diff --git a/class/defaults.yml b/class/defaults.yml
index 580a4fe..935bf6f 100644
--- a/class/defaults.yml
+++ b/class/defaults.yml
@@ -37,13 +37,13 @@ parameters:
     charts:
       nextcloud:
         source: https://nextcloud.github.io/helm
-        version: 4.5.13
+        version: 4.6.2
       postgresql:
         source: https://charts.bitnami.com/bitnami
-        version: 14.0.1
+        version: 14.1.3
       redis:
         source: https://charts.bitnami.com/bitnami
-        version: 18.12.1
+        version: 18.14.0
 
     resources:
       nextcloud:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/config.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/config.yaml
index 08eee0e..ce8e532 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/config.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/config.yaml
@@ -120,5 +120,5 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud-config
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/deployment.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/deployment.yaml
index c86d990..0dbedca 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/deployment.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/deployment.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud
 spec:
   replicas: 1
@@ -20,6 +20,7 @@ spec:
   template:
     metadata:
       annotations:
+        hooks-hash: 9525c2748a6c7cd0e28ec740623d0b3fa5a75c83b51ccfd136bc89c76737b204
         nextcloud-config-hash: 1cb4ff4a2fc8d16be0438a3478ffc5ce01dc86c9b4fbcc590884b5373976decf
         nginx-config-hash: 18dd8f905a93ed27f032e9ae68084222ed7e5926f7144cda17b979780f4da54b
         php-config-hash: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/ingress.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/ingress.yaml
index b281977..7d1656f 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/ingress.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/ingress.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud
 spec:
   rules:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml
index 7f14f23..636167e 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud-nextcloud
 spec:
   accessModes:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nginx-config.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nginx-config.yaml
index ff61b94..3f684b3 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nginx-config.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/nginx-config.yaml
@@ -1,143 +1,90 @@
 apiVersion: v1
 data:
-  default.conf: |-
-    upstream php-handler {
-        server 127.0.0.1:9000;
-    }
-
-    server {
-        listen 80;
-
-        # HSTS settings
-        # WARNING: Only add the preload option once you read about
-        # the consequences in https://hstspreload.org/. This option
-        # will add the domain to a hardcoded list that is shipped
-        # in all major browsers and getting removed from this list
-        # could take several months.
-        #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
-
-        # set max upload size
-        client_max_body_size 10G;
-        fastcgi_buffers 64 4K;
-
-        # Enable gzip but do not remove ETag headers
-        gzip on;
-        gzip_vary on;
-        gzip_comp_level 4;
-        gzip_min_length 256;
-        gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
-        gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
-
-        # Pagespeed is not supported by Nextcloud, so if your server is built
-        # with the `ngx_pagespeed` module, uncomment this line to disable it.
-        #pagespeed off;
-
-        # HTTP response headers borrowed from Nextcloud `.htaccess`
-        add_header Referrer-Policy                      "no-referrer"       always;
-        add_header X-Content-Type-Options               "nosniff"           always;
-        add_header X-Download-Options                   "noopen"            always;
-        add_header X-Frame-Options                      "SAMEORIGIN"        always;
-        add_header X-Permitted-Cross-Domain-Policies    "none"              always;
-        add_header X-Robots-Tag                         "noindex, nofollow" always;
-        add_header X-XSS-Protection                     "1; mode=block"     always;
-
-        # Remove X-Powered-By, which is an information leak
-        fastcgi_hide_header X-Powered-By;
-
-        # Path to the root of your installation
-        root /var/www/html;
-
-        # Specify how to handle directories -- specifying `/index.php$request_uri`
-        # here as the fallback means that Nginx always exhibits the desired behaviour
-        # when a client requests a path that corresponds to a directory that exists
-        # on the server. In particular, if that directory contains an index.php file,
-        # that file is correctly served; if it doesn't, then the request is passed to
-        # the front-end controller. This consistent behaviour means that we don't need
-        # to specify custom rules for certain paths (e.g. images and other assets,
-        # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus
-        # `try_files $uri $uri/ /index.php$request_uri`
-        # always provides the desired behaviour.
-        index index.php index.html /index.php$request_uri;
-
-        # Rule borrowed from `.htaccess` to handle Microsoft DAV clients
-        location = / {
-            if ( $http_user_agent ~ ^DavClnt ) {
-                return 302 /remote.php/webdav/$is_args$args;
-            }
-        }
-
-        location = /robots.txt {
-            allow all;
-            log_not_found off;
-            access_log off;
-        }
-
-        # Make a regex exception for `/.well-known` so that clients can still
-        # access it despite the existence of the regex rule
-        # `location ~ /(\.|autotest|...)` which would otherwise handle requests
-        # for `/.well-known`.
