]
       },
-      "1.27.1": {
+      "1.27.2": {
         "aix_ppc64": [
-          "go1.27.1.aix-ppc64.tar.gz",
-          "43b4827f082b94b7b6de28a49dd80df268e06935fd82a1b57aab3a772343bf6c"
+          "go1.27.2.aix-ppc64.tar.gz",
+          "8b3032f55f4deee212dd5c4b8fcb605c47d60f57d4d2218670dd1372c2a66edc"
         ],
         "darwin_amd64": [
-          "go1.27.1.darwin-amd64.tar.gz",
-          "8f8f52c6649542cf027bbc9b9c68d1ec042f9f34808a40413f0b8b3f66f3caa4"
+          "go1.27.2.darwin-amd64.tar.gz",
+          "587b59182488b23aa6e5fc25110405a3e0e5b38ed2f5b2f46ed13c32aee356fe"
         ],
         "darwin_arm64": [
-          "go1.27.1.darwin-arm64.tar.gz",
-          "ee215d57e0ec269c60cc9ceca68e6bda321ba9ee5afe24f4b0988703c2d87d12"
+          "go1.27.2.darwin-arm64.tar.gz",
+          "76812b213b1b2302c978d28fa52fa92d541704b9e7d9d5db8002c50e4018c4c5"
         ],
         "dragonfly_amd64": [
-          "go1.27.1.dragonfly-amd64.tar.gz",
-          "bda1f327b9a792be80da856a3ea8f92cbfd138a3991e0a97049ee4d4904196a2"
+          "go1.27.2.dragonfly-amd64.tar.gz",
+          "c9827ed9d91477541c18de54bc0ad3776d4a506aac629d3878113316da5bca4e"
         ],
         "freebsd_386": [
-          "go1.27.1.freebsd-386.tar.gz",
-          "a01f190a079150ada777fcd1a7fb27ab1a98caf9f09b2411b2ffb7e9486e0030"
+          "go1.27.2.freebsd-386.tar.gz",
+          "ebbee6bf21224ca07bcb0309e81fe24bb4464a1a12b944bbe2c7b6daf0f2bd13"
         ],
         "freebsd_amd64": [
-          "go1.27.1.freebsd-amd64.tar.gz",
-          "9761194512938a640948ae5ba273df73a441f4229ea21a1503937e55c69bf107"
+          "go1.27.2.freebsd-amd64.tar.gz",
+          "3baf61eec549b0c3f638d82636388e36abf94aa14814a011f011d2648ad1eded"
         ],
         "freebsd_arm": [
-          "go1.27.1.freebsd-arm.tar.gz",
-          "e5b55c9f6646373c221f8384cee60321128e7f48b42da3b7da7bce3fae44a88c"
+          "go1.27.2.freebsd-arm.tar.gz",
+          "278367bc98bfb6278f712d0a6a83f940ca1f78b5bf6d053054600023c2e1711c"
         ],
         "freebsd_arm64": [
-          "go1.27.1.freebsd-arm64.tar.gz",
-          "8b155a723a584fb29125c6b36fc9cb0d5489a3f7fb76670508a2c51af718074d"
+          "go1.27.2.freebsd-arm64.tar.gz",
+          "b77d9b8aa9cde90e1045a13f6166e46e370ef7225556e9c2043d351c59557ecb"
         ],
         "illumos_amd64": [
-          "go1.27.1.illumos-amd64.tar.gz",
-          "ed04719b94b176745e08847f48d8a9e92b49330f2ff4ca2cf34e1b66cb5fd682"
+          "go1.27.2.illumos-amd64.tar.gz",
+          "8d6494436a062af7cdf18812e7534bdbe8391b626ad327bf9bbff5f393b14dbd"
         ],
         "linux_386": [
-          "go1.27.1.linux-386.tar.gz",
