diff --git a/roles/babashka/defaults/main.yml b/roles/babashka/defaults/main.yml
index 0ce49af..c1c39c7 100644
--- a/roles/babashka/defaults/main.yml
+++ b/roles/babashka/defaults/main.yml
@@ -1,8 +1,8 @@
 ---
 
 # Babashka version to deploy
-bb_version: 1.3.186
+bb_version: 1.3.188
 # URL of the archive
 bb_archive_url: https://github.com/babashka/babashka/releases/download/v{{ bb_version }}/babashka-{{ bb_version }}-linux-amd64-static.tar.gz
 # Expected sha256sum of the archive
-bb_archive_sha256: fa92d6ad5a39711a6863905bda01a37ff0ef75b646e4937128c9acc3485f1b9f
+bb_archive_sha256: 89431b0659e84a468da05ad78daf2982cbc8ea9e17f315fa2e51fecc78af7cc0
diff --git a/roles/bookstack/defaults/main.yml b/roles/bookstack/defaults/main.yml
index 52ad477..65cd19b 100644
--- a/roles/bookstack/defaults/main.yml
+++ b/roles/bookstack/defaults/main.yml
@@ -1,11 +1,11 @@
 ---
 
 # Version to deploy
-bookstack_version: '23.12'
+bookstack_version: '23.12.2'
 # URL of the arhive
 bookstack_archive_url: https://github.com/BookStackApp/BookStack/archive/v{{ bookstack_version }}.tar.gz
 # Expected sha256 of the archive
-bookstack_archive_sha256: fce344f1c9257465826715861ea0e3d5b8648ad39edde7a24ecf3060cf86e0fe
+bookstack_archive_sha256: 765450659028641019d2ef8519848da2cddbb834edc08488c92fba3988f8b6c0
 
 # Should ansible handle bookstack upgrades or just the inintial install
 bookstack_manage_upgrade: True
diff --git a/roles/consul/defaults/main.yml b/roles/consul/defaults/main.yml
index 389927e..3c0e33c 100644
--- a/roles/consul/defaults/main.yml
+++ b/roles/consul/defaults/main.yml
@@ -185,3 +185,4 @@ consul_catalog_services: "{{ consul_base_catalog_services | combine(consul_extra
 
 # Control memory of the service
 consul_memory_max: 1024M
+consul_swap_max: 10M
diff --git a/roles/consul/templates/consul.service.j2 b/roles/consul/templates/consul.service.j2
index 22f4561..e2f24d0 100644
--- a/roles/consul/templates/consul.service.j2
+++ b/roles/consul/templates/consul.service.j2
@@ -19,6 +19,7 @@ RestartSec=5
 StartLimitInterval=0
 LimitNOFILE=65536
 MemoryMax={{ consul_memory_max }}
+MemorySwapMax={{ consul_swap_max }}
 
 [Install]
 WantedBy=multi-user.target
diff --git a/roles/consul_bin/defaults/main.yml b/roles/consul_bin/defaults/main.yml
index e6f1351..722b136 100644
--- a/roles/consul_bin/defaults/main.yml
+++ b/roles/consul_bin/defaults/main.yml
@@ -1,8 +1,8 @@
 ---
 
 # Version of consul to deploy
-consul_version: 1.17.1
+consul_version: 1.17.3
 # URL from where the consul archive will be downloaded
 consul_archive_url: https://releases.hashicorp.com/consul/{{ consul_version }}/consul_{{ consul_version }}_linux_amd64.zip
 # Expected sha256 of the archive
-consul_archive_sha256: 388889321d6aaf389ee87acc247ea9885e684a1581c8ebfbeab7348abd7c0214
+consul_archive_sha256: bb71f4b9b465e314af0d98f5a6884794be9a44e930180537f0825ae9939461a4
diff --git a/roles/diagrams/defaults/main.yml b/roles/diagrams/defaults/main.yml
index a1436a4..5887a1d 100644
--- a/roles/diagrams/defaults/main.yml
+++ b/roles/diagrams/defaults/main.yml
@@ -1,11 +1,11 @@
 ---
 