-        location ^~ /.well-known {
-            # The following 6 rules are borrowed from `.htaccess`
-
-            location = /.well-known/carddav     { return 301 /remote.php/dav/; }
-            location = /.well-known/caldav      { return 301 /remote.php/dav/; }
-            # Anything else is dynamically handled by Nextcloud
-            location ^~ /.well-known            { return 301 /index.php$uri; }
-
-            try_files $uri $uri/ =404;
-        }
-
-        # Rules borrowed from `.htaccess` to hide certain paths from clients
-        location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
-        location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)              { return 404; }
-
-        # Ensure this block, which passes PHP files to the PHP process, is above the blocks
-        # which handle static assets (as seen below). If this block is not declared first,
-        # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`
-        # to the URI, resulting in a HTTP 500 error response.
-        location ~ \.php(?:$|/) {
-            # Required for legacy support
-            rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+|.+\/richdocumentscode\/proxy) /index.php$request_uri;
-
-            fastcgi_split_path_info ^(.+?\.php)(/.*)$;
-            set $path_info $fastcgi_path_info;
-
-            try_files $fastcgi_script_name =404;
-
-            include fastcgi_params;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            fastcgi_param PATH_INFO $path_info;
-            #fastcgi_param HTTPS on;
-
-            fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice
-            fastcgi_param front_controller_active true;     # Enable pretty urls
-            fastcgi_pass php-handler;
-
-            fastcgi_intercept_errors on;
-            fastcgi_request_buffering off;
-        }
-
-        location ~ \.(?:css|js|svg|gif)$ {
-            try_files $uri /index.php$request_uri;
-            expires 6M;         # Cache-Control policy borrowed from `.htaccess`
-            access_log off;     # Optional: Don't log access to assets
-        }
-
-        location ~ \.woff2?$ {
-            try_files $uri /index.php$request_uri;
-            expires 7d;         # Cache-Control policy borrowed from `.htaccess`
-            access_log off;     # Optional: Don't log access to assets
-        }
-
-        location / {
-            try_files $uri $uri/ /index.php$request_uri;
-        }
-    }
+  default.conf: "upstream php-handler {\n    server 127.0.0.1:9000;\n}\n\nserver {\n\
+    \    listen 80;\n\n    # HSTS settings\n    # WARNING: Only add the preload option\
+    \ once you read about\n    # the consequences in https://hstspreload.org/. This\
+    \ option\n    # will add the domain to a hardcoded list that is shipped\n    #\
+    \ in all major browsers and getting removed from this list\n    # could take several\
+    \ months.\n    #add_header Strict-Transport-Security \"max-age=15768000; includeSubDomains;\
+    \ preload;\" always;\n\n    # set max upload size\n    client_max_body_size 10G;\n\
+    \    fastcgi_buffers 64 4K;\n\n    # Enable gzip but do not remove ETag headers\n\
+    \    gzip on;\n    gzip_vary on;\n    gzip_comp_level 4;\n    gzip_min_length\
+    \ 256;\n    gzip_proxied expired no-cache no-store private no_last_modified no_etag\
+    \ auth;\n    gzip_types application/atom+xml application/javascript application/json\
+    \ application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json\
+    \ application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json\
+    \ application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml\
+    \ image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc\
+    \ text/vtt text/x-component text/x-cross-domain-policy;\n\n    # Pagespeed is\
+    \ not supported by Nextcloud, so if your server is built\n    # with the `ngx_pagespeed`\
+    \ module, uncomment this line to disable it.\n    #pagespeed off;\n\n    # HTTP\
+    \ response headers borrowed from Nextcloud `.htaccess`\n    add_header Referrer-Policy\
+    \                      \"no-referrer\"       always;\n    add_header X-Content-Type-Options\
+    \               \"nosniff\"           always;\n    add_header X-Download-Options\
+    \                   \"noopen\"            always;\n    add_header X-Frame-Options\
+    \                      \"SAMEORIGIN\"        always;\n    add_header X-Permitted-Cross-Domain-Policies\
+    \    \"none\"              always;\n    add_header X-Robots-Tag              \
+    \           \"noindex, nofollow\" always;\n    add_header X-XSS-Protection   \
+    \                  \"1; mode=block\"     always;\n\n    # Remove X-Powered-By,\
+    \ which is an information leak\n    fastcgi_hide_header X-Powered-By;\n\n    #\
+    \ Add .mjs as a file extension for javascript\n    # Either include it in the\
+    \ default mime.types list\n    # or include you can include that list explicitly\
+    \ and add the file extension\n    # only for Nextcloud like below:\n    include\
+    \ mime.types;\n    types {\n        text/javascript js mjs;\n    }        \n\n\