-          "3b72028095439d2bc0ce84e271cc70328a878d879020c5721eaa46df5f72fbc0"
+          "go1.27.2.linux-386.tar.gz",
+          "93dae4b7f463ed1e9c65e05561ce9fc5f7cd5c4ffca5e336248d48f3a2eab5fc"
         ],
         "linux_amd64": [
-          "go1.27.1.linux-amd64.tar.gz",
-          "63d339f0da5ab53635a56f2490a7984dfe12dfcff22ad749f63edaf590168445"
+          "go1.27.2.linux-amd64.tar.gz",
+          "ecbadb99091a3f46e31f5f934b068b1864eafa7995211b39eaddf76996045fe5"
         ],
         "linux_arm64": [
-          "go1.27.1.linux-arm64.tar.gz",
-          "3450b45a3f9ee8568792736a5c5e70a1f2e9b36c35a8f74958c03e51d7d92bec"
+          "go1.27.2.linux-arm64.tar.gz",
+          "94f3e30b8e374bc285e7dadc11e0865726b9bc6e85b841ccceaabc0214c6b7c8"
         ],
         "linux_armv6l": [
-          "go1.27.1.linux-armv6l.tar.gz",
-          "44893f200fb034791d4188df9fc9b9e73eadbb5fceafd5166703f0b9bab73fc2"
+          "go1.27.2.linux-armv6l.tar.gz",
+          "e25a174051d8675f87ac720aedcd25bf89ac652c4b82f26aa47919524725ed95"
         ],
         "linux_loong64": [
-          "go1.27.1.linux-loong64.tar.gz",
-          "a3df3db12e0b16d932bbfd3f6025473faf8bfeb13ea2177de5e8fac1d4124b7f"
+          "go1.27.2.linux-loong64.tar.gz",
+          "b49a3b2f090934ca588c7a897d64bc12f844348a2cd35e301d8f4f50eaf3bfdb"
         ],
         "linux_mips": [
-          "go1.27.1.linux-mips.tar.gz",
-          "a6e637864e6801408d2d8d7f5d429b90bf8854ac320eb70778f4ac36e9b8e889"
+          "go1.27.2.linux-mips.tar.gz",
+          "c3efcee917835d706a60dff89a1f18a3edd9b29b1c7bfb8386ecfb9cacdd38af"
         ],
         "linux_mips64": [
-          "go1.27.1.linux-mips64.tar.gz",
-          "ba3d2d4969d901cdf15d930f0cbcaa761da9d4c98386a6a26d4a82cdf596aa9f"
+          "go1.27.2.linux-mips64.tar.gz",
+          "bafd19c6c20b63029e6840b3d42aa4cb0f9265ed676bb506728d59dbd3a662bf"
         ],
         "linux_mips64le": [
-          "go1.27.1.linux-mips64le.tar.gz",
-          "23f9b4ce864764849ca792d8cf6bd8e00880ef3c6070a2717509f8d3f6059ba5"
+          "go1.27.2.linux-mips64le.tar.gz",
+          "f1702dad3fb818510eb499e338dae52a2951af2096af3bc41f9e126bb1fa2dbd"
         ],
         "linux_mipsle": [
-          "go1.27.1.linux-mipsle.tar.gz",
-          "06cfb6c5528a54d53580c6390efea9ad0362322518bc32129ea6c0145f1e6a23"
+          "go1.27.2.linux-mipsle.tar.gz",
+          "c324d5a82a24e01f0215ee2bf15ebb75f01d6b51d550487ecec508f5a006926a"
         ],
         "linux_ppc64": [
-          "go1.27.1.linux-ppc64.tar.gz",
-          "e91dee51bdfa08e034d9ed4016929a2008f179caa004922d637a97d5cda05778"
+          "go1.27.2.linux-ppc64.tar.gz",
