diff --git a/base/hasura/deployment.yaml b/base/hasura/deployment.yaml
index afe2f5f..47fdcc4 100644
--- a/base/hasura/deployment.yaml
+++ b/base/hasura/deployment.yaml
@@ -44,7 +44,7 @@ spec:
                   matchLabels:
                     app: hasura
       containers:
-        - image: hasura/graphql-engine:v2.51.3-ce.cli-migrations-v3@sha256:fc93e226608dcd44fa57968d74f8ed1854d7075825d1f8655fa0c9f2a6a9846d
+        - image: hasura/graphql-engine:v2.51.4-ce.cli-migrations-v3@sha256:30491255c0698c1c7ec7013a6cee3d6e9343b30da63bdfe1b8fc50cd526d1bb1
           name: hasura
           # The cli-migrations entrypoint starts a temporary graphql-engine to
           # apply metadata, then kills it. On Ubuntu 26.04's kernel, containerd's
diff --git a/base/rustfs/stateful-set.yaml b/base/rustfs/stateful-set.yaml
index cd66ae1..9a387c0 100644
--- a/base/rustfs/stateful-set.yaml
+++ b/base/rustfs/stateful-set.yaml
@@ -107,7 +107,7 @@ spec:
         # drive it -- the admin routes answer in a shape mc will not parse. The
         # bootstrap runs from RustFS's own rc client instead.
         - name: bootstrap
-          image: rustfs/rc:v0.1.36
+          image: rustfs/rc:v0.1.37
           command:
             - /bin/sh
             - -c
diff --git a/tests/gateway/lib.sh b/tests/gateway/lib.sh
index 43fd7d5..58c457c 100644
--- a/tests/gateway/lib.sh
+++ b/tests/gateway/lib.sh
@@ -9,8 +9,8 @@
 HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 TEST_ROOT="${TEST_ROOT:-$(cd "$HERE/../.." && pwd)}"
 PREFIX="${PREFIX:-gateway-test}"
-K3S_IMAGE=rancher/k3s:v1.36.5-k3s1@sha256:057cfd5a9d51b89f1f0ee139c28d5d5fdd5aa7ddeac2742a0ba90c6dbc0329bb
-PYTHON_IMAGE=python:3.13.18-alpine3.24@sha256:bbc0290146ebe0a8b9a8ed07d3f2c7bdeb4d917fc93300a4e47490c8b5a11b48
+K3S_IMAGE=rancher/k3s:v1.37.2-k3s1@sha256:21ea6e0fac4e3930c2ce8aa40ddd41a8b18cb3e9a0222c030dc005e7e88c4332
+PYTHON_IMAGE=python:3.15.2-alpine3.24@sha256:20a82dbc2783112ddb91d1534603f802d222a3e63e593cd002eb2ac534e70211
 DOMAIN=5stack.test
 WORK_DIR="$(mktemp -d "${TMPDIR:-/tmp}/gateway-test.XXXXXX")"
 PANEL_DIR="$WORK_DIR/panel"