diff --git a/roles/bookstack/defaults/main.yml b/roles/bookstack/defaults/main.yml
index ded13ed..27046d2 100644
--- a/roles/bookstack/defaults/main.yml
+++ b/roles/bookstack/defaults/main.yml
@@ -1,11 +1,11 @@
 ---
 
 # Version to deploy
-bookstack_version: '22.11.1'
+bookstack_version: '23.01'
 # URL of the arhive
 bookstack_archive_url: https://github.com/BookStackApp/BookStack/archive/v{{ bookstack_version }}.tar.gz
 # Expected sha256 of the archive
-bookstack_archive_sha256: b5110588684e8a0fdcca5bb08d7ae0558a73a2a3bf8abbbad2b947e6d2f3bc4c
+bookstack_archive_sha256: d1c3dd2247030113b5602838704ea6320e6ef2e26bf7172944a7601972d30f0f
 
 # Should ansible handle bookstack upgrades or just the inintial install
 bookstack_manage_upgrade: True
@@ -72,6 +72,9 @@ bookstack_session_lifetime: 480
 # PDF Exporter. Can be either dompdf (the default) or wkhtmltopdf
 bookstack_pdf_exporter: dompdf
 
+# Attachments size limit (in MB)
+bookstack_file_upload_size_limit: 25
+
 # You can set custom directive with this:
 # bookstack_settings:
 #   AUTH_METHOD: saml2
diff --git a/roles/bookstack/templates/env.j2 b/roles/bookstack/templates/env.j2
index 69090f3..440b479 100644
--- a/roles/bookstack/templates/env.j2
+++ b/roles/bookstack/templates/env.j2
@@ -31,3 +31,4 @@ QUEUE_CONNECTION=database
 WKHTMLTOPDF=/usr/local/bin/wkhtmltopdf
 ALLOW_UNTRUSTED_SERVER_FETCHING=true
 {% endif %}
+FILE_UPLOAD_SIZE_LIMIT={{ bookstack_file_upload_size_limit }}
diff --git a/roles/diagrams/defaults/main.yml b/roles/diagrams/defaults/main.yml
index f6ffe62..0eccdbb 100644
--- a/roles/diagrams/defaults/main.yml
+++ b/roles/diagrams/defaults/main.yml
@@ -1,11 +1,11 @@
 ---
 
 # Veresion of diagrams to deploy
-diagrams_version: 20.7.4
+diagrams_version: 20.8.13
 # URL of the WAR file to deploy
 diagrams_war_url: https://github.com/jgraph/drawio/releases/download/v{{ diagrams_version }}/draw.war
 # Expected sha256 of the WAR file
-diagrams_war_sha256: 67219941033c7bf8c68dc15affd30c503fbfb2e174d6a29559ce7cf89becfa30
+diagrams_war_sha256: a69663bf53d2f72f6c1c57739c83dad243ca2e3d15ff62186ad9f9527b3e665a
 # root directory of the installation
 diagrams_root_dir: /opt/diagrams
 # Should ansible manage upgrades, or just initial install ?
diff --git a/roles/matrix_element/defaults/main.yml b/roles/matrix_element/defaults/main.yml
index 81eb0ce..e09b663 100644
--- a/roles/matrix_element/defaults/main.yml
+++ b/roles/matrix_element/defaults/main.yml
@@ -5,8 +5,8 @@
 element_id: element
 
 # Version to deploy, and expected sha256
-element_version: 1.11.20
-element_archive_sha256: a856e854d404f5bfd69cf344b5ea7c77a93ac7d37554af2c00f6cb383abac77f
+element_version: 1.11.21
+element_archive_sha256: 996571e2a7b37ef7044926f672b134b23c7cb5d6a6e4aefb1ad62c61e29b9538
 
 # Where to install element
 element_root_dir: /opt/matrix/element