+          "56e5bb33414b28338bb4ba980621428cf25485acc430f52ce7fc77be41d1e50a"
         ],
         "linux_ppc64le": [
-          "go1.27.1.linux-ppc64le.tar.gz",
-          "ad1ff83c24f783c2d4a025852b928a05c199e8742a14a5482d88de0293d2bd0d"
+          "go1.27.2.linux-ppc64le.tar.gz",
+          "059d5f01b1607a724ea5ae87c5589041a51c577a6f3f20099e49d00f31c803fa"
         ],
         "linux_riscv64": [
-          "go1.27.1.linux-riscv64.tar.gz",
-          "62287667ee5e5f540f30fb9b7529a27fe582f22c6bfd726ece9b045f4c54ee61"
+          "go1.27.2.linux-riscv64.tar.gz",
+          "420f3b8dac8b5a9d11f51e12b496ac27f02ab31cbe495067e355ed43b9fe3aa1"
         ],
         "linux_s390x": [
-          "go1.27.1.linux-s390x.tar.gz",
-          "c9e1ad7bddea40e2eb10b4d3267ae06d462667839bf0ba94c2e2d160b06f9b9e"
+          "go1.27.2.linux-s390x.tar.gz",
+          "dfd01d1e08e4dbece2cd91e259953f87b858752037fd151da2f674c4fa09aeef"
         ],
         "netbsd_386": [
-          "go1.27.1.netbsd-386.tar.gz",
-          "6bde412641300348cc571cfcf3384071934c5005c8057325e29763963107b932"
+          "go1.27.2.netbsd-386.tar.gz",
+          "a93ea6e895479b57a188bd77ea02106c668fb0c961554566b89c4b0cb1d0f2c9"
         ],
         "netbsd_amd64": [
-          "go1.27.1.netbsd-amd64.tar.gz",
-          "4ace14c14e7c6eb1d06890433afe81f8c2dc746d1d5f4df3ae6d2d7dd0481ba2"
+          "go1.27.2.netbsd-amd64.tar.gz",
+          "a096f13c8fa9f44783e2361dcd9f472bb045187f67749e03e4e8d8ed83fd702b"
         ],
         "netbsd_arm": [
-          "go1.27.1.netbsd-arm.tar.gz",
-          "da7db485266e309cca263bcad95197d2c21e747e14698bc1d95704e9939fd07a"
+          "go1.27.2.netbsd-arm.tar.gz",
+          "9ff205b9bfd1d04c8e92df1d987ad8e52ae15e7482a484bff65aadce86e0f118"
         ],
         "netbsd_arm64": [
-          "go1.27.1.netbsd-arm64.tar.gz",
-          "c0ac5527cdde89e31d40e536a1cec4a8d8b2903f79e2356645c862dfab6f3181"
+          "go1.27.2.netbsd-arm64.tar.gz",
+          "d0e4ec38cd5f82ec872bc40d5780f5e604a32186490d3d67a684031557e6b4ff"
         ],
         "openbsd_386": [
-          "go1.27.1.openbsd-386.tar.gz",
-          "3434ae1ef067666d4df50f883e985a49e7589d6004a412329e7684ff80f40852"
+          "go1.27.2.openbsd-386.tar.gz",
+          "67d95a9e13ea442fda463de7808cfd64720adc9e7d9f026c59438b6e23ace90b"
         ],
         "openbsd_amd64": [
-          "go1.27.1.openbsd-amd64.tar.gz",
-          "db0566b3b3ddf6eda09cb3434a9401eb2583ffa539475e45592812813f11c792"
+          "go1.27.2.openbsd-amd64.tar.gz",
+          "ab74a2b31761a8c34e9a1059b0f9c82a7db42780fde4e35bac270758d45816a1"
         ],
         "openbsd_arm": [