 # Veresion of diagrams to deploy
-diagrams_version: 22.1.16
+diagrams_version: 23.0.0
 # URL of the WAR file to deploy
 diagrams_war_url: https://github.com/jgraph/drawio/releases/download/v{{ diagrams_version }}/draw.war
 # Expected sha256 of the WAR file
-diagrams_war_sha256: 9764be81a5d52e763efbadc5e58ecb6e9f2aebbf442a79483e693e98c084f463
+diagrams_war_sha256: 96e6264f1c8a77241e83b0f2432fac31ff4d3506b7885792e4d7ae1568680070
 # root directory of the installation
 diagrams_root_dir: /opt/diagrams
 # Should ansible manage upgrades, or just initial install ?
diff --git a/roles/etherpad/defaults/main.yml b/roles/etherpad/defaults/main.yml
index 3cb9007..eeca8dc 100644
--- a/roles/etherpad/defaults/main.yml
+++ b/roles/etherpad/defaults/main.yml
@@ -8,11 +8,11 @@ etherpad_root_dir: /opt/etherpad_{{ etherpad_id }}
 # Unix account under which etherpad will run. The user will be created if it doesn't exist
 etherpad_user: etherpad_{{ etherpad_id }}
 # Version to deploy
-etherpad_version: 1.9.4
+etherpad_version: 1.9.6
 # URL from where the archive will be downloaded
 etherpad_archive_url: https://github.com/ether/etherpad-lite/archive/{{ etherpad_version }}.tar.gz
 # Expected sha256 of the archive, to check the download were OK
-etherpad_archive_sha256: 5b8ccf2a3c92cbd9bb578f684bc52d2ea27fc3fb30cdc76341f9ccffe0c0ff7f
+etherpad_archive_sha256: cd0cb2c9c2c4a8f93972b3f5913ff00cd3733c732195df293c8f56f3ce0a018f
 # Port on which the service will listen
 etherpad_port: 9003
 # List of IP/CIDR for which the port will be opened (if iptables_manage == True)
diff --git a/roles/gitea/defaults/main.yml b/roles/gitea/defaults/main.yml
index feed550..e67194c 100644
--- a/roles/gitea/defaults/main.yml
+++ b/roles/gitea/defaults/main.yml
@@ -1,11 +1,11 @@
 ---
 
 # Version to install
-gitea_version: 1.21.3
+gitea_version: 1.21.5
 # URL to the binary
 gitea_bin_url: https://dl.gitea.io/gitea/{{ gitea_version }}/gitea-{{ gitea_version }}-linux-amd64
 # sha256 of the binary
-gitea_bin_sha256: ccf6cc2077401e382bca0d000553a781a42c9103656bd33ef32bf093cca570eb
+gitea_bin_sha256: 7a521914203b07c7a0613ae30d8ab229111b149a2fa219423e643cd9a039256e
 # Handle updates. If set to false, ansible will only install
 # Gitea and then won't touch an existing installation
 gitea_manage_upgrade: True
diff --git a/roles/glpi/defaults/main.yml b/roles/glpi/defaults/main.yml
index e8fc556..461d8e1 100644
--- a/roles/glpi/defaults/main.yml
+++ b/roles/glpi/defaults/main.yml
@@ -2,9 +2,9 @@
 