+    \    # Path to the root of your installation\n    root /var/www/html;\n\n    #\
+    \ Specify how to handle directories -- specifying `/index.php$request_uri`\n \
+    \   # here as the fallback means that Nginx always exhibits the desired behaviour\n\
+    \    # when a client requests a path that corresponds to a directory that exists\n\
+    \    # on the server. In particular, if that directory contains an index.php file,\n\
+    \    # that file is correctly served; if it doesn't, then the request is passed\
+    \ to\n    # the front-end controller. This consistent behaviour means that we\
+    \ don't need\n    # to specify custom rules for certain paths (e.g. images and\
+    \ other assets,\n    # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus\n\
+    \    # `try_files $uri $uri/ /index.php$request_uri`\n    # always provides the\
+    \ desired behaviour.\n    index index.php index.html /index.php$request_uri;\n\
+    \n    # Rule borrowed from `.htaccess` to handle Microsoft DAV clients\n    location\
+    \ = / {\n        if ( $http_user_agent ~ ^DavClnt ) {\n            return 302\
+    \ /remote.php/webdav/$is_args$args;\n        }\n    }\n\n    location = /robots.txt\
+    \ {\n        allow all;\n        log_not_found off;\n        access_log off;\n\
+    \    }\n\n    # Make a regex exception for `/.well-known` so that clients can\
+    \ still\n    # access it despite the existence of the regex rule\n    # `location\
+    \ ~ /(\\.|autotest|...)` which would otherwise handle requests\n    # for `/.well-known`.\n\
+    \    location ^~ /.well-known {\n        # The following 6 rules are borrowed\
+    \ from `.htaccess`\n\n        location = /.well-known/carddav     { return 301\
+    \ /remote.php/dav/; }\n        location = /.well-known/caldav      { return 301\
+    \ /remote.php/dav/; }\n        # Anything else is dynamically handled by Nextcloud\n\
+    \        location ^~ /.well-known            { return 301 /index.php$uri; }\n\n\
+    \        try_files $uri $uri/ =404;\n    }\n\n    # Rules borrowed from `.htaccess`\
+    \ to hide certain paths from clients\n    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)\
+    \  { return 404; }\n    location ~ ^/(?:\\.|autotest|occ|issue|indie|db_|console)\
+    \              { return 404; }\n\n    # Ensure this block, which passes PHP files\
+    \ to the PHP process, is above the blocks\n    # which handle static assets (as\
+    \ seen below). If this block is not declared first,\n    # then Nginx will encounter\
+    \ an infinite rewriting loop when it prepends `/index.php`\n    # to the URI,\
+    \ resulting in a HTTP 500 error response.\n    location ~ \\.php(?:$|/) {\n  \
+    \      # Required for legacy support\n        rewrite ^/(?!index|remote|public|cron|core\\\
+    /ajax\\/update|status|ocs\\/v[12]|updater\\/.+|oc[ms]-provider\\/.+|.+\\/richdocumentscode\\\
+    /proxy) /index.php$request_uri;\n\n        fastcgi_split_path_info ^(.+?\\.php)(/.*)$;\n\
+    \        set $path_info $fastcgi_path_info;\n\n        try_files $fastcgi_script_name\
+    \ =404;\n\n        include fastcgi_params;\n        fastcgi_param SCRIPT_FILENAME\
+    \ $document_root$fastcgi_script_name;\n        fastcgi_param PATH_INFO $path_info;\n\
+    \        #fastcgi_param HTTPS on;\n\n        fastcgi_param modHeadersAvailable\
+    \ true;         # Avoid sending the security headers twice\n        fastcgi_param\
+    \ front_controller_active true;     # Enable pretty urls\n        fastcgi_pass\
+    \ php-handler;\n\n        fastcgi_intercept_errors on;\n        fastcgi_request_buffering\
+    \ off;\n    }\n\n    location ~ \\.(?:css|js|svg|gif)$ {\n        try_files $uri\
+    \ /index.php$request_uri;\n        expires 6M;         # Cache-Control policy\
+    \ borrowed from `.htaccess`\n        access_log off;     # Optional: Don't log\
+    \ access to assets\n    }\n\n    location ~ \\.woff2?$ {\n        try_files $uri\
+    \ /index.php$request_uri;\n        expires 7d;         # Cache-Control policy\
+    \ borrowed from `.htaccess`\n        access_log off;     # Optional: Don't log\
+    \ access to assets\n    }\n\n    location / {\n        try_files $uri $uri/ /index.php$request_uri;\n\
+    \    }\n}"
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud-nginxconfig
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/service.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/service.yaml
index 23a4cc5..fec40e9 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/service.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/nextcloud/templates/service.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud
 spec:
   ports:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/statefulset.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/statefulset.yaml
index 56bf6d2..5496810 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/statefulset.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/statefulset.yaml
@@ -6,8 +6,8 @@ metadata:
     app.kubernetes.io/instance: postgresql
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: postgresql
-    app.kubernetes.io/version: 16.1.0