-          "go1.27.1.openbsd-arm.tar.gz",
-          "5423e99d338cf9ccebbfce0e373095e63b62fbedd7a1b99436bb7e0f3184069c"
+          "go1.27.2.openbsd-arm.tar.gz",
+          "98f772157d04c620a64bc1f1d5dd56b19cfd17b3558d70184c4199c337f2b571"
         ],
         "openbsd_arm64": [
-          "go1.27.1.openbsd-arm64.tar.gz",
-          "953142ae3734098e65118ddca29ed2f469a85f039a78a1572da98ba271042e65"
+          "go1.27.2.openbsd-arm64.tar.gz",
+          "befd66f13c7bd83fa3fa794a3deec5a1d6b5bf64817afbedaf258b10257f875c"
         ],
         "openbsd_ppc64": [
-          "go1.27.1.openbsd-ppc64.tar.gz",
-          "93e32d7c0ba24e56f5f75aed454e9301c7204605c11508d65ecb39356c221106"
+          "go1.27.2.openbsd-ppc64.tar.gz",
+          "275bd022cfaf4ae75503e63dd62d011eb25603ecc8e70a3ae894aa9b4a009889"
         ],
         "openbsd_riscv64": [
-          "go1.27.1.openbsd-riscv64.tar.gz",
-          "1683c8e86157739bfee080d38919750366aeed8fe77576b0798460a2f06d6b98"
+          "go1.27.2.openbsd-riscv64.tar.gz",
+          "cfd833a4bdb3df1bf3b8c643d1b73688914b7ca4dfbab55f321be91cd9793890"
         ],
         "plan9_386": [
-          "go1.27.1.plan9-386.tar.gz",
-          "7dbc261ab5c1100581427aa009964c142abb46520af6a31f6ff761b0f0a61f33"
+          "go1.27.2.plan9-386.tar.gz",
+          "84700a14ea5191a367a0c25a559c43e00c18c3b4ad06f23785c4ea37f8d7ae65"
         ],
         "plan9_amd64": [
-          "go1.27.1.plan9-amd64.tar.gz",
-          "fc546629513ba62403657d2355b3982b7ff59934fec5ca0cde32e18d9f2b65b9"
+          "go1.27.2.plan9-amd64.tar.gz",
+          "92538ce012a70b178da919058b26a176fb544385c02697554df66020e7034938"
         ],
         "plan9_arm": [
-          "go1.27.1.plan9-arm.tar.gz",
-          "5e420ef8837a708246a7959bf56b1b6c6ca765c4f16dd953b4e09290d9cd4b53"
+          "go1.27.2.plan9-arm.tar.gz",
+          "ea646470026be77de143628f296207e0493d3792b03fea8ba386dd033fedeea1"
         ],
         "solaris_amd64": [
-          "go1.27.1.solaris-amd64.tar.gz",
-          "7efd1b6d470ea724db178f17d3bd1b66931e2aa79c4389fe75228f2aef6014a4"
+          "go1.27.2.solaris-amd64.tar.gz",
+          "2dd0520f3c547ef32a81165335df330392930916bbfdd28a6a398aae41f0d17d"
         ],
         "windows_386": [
-          "go1.27.1.windows-386.zip",
-          "1670510496778ee976de09c91b7960f76cb7dbf90968cfea98bb51fa80c9de91"
+          "go1.27.2.windows-386.zip",
+          "b41f5abfa012399752aea010839c8fd1f66283cd0ea83c864a7a9693ceff8fae"
         ],
         "windows_amd64": [
-          "go1.27.1.windows-amd64.zip",
-          "a3911b5e0e1b1053f25ed0675f4c1c6aad1e2bfcf253df2b9be4caabd2edd95d"