 glpi_id: 1
 glpi_manage_upgrade: True
-glpi_version: '10.0.11'
+glpi_version: '10.0.12'
 glpi_archive_url: https://github.com/glpi-project/glpi/releases/download/{{ glpi_version }}/glpi-{{ glpi_version }}.tgz
-glpi_archive_sha256: 7d2dec524e3e80d54cdaade606c9d42af1c52c413d92cdc165afdcf3ee34b72d
+glpi_archive_sha256: 7980cd5f9ab10dc234e1e42950acd42c2977e5c3da4d540ef000e9caa72cec85
 glpi_root_dir: /opt/glpi_{{ glpi_id }}
 glpi_php_user: php-glpi_{{ glpi_id }}
 # If set, will use the following custom PHP FPM pool, which must be created
diff --git a/roles/kimai/defaults/main.yml b/roles/kimai/defaults/main.yml
index 1714b2d..82e7132 100644
--- a/roles/kimai/defaults/main.yml
+++ b/roles/kimai/defaults/main.yml
@@ -5,13 +5,12 @@
 # You can set it to a number or a simple string (no special chars)
 kimai_id: 1
 # Kimai version to deploy
-kimai_version: '2.8.0'
+kimai_version: '2.11.0'
 
 # URL of the archive
 kimai_archive_url: https://github.com/kevinpapst/kimai2/archive/refs/tags/{{ kimai_version }}.tar.gz
 # Expected sha256 of the archive
-kimai_archive_sha256: 2c37aa5160ac2f1dd2c798dd02a7a29ea008e59ca6fe3c34810e9dc4a1f9e98f
-
+kimai_archive_sha256: 428f149bd10f81d254e791caf0f68ebb16d67d146f357d47c38464a664100d4f
 # Directory where kimai will be installed
 kimai_root_dir: /opt/kimai_{{ kimai_id }}
 # Should ansible handle upgrades or only initial install
diff --git a/roles/metabase/defaults/main.yml b/roles/metabase/defaults/main.yml
index f1cf540..f61c991 100644
--- a/roles/metabase/defaults/main.yml
+++ b/roles/metabase/defaults/main.yml
@@ -1,15 +1,15 @@
 ---
 
 # Version to deploy
-metabase_version: 0.47.10
+metabase_version: 0.48.6
 # URL to fetch the jar
 metabase_jar_url: https://downloads.metabase.com/v{{ metabase_version }}/metabase.jar
 # Expected sha256 of the jar
-metabase_jar_sha256: e03c247ae1192b2c17a5fd9966cbbb9c289f625b56862d1b22680ce7a452c0d2
+metabase_jar_sha256: aefb5e000abe14ff3cb4ba754c55e1da34bdaea35a77fbea3282ee32bc73978b
 # When building from source
 metabase_archive_url: https://github.com/metabase/metabase/archive/refs/tags/v{{ metabase_version }}.tar.gz
 # Expected sha256 of the archive
-metabase_archive_sha256: 4eb4bec096c23b6aeeacfee7e9f574c8aa7f946074097788dce4a21dccca544a
+metabase_archive_sha256: 3f9ac75625610849f63129fde31d0831260fc11088e26705346a0df1c265059e
 # Should ansible handle upgrades ? If set to false, only the initial install (and the config) will be handled
 metabase_manage_upgrade: True
 