-    helm.sh/chart: postgresql-14.0.1
+    app.kubernetes.io/version: 16.2.0
+    helm.sh/chart: postgresql-14.1.3
   name: postgresql
   namespace: app-defaults
 spec:
@@ -29,8 +29,8 @@ spec:
         app.kubernetes.io/instance: postgresql
         app.kubernetes.io/managed-by: commodore
         app.kubernetes.io/name: postgresql
-        app.kubernetes.io/version: 16.1.0
-        helm.sh/chart: postgresql-14.0.1
+        app.kubernetes.io/version: 16.2.0
+        helm.sh/chart: postgresql-14.1.3
       name: postgresql
     spec:
       affinity:
@@ -82,7 +82,7 @@ spec:
               value: error
             - name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
               value: pgaudit
-          image: docker.io/bitnami/postgresql:16.1.0-debian-11-r26
+          image: docker.io/bitnami/postgresql:16.2.0-debian-11-r17
           imagePullPolicy: IfNotPresent
           livenessProbe:
             exec:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc-headless.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc-headless.yaml
index 6c2b05c..a51f8b3 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc-headless.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc-headless.yaml
@@ -8,8 +8,8 @@ metadata:
     app.kubernetes.io/instance: postgresql
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: postgresql
-    app.kubernetes.io/version: 16.1.0
-    helm.sh/chart: postgresql-14.0.1
+    app.kubernetes.io/version: 16.2.0
+    helm.sh/chart: postgresql-14.1.3
   name: postgresql-hl
   namespace: app-defaults
 spec:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc.yaml
index 0e757a6..8afc024 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/postgresql/templates/primary/svc.yaml
@@ -6,8 +6,8 @@ metadata:
     app.kubernetes.io/instance: postgresql
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: postgresql
-    app.kubernetes.io/version: 16.1.0
-    helm.sh/chart: postgresql-14.0.1
+    app.kubernetes.io/version: 16.2.0
+    helm.sh/chart: postgresql-14.1.3
   name: postgresql
   namespace: app-defaults
 spec:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/configmap.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/configmap.yaml
index c5cb8f9..e120be1 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/configmap.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/configmap.yaml
@@ -26,6 +26,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-configuration
   namespace: app-defaults
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/headless-svc.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/headless-svc.yaml
index af68d3e..a843940 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/headless-svc.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/headless-svc.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-headless
   namespace: app-defaults
 spec:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/health-configmap.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/health-configmap.yaml
index 4c8a954..81c1046 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/health-configmap.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/health-configmap.yaml
@@ -101,6 +101,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-health
   namespace: app-defaults
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/application.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/application.yaml
index bd484b1..eac21eb 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/application.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/application.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-master
   namespace: app-defaults
 spec:
@@ -31,7 +31,7 @@ spec:
         app.kubernetes.io/managed-by: commodore
         app.kubernetes.io/name: redis
         app.kubernetes.io/version: 7.2.4
-        helm.sh/chart: redis-18.12.1
+        helm.sh/chart: redis-18.14.0
     spec:
       affinity:
         nodeAffinity: null
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/service.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/service.yaml
index 17ea8c0..11eaada 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/service.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/master/service.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-master
   namespace: app-defaults
 spec:
diff --git a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/scripts-configmap.yaml b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/scripts-configmap.yaml
index dd89910..d14fe2d 100644
--- a/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/scripts-configmap.yaml
+++ b/tests/golden/defaults/defaults/defaults/10_helmchart/redis/templates/scripts-configmap.yaml
@@ -23,6 +23,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-scripts
   namespace: app-defaults
diff --git a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/config.yaml b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/config.yaml
index 08eee0e..ce8e532 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/config.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/config.yaml
@@ -120,5 +120,5 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud-config