+          "go1.27.2.windows-amd64.zip",
+          "1314008898bd40df77af4b014f777f08873dbdfbcd3d92308728ee03304fe04f"
         ],
         "windows_arm64": [
-          "go1.27.1.windows-arm64.zip",
-          "13b69b87bb0e83f96bc68560a8cace7f0343b1e03469f1110ea18d17e3234069"
+          "go1.27.2.windows-arm64.zip",
+          "5c4b294f23b558619ae8a4aa94d023e3bca03f52c8398bb41b9026002b0013de"
         ]
       }
     }
diff --git a/go.MODULE.bazel b/go.MODULE.bazel
index fb9e7921..441f461b 100644
--- a/go.MODULE.bazel
+++ b/go.MODULE.bazel
@@ -1,8 +1,8 @@
 go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
 
-go_sdk.download(version = "1.27.1")
+go_sdk.download(version = "1.27.2")
 go_sdk.download(
-    version = "1.27.1",
+    version = "1.27.2",
     goarch = "amd64",
     goos = "linux",
 )
diff --git a/infra/.terraform.lock.hcl b/infra/.terraform.lock.hcl
index bf082bcb..94a38b9f 100644
--- a/infra/.terraform.lock.hcl
+++ b/infra/.terraform.lock.hcl
@@ -57,40 +57,40 @@ provider "registry.terraform.io/cloudflare/cloudflare" {
 }
 
 provider "registry.terraform.io/hashicorp/aws" {
-  version     = "6.67.0"
-  constraints = "6.67.0"
+  version     = "6.68.0"
+  constraints = "6.68.0"
   hashes = [
-    "h1:01Y50Z+67vWZmsW9e8FQTj9NT/XW+x1n0YGdz2x4BpY=",
-    "h1:6dffiL4BGVg+Ac2/64N+svhucYstBnVTTu55hWEhmq8=",
-    "h1:8kRViFkyn96SufnuV3Oi3QmfL+DiyxlhAPcSX2jH0T0=",
-    "h1:EAfdlvAeLCxhO9G5nnZ6Ti1zsmQP1aClgS41rneOijY=",
-    "h1:EB9ixYOZrSlYD7wtJxf88qwoyyWrlKDKxhzaCLIb3t4=",
-    "h1:Ksjd+RJVccOFRlbg3gpoJjL7T3SMPHxso2dPzAVTyRE=",
-    "h1:OgdIUAQDtJBxlKjoPgChD1w57vl6hm6PyJHiBYgsgQA=",
-    "h1:Syy68cIDOz7sXpxhjrkCwNHvmOj9VeaLVTJ/XnUKSuU=",
-    "h1:Tz5wi4X4Gkj2I1Gif4MOtfrj4JerCz+5KqSi6Xj+n/A=",
-    "h1:XaBXhLvtX5lUYkv5fHKzzMfoZXaIh5zU8hvM4jG2TXI=",
-    "h1:fOwuAcOFTGOU0GY1m4NHhDgTAdTSiU+9qZ+REdp5HIU=",
-    "h1:gyduBRrLO8EiRf8zA1aiLRoWydrUMw+TG0pUbOXo1g4=",
-    "h1:iDfjW95J79sAMaOxeln73bKerm9SBemvLTrKepODumw=",
-    "h1:xH+es0QQOteWlNptLqZzI6k8y94Aq/11S7lozotvO2c=",
-    "h1:zLmFaFw5LptpWftHL3O6+7uykOH/0F9AmyVQ7V6kslY=",
-    "zh:111d5686a1f4ccbc888bb5e2229308bcdd9149898c6af97969fcdfb0e7bd2aa0",
-    "zh:21b3b7693bd9754c039fd546f03ed09e7510c6189aa5ee37176f144cf8dd5f95",
-    "zh:25e03c7f025ff4851889537605aa560d2e39bd738b33a5204b8037eb164b475f",
-    "zh:2817a046f1060e25bf04b0eb78f4e251130bb92dc82ec1264ce156dc9bf78e67",
-    "zh:2d318d674c3ec9dbd97ddb10b12ad4827be4f508c43ba2ae1e0523baa9e367e3",
-    "zh:2f07ab356718267299e10b6072472ded29d82753883027bf43bcd687ac72feb2",
-    "zh:32307e67f83bc0dc94d38cfcd23d782166a09e0e975e2a5aa7d7a3e7ca5d3da8",
-    "zh:4ce94853264097dd7f4542b3cfd18d2b98b06d23321db45d5e384ea275a57f63",