diff --git a/roles/metabase/templates/metabase.service.j2 b/roles/metabase/templates/metabase.service.j2
index aa92476..46a0191 100644
--- a/roles/metabase/templates/metabase.service.j2
+++ b/roles/metabase/templates/metabase.service.j2
@@ -8,6 +8,7 @@ User={{ metabase_user }}
 WorkingDirectory={{ metabase_root_dir }}/app
 EnvironmentFile={{ metabase_root_dir }}/etc/env
 ExecStart=/usr/bin/java -Djava.net.preferIPv4Stack=true \
+            -Djava.io.tmpdir={{ metabase_root_dir }}/tmp \
 {% if system_proxy is defined and system_proxy != '' %}
             -Dhttp.proxyHost={{ system_proxy | urlsplit('hostname') }} -Dhttp.proxyPort={{ system_proxy | urlsplit('port') }} \
             -Dhttps.proxyHost={{ system_proxy | urlsplit('hostname') }} -Dhttps.proxyPort={{ system_proxy | urlsplit('port') }} \
diff --git a/roles/nomad/defaults/main.yml b/roles/nomad/defaults/main.yml
index f7cbccd..d549da8 100644
--- a/roles/nomad/defaults/main.yml
+++ b/roles/nomad/defaults/main.yml
@@ -3,8 +3,8 @@
 # List of plugins to install
 nomad_plugins:
   podman:
-    archive_url: https://releases.hashicorp.com/nomad-driver-podman/0.5.1/nomad-driver-podman_0.5.1_linux_amd64.zip
-    sha256: cef60b0dfd708ab2b5b1e517991cf933bce509a27b087c482e6993f3784dd572
+    archive_url: https://releases.hashicorp.com/nomad-driver-podman/0.5.2/nomad-driver-podman_0.5.2_linux_amd64.zip
+    sha256: e4fd4c94b429d5fe1f70086522061d0e0a217b81a5920572fbfc196973a6ce61
   containerd:
     archive_url: https://github.com/Roblox/nomad-driver-containerd/releases/download/v0.9.4/containerd-driver
     sha256: 337e1bab178071500bfbe46a59946e0e3bafc652906ed1b755d2aa4d35990982
diff --git a/roles/nomad_bin/defaults/main.yml b/roles/nomad_bin/defaults/main.yml
index 72b932b..ed26f3b 100644
--- a/roles/nomad_bin/defaults/main.yml
+++ b/roles/nomad_bin/defaults/main.yml
@@ -1,9 +1,9 @@
 ---
 
 # Version of Nomad to install
-nomad_version: 1.7.2
+nomad_version: 1.7.5
 # URL of the archive
 nomad_archive_url: https://releases.hashicorp.com/nomad/{{ nomad_version }}/nomad_{{ nomad_version }}_linux_amd64.zip
 # Expected sha256 of the archive
-nomad_archive_sha256: 5264b4f4b9a0bf8f086544f15e6a6377c856e5556bf44337c958f5356d251331
+nomad_archive_sha256: da04e002e5b12fba3713de89f5d89d1374184009d32a68b16c8791c3bed6ceb0
 
diff --git a/roles/odoo/templates/nginx.conf.j2 b/roles/odoo/templates/nginx.conf.j2
index 9450d07..f7cc3fa 100644
--- a/roles/odoo/templates/nginx.conf.j2
+++ b/roles/odoo/templates/nginx.conf.j2
@@ -40,6 +40,7 @@ server {
     proxy_set_header X-Forwarded-Proto $scheme;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_redirect off;
+    client_max_body_size 100m;
     proxy_pass http://localhost:{{ odoo_http_port }};
   }
 }
diff --git a/roles/penpot/templates/penpot-server.service.j2 b/roles/penpot/templates/penpot-server.service.j2
index 48f1d64..12a2bac 100644
--- a/roles/penpot/templates/penpot-server.service.j2
+++ b/roles/penpot/templates/penpot-server.service.j2
@@ -7,6 +7,7 @@ Type=simple
 User={{ penpot_user }}
 WorkingDirectory={{ penpot_root_dir }}/backend
 EnvironmentFile={{ penpot_root_dir }}/etc/env
+Environment=JAVA_HOME=/usr/lib/jvm/java-17
 ExecStart={{ penpot_root_dir }}/backend/run.sh
 SuccessExitStatus=143
 PrivateTmp=yes
diff --git a/roles/seafile/defaults/main.yml b/roles/seafile/defaults/main.yml
index a522527..0f555d4 100644
--- a/roles/seafile/defaults/main.yml
+++ b/roles/seafile/defaults/main.yml
@@ -11,11 +11,11 @@
 #   MaxUsers = "9"
 #   Mode = "subscription"
 #   etc...
-seafile_version: "{{ seafile_license is defined | ternary('10.0.9','11.0.3') }}"
+seafile_version: "{{ seafile_license is defined | ternary('10.0.9','11.0.5') }}"
 