diff --git a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/deployment.yaml b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/deployment.yaml
index c86d990..0dbedca 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/deployment.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/deployment.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud
 spec:
   replicas: 1
@@ -20,6 +20,7 @@ spec:
   template:
     metadata:
       annotations:
+        hooks-hash: 9525c2748a6c7cd0e28ec740623d0b3fa5a75c83b51ccfd136bc89c76737b204
         nextcloud-config-hash: 1cb4ff4a2fc8d16be0438a3478ffc5ce01dc86c9b4fbcc590884b5373976decf
         nginx-config-hash: 18dd8f905a93ed27f032e9ae68084222ed7e5926f7144cda17b979780f4da54b
         php-config-hash: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
diff --git a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/ingress.yaml b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/ingress.yaml
index ea4e86c..f3dad15 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/ingress.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/ingress.yaml
@@ -9,7 +9,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud
 spec:
   rules:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml
index 7f14f23..636167e 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nextcloud-pvc.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud-nextcloud
 spec:
   accessModes:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nginx-config.yaml b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nginx-config.yaml
index ff61b94..3f684b3 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nginx-config.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/nginx-config.yaml
@@ -1,143 +1,90 @@
 apiVersion: v1
 data:
-  default.conf: |-
-    upstream php-handler {
-        server 127.0.0.1:9000;
-    }
-
-    server {
-        listen 80;
-
-        # HSTS settings
-        # WARNING: Only add the preload option once you read about
-        # the consequences in https://hstspreload.org/. This option
-        # will add the domain to a hardcoded list that is shipped
-        # in all major browsers and getting removed from this list
-        # could take several months.
-        #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
-
-        # set max upload size
-        client_max_body_size 10G;
-        fastcgi_buffers 64 4K;
-
-        # Enable gzip but do not remove ETag headers
-        gzip on;
-        gzip_vary on;
-        gzip_comp_level 4;
-        gzip_min_length 256;
-        gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
-        gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
-
-        # Pagespeed is not supported by Nextcloud, so if your server is built
-        # with the `ngx_pagespeed` module, uncomment this line to disable it.
-        #pagespeed off;
-
-        # HTTP response headers borrowed from Nextcloud `.htaccess`
-        add_header Referrer-Policy                      "no-referrer"       always;
-        add_header X-Content-Type-Options               "nosniff"           always;
-        add_header X-Download-Options                   "noopen"            always;
-        add_header X-Frame-Options                      "SAMEORIGIN"        always;
-        add_header X-Permitted-Cross-Domain-Policies    "none"              always;
-        add_header X-Robots-Tag                         "noindex, nofollow" always;
-        add_header X-XSS-Protection                     "1; mode=block"     always;
-
-        # Remove X-Powered-By, which is an information leak
-        fastcgi_hide_header X-Powered-By;
-
-        # Path to the root of your installation
-        root /var/www/html;
-
-        # Specify how to handle directories -- specifying `/index.php$request_uri`
-        # here as the fallback means that Nginx always exhibits the desired behaviour
-        # when a client requests a path that corresponds to a directory that exists
-        # on the server. In particular, if that directory contains an index.php file,
-        # that file is correctly served; if it doesn't, then the request is passed to
-        # the front-end controller. This consistent behaviour means that we don't need
-        # to specify custom rules for certain paths (e.g. images and other assets,
-        # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus
-        # `try_files $uri $uri/ /index.php$request_uri`
-        # always provides the desired behaviour.
-        index index.php index.html /index.php$request_uri;
-
-        # Rule borrowed from `.htaccess` to handle Microsoft DAV clients
-        location = / {
-            if ( $http_user_agent ~ ^DavClnt ) {
-                return 302 /remote.php/webdav/$is_args$args;
-            }
-        }
-
-        location = /robots.txt {
-            allow all;
-            log_not_found off;
-            access_log off;
-        }
-
-        # Make a regex exception for `/.well-known` so that clients can still
-        # access it despite the existence of the regex rule
-        # `location ~ /(\.|autotest|...)` which would otherwise handle requests
-        # for `/.well-known`.