-    "zh:869656c41cc7c7412f213e488f98167cff61deafcb8cf245d25d056e8dfdc263",
-    "zh:8fd8c814e9d8edf152552047db23bf5b5d63f22e6b0b5d47b2af851376e99349",
+    "h1:6ITxS7UfM9IS36P6fkwOW/vTfm/WiUDnf+AZx48EisQ=",
+    "h1:6YzsGQUD8UXHOsBduNJ7t9XJtxP1I7efxCcjF4Jn/rg=",
+    "h1:79hHQtjGSCiXBZK+VDiNUdI2SLXbNaHf+CHySvKFnvA=",
+    "h1:HBG/xsnu+720umEWjTuqOf9bdpOrtyEbUubikNyFOhY=",
+    "h1:HfVMSkITkPci35ZMj/zuADhVZVFo+CnLsKThFb3H1m8=",
+    "h1:KC6Fw8KtgrF6o03xgsY/aCgVrgeQWoy9jEBmUwwqNc0=",
+    "h1:MUtKTstr8IZX0sLVvT352DySkrFO5N55XgKWKL6suMI=",
+    "h1:SyHeRgZ4GWMf6vrf/7MX8dvSkHCR8Wb4hSOyFDMz0sc=",
+    "h1:YkefCNpbQhKqb9xxcBVmO/lINM6Ygn7YgiS88UJXmXQ=",
+    "h1:ZtEyrPda1rX+TiUf/93fAxfC+n7oTtz2uxixbanPYsc=",
+    "h1:dpmBGkMEoVqJ0b9tX4Sv2c/s4oFS66huai+o8D8yBI0=",
+    "h1:ifRWJ3t5ukuSL3C5UFbcFQgGJoniiCTEaUANmmj5598=",
+    "h1:rB2Amjxr32AZWeWsDMQyU61xmW8IvSAUXhv4ogvx9l4=",
+    "h1:s5EXu9EtGfnLR3ebHoIyZBLRYMPcRL9zcfx/NKi+Q9o=",
+    "h1:vySJQSPLR6oS5XzqpoG4L9j3mEyg6iHNdWOxEtHmPPw=",
+    "zh:064ed007a33a22d8367db88b18d56a4dd066f07f95b1a4d80ffa2b6ee803f6f0",
+    "zh:20ede4bb730b55023ad426ed13b1b4b295fac4bcc2baa4fb63d2932aa15d760d",
+    "zh:490cffbc315ba21f740158a6b4195e7707ec2ee7ed357a47bb90ed18466f01a2",
+    "zh:7840197f73f53d676373c9aeabccd79c61c6da6e4aa1ed840e57ca46c1894126",
+    "zh:889b15a5c2f7fb168c04c846e75932a6b2ceb7967c3bfa0a0e24be16cdee7969",
+    "zh:96ba7624b6f0e0a1fa5477b0838194be919d815d30ce7f97e04d4520cca4c00b",
     "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425",
-    "zh:9cbc02ceef9bd469da497a1e7065ff984bdacfbe919ac3cce804a86c13b6e2c6",
-    "zh:9ea55dda2767acfc1f6337fc7d29b1d4d79d6f8f04871f8ad99a6078d2865994",
-    "zh:d7149df0819fb57a160489db45d33951765b8f0118daa3b4cd549a0135bc97a1",
-    "zh:e5819937bb7043d08c9829b32d52d9fb55a5b9a4d8d55d550d47a3d7392db546",
-    "zh:f93bc38dbc0ad53842303f30eec7a22c525c4d56209b54ec33a8d375cfc4e4fd",
+    "zh:9b41c2afe2fec1a1880f9427b3ca611abfe6643b41942556a83cd7daae55acf1",
+    "zh:a83e9d46de040fa7bc56f7aa53bdeb8d7078bac65d9155b07022fd75723308b8",
+    "zh:aa5cfdd2faf8a2848c72c13ca88786b857fd397aa713967b8b1f9610f2c76a0b",
+    "zh:abd449fbf38cf828b8b17bc8540752733dd861160504a45b411e72e1792c758c",
+    "zh:b2511842cb6b23036c72babbaf12b4984835bb2824f938882330b51c68bdaecd",
+    "zh:c11e8860c4d611dda93da2e5be27c9bd2599da6ad320f3d12ccc714ffbe6f100",
+    "zh:e4252ceda8641bfe85ad7710b428f994c080bde6c55043ab47a08015432cebdc",
+    "zh:f292ad91c97ac7354a04a698f346c2a0c3866d9170ca45dda6a6bfab71180be0",
+    "zh:f4d293cd0e9562bfa1ba32a1fe5c3652c6a32b951e44081158737d4075696045",
   ]
 }
 
