diff --git a/roles/kimai/defaults/main.yml b/roles/kimai/defaults/main.yml
index 9bd09cf..c740a16 100644
--- a/roles/kimai/defaults/main.yml
+++ b/roles/kimai/defaults/main.yml
@@ -5,12 +5,12 @@
 # You can set it to a number or a simple string (no special chars)
 kimai_id: 1
 # Kimai version to deploy
-kimai_version: '1.30.6'
+kimai_version: '1.30.7'
 
 # URL of the archive
 kimai_archive_url: https://github.com/kevinpapst/kimai2/archive/refs/tags/{{ kimai_version }}.tar.gz
 # Expected sha256 of the archive
-kimai_archive_sha256: 8b590de1a0d78dba379c302129ca608898657383d7000b5ce95e90bf91b5831f
+kimai_archive_sha256: cabf6024955b1443da79184a3a67a4dd0a035b70fb84f26af3443174fe76714e
 
 # Directory where kimai will be installed
 kimai_root_dir: /opt/kimai_{{ kimai_id }}
diff --git a/roles/metabase/defaults/main.yml b/roles/metabase/defaults/main.yml
index 2fd8ffd..451a900 100644
--- a/roles/metabase/defaults/main.yml
+++ b/roles/metabase/defaults/main.yml
@@ -1,15 +1,15 @@
 ---
 
 # Version to deploy
-metabase_version: 0.45.2
+metabase_version: 0.45.2.1
 # URL to fetch the jar
 metabase_jar_url: https://downloads.metabase.com/v{{ metabase_version }}/metabase.jar
 # Expected sha256 of the jar
-metabase_jar_sha256: c72e8d30f369522381951774b7053d33cd0b6e1d0dc8ceba3d115fd03240bba7
+metabase_jar_sha256: 9bcf757d6a58d16d74d0c17262d88be9f7193eb116df871da3eeb5763edc26f3
 # When building from source
 metabase_archive_url: https://github.com/metabase/metabase/archive/refs/tags/v{{ metabase_version }}.tar.gz
 # Expected sha256 of the archive
-metabase_archive_sha256: 63d1360c3d21cb17cd0c9180840eae11d0a3e0eaa6e59b011e065040ba4b08d0
+metabase_archive_sha256: 1357bdfd38a6eebfb01677e39c98d8d71f073a0eff4752ae8381a0bad2ba5b32
 # Should ansible handle upgrades ? If set to false, only the initial install (and the config) will be handled
 metabase_manage_upgrade: True
 
diff --git a/roles/penpot/defaults/main.yml b/roles/penpot/defaults/main.yml
index d90e958..2c20fdb 100644
--- a/roles/penpot/defaults/main.yml
+++ b/roles/penpot/defaults/main.yml
@@ -1,7 +1,7 @@
 ---
 
 # Penpot version to deploy
-penpot_version: 1.17.0
+penpot_version: 1.17.1
 # SHould ansible manage upgrades. If False, only the initial install will be done
 penpot_manage_upgrade: True
 
@@ -10,7 +10,7 @@ penpot_root_dir: /opt/penpot
 # URL of the archive
 penpot_archive_url: https://github.com/penpot/penpot/archive/refs/tags/{{ penpot_version }}.tar.gz
 # Expected sha256 of the archive
-penpot_archive_sha256: 5d0c2583f81d7f4fb0528c1751bd6b2aa72e49f5eed1f5b1e74a5d24c75cacf3
+penpot_archive_sha256: 68b2397fe9d994f1ba3e1cf38b2e280853c978bccad202fcceed67f2cc1d627c
 # User under which penpot will run. Will be created
 penpot_user: penpot
 
diff --git a/roles/pgadmin4/defaults/main.yml b/roles/pgadmin4/defaults/main.yml
index 3e0b285..d979f99 100644
--- a/roles/pgadmin4/defaults/main.yml
+++ b/roles/pgadmin4/defaults/main.yml
@@ -10,7 +10,7 @@ pga_src_ip: []
 # Root dir where the app will be installed
 pga_root_dir: /opt/pgadmin4_{{ pga_id }}
 # Version to deploy
-pga_version: '6.19'
+pga_version: '6.20'
 
 # When pg_auth is an empty list, pgAdmin will be in single user mode
 # You can set it to a list, eg