-        location ^~ /.well-known {
-            # The following 6 rules are borrowed from `.htaccess`
-
-            location = /.well-known/carddav     { return 301 /remote.php/dav/; }
-            location = /.well-known/caldav      { return 301 /remote.php/dav/; }
-            # Anything else is dynamically handled by Nextcloud
-            location ^~ /.well-known            { return 301 /index.php$uri; }
-
-            try_files $uri $uri/ =404;
-        }
-
-        # Rules borrowed from `.htaccess` to hide certain paths from clients
-        location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
-        location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)              { return 404; }
-
-        # Ensure this block, which passes PHP files to the PHP process, is above the blocks
-        # which handle static assets (as seen below). If this block is not declared first,
-        # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`
-        # to the URI, resulting in a HTTP 500 error response.
-        location ~ \.php(?:$|/) {
-            # Required for legacy support
-            rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+|.+\/richdocumentscode\/proxy) /index.php$request_uri;
-
-            fastcgi_split_path_info ^(.+?\.php)(/.*)$;
-            set $path_info $fastcgi_path_info;
-
-            try_files $fastcgi_script_name =404;
-
-            include fastcgi_params;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            fastcgi_param PATH_INFO $path_info;
-            #fastcgi_param HTTPS on;
-
-            fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice
-            fastcgi_param front_controller_active true;     # Enable pretty urls
-            fastcgi_pass php-handler;
-
-            fastcgi_intercept_errors on;
-            fastcgi_request_buffering off;
-        }
-
-        location ~ \.(?:css|js|svg|gif)$ {
-            try_files $uri /index.php$request_uri;
-            expires 6M;         # Cache-Control policy borrowed from `.htaccess`
-            access_log off;     # Optional: Don't log access to assets
-        }
-
-        location ~ \.woff2?$ {
-            try_files $uri /index.php$request_uri;
-            expires 7d;         # Cache-Control policy borrowed from `.htaccess`
-            access_log off;     # Optional: Don't log access to assets
-        }
-
-        location / {
-            try_files $uri $uri/ /index.php$request_uri;
-        }
-    }
+  default.conf: "upstream php-handler {\n    server 127.0.0.1:9000;\n}\n\nserver {\n\
+    \    listen 80;\n\n    # HSTS settings\n    # WARNING: Only add the preload option\
+    \ once you read about\n    # the consequences in https://hstspreload.org/. This\
+    \ option\n    # will add the domain to a hardcoded list that is shipped\n    #\
+    \ in all major browsers and getting removed from this list\n    # could take several\
+    \ months.\n    #add_header Strict-Transport-Security \"max-age=15768000; includeSubDomains;\
+    \ preload;\" always;\n\n    # set max upload size\n    client_max_body_size 10G;\n\
+    \    fastcgi_buffers 64 4K;\n\n    # Enable gzip but do not remove ETag headers\n\
+    \    gzip on;\n    gzip_vary on;\n    gzip_comp_level 4;\n    gzip_min_length\
+    \ 256;\n    gzip_proxied expired no-cache no-store private no_last_modified no_etag\
+    \ auth;\n    gzip_types application/atom+xml application/javascript application/json\
+    \ application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json\
+    \ application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json\
+    \ application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml\
+    \ image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc\
+    \ text/vtt text/x-component text/x-cross-domain-policy;\n\n    # Pagespeed is\
+    \ not supported by Nextcloud, so if your server is built\n    # with the `ngx_pagespeed`\
+    \ module, uncomment this line to disable it.\n    #pagespeed off;\n\n    # HTTP\
+    \ response headers borrowed from Nextcloud `.htaccess`\n    add_header Referrer-Policy\
+    \                      \"no-referrer\"       always;\n    add_header X-Content-Type-Options\
+    \               \"nosniff\"           always;\n    add_header X-Download-Options\
+    \                   \"noopen\"            always;\n    add_header X-Frame-Options\
+    \                      \"SAMEORIGIN\"        always;\n    add_header X-Permitted-Cross-Domain-Policies\
+    \    \"none\"              always;\n    add_header X-Robots-Tag              \
+    \           \"noindex, nofollow\" always;\n    add_header X-XSS-Protection   \
+    \                  \"1; mode=block\"     always;\n\n    # Remove X-Powered-By,\
+    \ which is an information leak\n    fastcgi_hide_header X-Powered-By;\n\n    #\
+    \ Add .mjs as a file extension for javascript\n    # Either include it in the\
+    \ default mime.types list\n    # or include you can include that list explicitly\
+    \ and add the file extension\n    # only for Nextcloud like below:\n    include\
+    \ mime.types;\n    types {\n        text/javascript js mjs;\n    }        \n\n\