diff --git a/infra/containers/sonarr/sonarr.MODULE.bazel b/infra/containers/sonarr/sonarr.MODULE.bazel
index b05bb2a4..04de06ad 100644
--- a/infra/containers/sonarr/sonarr.MODULE.bazel
+++ b/infra/containers/sonarr/sonarr.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/sonarr
 oci.pull(
     name = "sonarr",
-    digest = "sha256:f247545d23ba8b233d6604575347e48a623fe6ad75dda02348bf81917f3b5c06",
+    digest = "sha256:dffc730adcb8b4f4342792fbb27fcad9c62fb8660523f2aeb082416980d7fe0c",
     image = "docker.io/linuxserver/sonarr",
     platforms = [
         "linux/amd64",
diff --git a/infra/containers/wireguard/wireguard.MODULE.bazel b/infra/containers/wireguard/wireguard.MODULE.bazel
index c37194b5..0ecb6523 100644
--- a/infra/containers/wireguard/wireguard.MODULE.bazel
+++ b/infra/containers/wireguard/wireguard.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/wireguard
 oci.pull(
     name = "wireguard",
-    digest = "sha256:216ca1ce9da7bfe26fb752111d952487804bd18933bbd4794970d424bf8adfe9",
+    digest = "sha256:437a490f7afc6969434251351ba47455a3829e71cef9c6172f3f533332d04063",
     image = "docker.io/linuxserver/wireguard",
     platforms = [
         "linux/amd64",
diff --git a/infra/main.tf b/infra/main.tf
index e956b729..2a690933 100644
--- a/infra/main.tf
+++ b/infra/main.tf
@@ -16,7 +16,7 @@ terraform {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.67.0"
+      version = "6.68.0"
     }
     cloudflare = {
       source  = "cloudflare/cloudflare"
diff --git a/java.MODULE.bazel b/java.MODULE.bazel
index 495a6a9b..0d3651d5 100644
--- a/java.MODULE.bazel
+++ b/java.MODULE.bazel
@@ -14,7 +14,7 @@ JETTY_VERSION = "12.1.14"
 JERSEY_VERSION = "5.0.0-M1"
 
 # renovate: datasource=maven depName=org.flywaydb:flyway-core
-FLYWAY_VERSION = "13.9.0"
+FLYWAY_VERSION = "13.10.0"
 
 # renovate: datasource=maven depName=com.fasterxml.jackson:jackson-bom
 JACKSON_VERSION = "2.22.3"
@@ -23,7 +23,7 @@ JACKSON_VERSION = "2.22.3"
 JOOQ_VERSION = "3.21.9"
 
 # renovate: datasource=maven depName=org.postgresql:postgresql
-POSTGRES_VERSION = "42.7.13"
+POSTGRES_VERSION = "42.7.14"
 
 # renovate: datasource=maven depName=org.assertj:assertj-core
 ASSERTJ_VERSION = "3.27.7"
@@ -65,10 +65,10 @@ maven.install(
 
         "com.typesafe:config:1.4.9",
 
-        "org.flywaydb:flyway-core:13.9.0",
-        "org.flywaydb:flyway-database-postgresql:13.9.0",
+        "org.flywaydb:flyway-core:13.10.0",
+        "org.flywaydb:flyway-database-postgresql:13.10.0",
 
-        "org.postgresql:postgresql:42.7.13",
+        "org.postgresql:postgresql:42.7.14",
         "com.zaxxer:HikariCP:7.1.0",
     ],
     fetch_sources = True,