 # Archive URL and sha256 are only used for the community version
 seafile_archive_url: https://s3.eu-central-1.amazonaws.com/download.seadrive.org/seafile-server_{{ seafile_version }}_x86-64.tar.gz
-seafile_archive_sha256: 72fced8581fcded3b63d64c2cc34ca22c30278e4a540d9321cb4727a566a3bf7
+seafile_archive_sha256: 47d994238519c679969a3c5591063041dc10102a6b1ac0e4d59be069c137225d
 
 seafile_root_dir: /opt/seafile
 seafile_data_dir: "{{ seafile_root_dir }}/data"
diff --git a/roles/unifi/defaults/main.yml b/roles/unifi/defaults/main.yml
index 61d3857..0229149 100644
--- a/roles/unifi/defaults/main.yml
+++ b/roles/unifi/defaults/main.yml
@@ -3,11 +3,11 @@
 # Where unifi will be installed
 unifi_root_dir: /opt/unifi
 # Version to deploy
-unifi_version: 8.0.26
+unifi_version: 8.0.28
 # URL to get the installation tarball
 unifi_archive_url: https://www.ubnt.com/downloads/unifi/{{ unifi_version }}/UniFi.unix.zip
 # Expected sha256
-unifi_archive_sha256: 1945feef7f453d8d1c992aea8c4938b9a3c89cd257b682236b164b4d061dd2a2
+unifi_archive_sha256: 8dde5bc26d00908150d37871963d11ae6660d269654a003248464c03d9a84059
 # Should ansible handle upgrades (if False, only initial install will be done)
 unifi_manage_upgrade: True
 # List of ports used by UniFi controler
diff --git a/roles/vault_bin/defaults/main.yml b/roles/vault_bin/defaults/main.yml
index 34e98cd..1c0a5fd 100644
--- a/roles/vault_bin/defaults/main.yml
+++ b/roles/vault_bin/defaults/main.yml
@@ -1,7 +1,7 @@
 # Version of Vault to install
-vault_version: 1.15.4
+vault_version: 1.15.5
 # URL of the archive
 vault_archive_url: https://releases.hashicorp.com/vault/{{ vault_version }}/vault_{{ vault_version }}_linux_amd64.zip
 # Expected sha256 of the archive
-vault_archive_sha256: f42f550713e87cceef2f29a4e2b754491697475e3d26c0c5616314e40edd8e1b
+vault_archive_sha256: 6a370c7506a48c323743b0d81ebc6a4037ba1388c9838ef45f9eada53d7966e9
 
diff --git a/roles/vaultwarden/defaults/main.yml b/roles/vaultwarden/defaults/main.yml
index 8ce6201..532c388 100644
--- a/roles/vaultwarden/defaults/main.yml
+++ b/roles/vaultwarden/defaults/main.yml
@@ -1,12 +1,12 @@
 ---
 
-vaultwarden_version: 1.30.0
+vaultwarden_version: 1.30.2
 vaultwarden_archive_url: https://github.com/dani-garcia/vaultwarden/archive/{{ vaultwarden_version }}.tar.gz
-vaultwarden_archive_sha256: b9bcb75c671b0f28ef8ff1c3aae05a5e23306aceef43f86621a5c20dc1e9516d
+vaultwarden_archive_sha256: f6aa95377d4d28d9a8d5a88e7c86255d677afe21fcce96df7d7cea0beaeea005
 
-vaultwarden_web_version: 2023.10.0
+vaultwarden_web_version: 2023.12.0
 vaultwarden_web_archive_url: https://github.com/dani-garcia/bw_web_builds/releases/download/v{{ vaultwarden_web_version }}/bw_web_v{{ vaultwarden_web_version }}.tar.gz
-vaultwarden_web_archive_sha256: 17758e5a37af2e1f847d76d3386551c519526884ee06912d9f78d97e61dd52a0
+vaultwarden_web_archive_sha256: b3788dae85aa57ada4c04b1be63741479cab5c9de9d39ea764c811d6342b720e
 
 vaultwarden_root_dir: /opt/vaultwarden
 vaultwarden_user: vaultwarden