+    \    # Path to the root of your installation\n    root /var/www/html;\n\n    #\
+    \ Specify how to handle directories -- specifying `/index.php$request_uri`\n \
+    \   # here as the fallback means that Nginx always exhibits the desired behaviour\n\
+    \    # when a client requests a path that corresponds to a directory that exists\n\
+    \    # on the server. In particular, if that directory contains an index.php file,\n\
+    \    # that file is correctly served; if it doesn't, then the request is passed\
+    \ to\n    # the front-end controller. This consistent behaviour means that we\
+    \ don't need\n    # to specify custom rules for certain paths (e.g. images and\
+    \ other assets,\n    # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus\n\
+    \    # `try_files $uri $uri/ /index.php$request_uri`\n    # always provides the\
+    \ desired behaviour.\n    index index.php index.html /index.php$request_uri;\n\
+    \n    # Rule borrowed from `.htaccess` to handle Microsoft DAV clients\n    location\
+    \ = / {\n        if ( $http_user_agent ~ ^DavClnt ) {\n            return 302\
+    \ /remote.php/webdav/$is_args$args;\n        }\n    }\n\n    location = /robots.txt\
+    \ {\n        allow all;\n        log_not_found off;\n        access_log off;\n\
+    \    }\n\n    # Make a regex exception for `/.well-known` so that clients can\
+    \ still\n    # access it despite the existence of the regex rule\n    # `location\
+    \ ~ /(\\.|autotest|...)` which would otherwise handle requests\n    # for `/.well-known`.\n\
+    \    location ^~ /.well-known {\n        # The following 6 rules are borrowed\
+    \ from `.htaccess`\n\n        location = /.well-known/carddav     { return 301\
+    \ /remote.php/dav/; }\n        location = /.well-known/caldav      { return 301\
+    \ /remote.php/dav/; }\n        # Anything else is dynamically handled by Nextcloud\n\
+    \        location ^~ /.well-known            { return 301 /index.php$uri; }\n\n\
+    \        try_files $uri $uri/ =404;\n    }\n\n    # Rules borrowed from `.htaccess`\
+    \ to hide certain paths from clients\n    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)\
+    \  { return 404; }\n    location ~ ^/(?:\\.|autotest|occ|issue|indie|db_|console)\
+    \              { return 404; }\n\n    # Ensure this block, which passes PHP files\
+    \ to the PHP process, is above the blocks\n    # which handle static assets (as\
+    \ seen below). If this block is not declared first,\n    # then Nginx will encounter\
+    \ an infinite rewriting loop when it prepends `/index.php`\n    # to the URI,\
+    \ resulting in a HTTP 500 error response.\n    location ~ \\.php(?:$|/) {\n  \
+    \      # Required for legacy support\n        rewrite ^/(?!index|remote|public|cron|core\\\
+    /ajax\\/update|status|ocs\\/v[12]|updater\\/.+|oc[ms]-provider\\/.+|.+\\/richdocumentscode\\\
+    /proxy) /index.php$request_uri;\n\n        fastcgi_split_path_info ^(.+?\\.php)(/.*)$;\n\
+    \        set $path_info $fastcgi_path_info;\n\n        try_files $fastcgi_script_name\
+    \ =404;\n\n        include fastcgi_params;\n        fastcgi_param SCRIPT_FILENAME\
+    \ $document_root$fastcgi_script_name;\n        fastcgi_param PATH_INFO $path_info;\n\
+    \        #fastcgi_param HTTPS on;\n\n        fastcgi_param modHeadersAvailable\
+    \ true;         # Avoid sending the security headers twice\n        fastcgi_param\
+    \ front_controller_active true;     # Enable pretty urls\n        fastcgi_pass\
+    \ php-handler;\n\n        fastcgi_intercept_errors on;\n        fastcgi_request_buffering\
+    \ off;\n    }\n\n    location ~ \\.(?:css|js|svg|gif)$ {\n        try_files $uri\
+    \ /index.php$request_uri;\n        expires 6M;         # Cache-Control policy\
+    \ borrowed from `.htaccess`\n        access_log off;     # Optional: Don't log\
+    \ access to assets\n    }\n\n    location ~ \\.woff2?$ {\n        try_files $uri\
+    \ /index.php$request_uri;\n        expires 7d;         # Cache-Control policy\
+    \ borrowed from `.htaccess`\n        access_log off;     # Optional: Don't log\
+    \ access to assets\n    }\n\n    location / {\n        try_files $uri $uri/ /index.php$request_uri;\n\
+    \    }\n}"
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud-nginxconfig
diff --git a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/service.yaml b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/service.yaml
index 23a4cc5..fec40e9 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/service.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/nextcloud/templates/service.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: nextcloud
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: nextcloud
-    helm.sh/chart: nextcloud-4.5.13
+    helm.sh/chart: nextcloud-4.6.2
   name: nextcloud
 spec:
   ports:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/statefulset.yaml b/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/statefulset.yaml
index cda7862..1105427 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/statefulset.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/statefulset.yaml
@@ -6,8 +6,8 @@ metadata:
     app.kubernetes.io/instance: postgresql
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: postgresql
-    app.kubernetes.io/version: 16.1.0
-    helm.sh/chart: postgresql-14.0.1
+    app.kubernetes.io/version: 16.2.0
+    helm.sh/chart: postgresql-14.1.3
   name: postgresql
   namespace: app-instances
 spec:
@@ -29,8 +29,8 @@ spec:
         app.kubernetes.io/instance: postgresql
         app.kubernetes.io/managed-by: commodore
         app.kubernetes.io/name: postgresql
-        app.kubernetes.io/version: 16.1.0
-        helm.sh/chart: postgresql-14.0.1
+        app.kubernetes.io/version: 16.2.0
+        helm.sh/chart: postgresql-14.1.3
       name: postgresql
     spec:
       affinity:
@@ -82,7 +82,7 @@ spec:
               value: error
             - name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES
               value: pgaudit
-          image: docker.io/bitnami/postgresql:16.1.0-debian-11-r26
+          image: docker.io/bitnami/postgresql:16.2.0-debian-11-r17
           imagePullPolicy: IfNotPresent
           livenessProbe:
             exec:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc-headless.yaml b/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc-headless.yaml
index 9ba6903..2660921 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc-headless.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc-headless.yaml
@@ -8,8 +8,8 @@ metadata:
     app.kubernetes.io/instance: postgresql
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: postgresql
-    app.kubernetes.io/version: 16.1.0
-    helm.sh/chart: postgresql-14.0.1
+    app.kubernetes.io/version: 16.2.0
+    helm.sh/chart: postgresql-14.1.3
   name: postgresql-hl
   namespace: app-instances
 spec:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc.yaml b/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc.yaml
index ce8a0fa..6e9d1d7 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/postgresql/templates/primary/svc.yaml
@@ -6,8 +6,8 @@ metadata:
     app.kubernetes.io/instance: postgresql
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: postgresql
-    app.kubernetes.io/version: 16.1.0
-    helm.sh/chart: postgresql-14.0.1
+    app.kubernetes.io/version: 16.2.0
+    helm.sh/chart: postgresql-14.1.3
   name: postgresql
   namespace: app-instances
 spec:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/configmap.yaml b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/configmap.yaml
index d5a7d0b..1f1d301 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/configmap.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/configmap.yaml
@@ -26,6 +26,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-configuration
   namespace: app-instances
diff --git a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/headless-svc.yaml b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/headless-svc.yaml
index ad2010c..d90e3c7 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/headless-svc.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/headless-svc.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-headless
   namespace: app-instances
 spec:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/health-configmap.yaml b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/health-configmap.yaml
index acae7fb..0f51c63 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/health-configmap.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/health-configmap.yaml
@@ -101,6 +101,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-health
   namespace: app-instances
diff --git a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/application.yaml b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/application.yaml
index 1d8dc49..f92d8b6 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/application.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/application.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-master
   namespace: app-instances
 spec:
@@ -31,7 +31,7 @@ spec:
         app.kubernetes.io/managed-by: commodore
         app.kubernetes.io/name: redis
         app.kubernetes.io/version: 7.2.4
-        helm.sh/chart: redis-18.12.1
+        helm.sh/chart: redis-18.14.0
     spec:
       affinity:
         nodeAffinity: null
diff --git a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/service.yaml b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/service.yaml
index 436cea9..1644e80 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/service.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/master/service.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-master
   namespace: app-instances
 spec:
diff --git a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/scripts-configmap.yaml b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/scripts-configmap.yaml
index e45a04d..eee5396 100644
--- a/tests/golden/instances/instances/instances/10_helmchart/redis/templates/scripts-configmap.yaml
+++ b/tests/golden/instances/instances/instances/10_helmchart/redis/templates/scripts-configmap.yaml
@@ -23,6 +23,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
-    helm.sh/chart: redis-18.12.1
+    helm.sh/chart: redis-18.14.0
   name: redis-scripts
   namespace: app-instances