diff --git a/nodes/htz-cloud/pirmasens.py b/nodes/htz-cloud/pirmasens.py
index 7df81de..437b009 100644
--- a/nodes/htz-cloud/pirmasens.py
+++ b/nodes/htz-cloud/pirmasens.py
@@ -56,7 +56,7 @@ nodes['htz-cloud.pirmasens'] = {
             'message_size_limit_mb': 50,
         },
         'postfixadmin': {
-            'version': '3.3.7',
+            'version': '3.3.8',
             'setup_password': vault.decrypt('encrypt$gAAAAABfpwn8NKxTztI39GzhGw66NNsWa72Wq7Sa_LoIG_L0ewCVPzhmw93xhWo3jfT8hCn9sqJgbArmPHtLMcLkSHdBPbQe0bLZMSib-mA9sEQD0wgKMyuRCPHIIMKSAoMaJaYnHSTO-mz1q7_tKzd6LkHF_AGsboS1vpQvg-CDth6e0msTwe8='),
         },
         'rspamd': {
diff --git a/nodes/htz/ex42-1048908.py b/nodes/htz/ex42-1048908.py
index 353a261..3012fd6 100644
--- a/nodes/htz/ex42-1048908.py
+++ b/nodes/htz/ex42-1048908.py
@@ -113,8 +113,8 @@ nodes['htz.ex42-1048908'] = {
             },
         },
         'gitea': {
-            'version': '1.13.2',
-            'sha256': '4d7d3fc63666cc9c94e32c1e70422c30c1ee8f905004eeb7cd812051721601cc',
+            'version': '1.13.3',
+            'sha256': '4eea66983e30cc3c202538e69e31a79cd626a4c61d28c9678b02840c8b63e1a0',
             'domain': 'git.kunsmann.eu',
             # TODO find out if those secrets can be rotated without breaking stuff
             'internal_token': vault.decrypt('encrypt$gAAAAABfPncYwCX-NdBr9LdxLyGqmjRJqhmwMnWsdZy6kVOWdKrScW78xaqbJ1tpL1J4qa2hcZ7TQj3l-2mkyJNJOenGzU3TsI-gYMj9vC4m8Bhur5zboxjD4dQXaJbD1WSyHJ9sPJYsWP3Gjg6I19xeq9xMlAI6xaS9vOfuoI8nZnnQPx1NjfQEj03Jxf8a0-3F20sfICst1xRa5K48bpq1PFkK_oRojg=='),
@@ -148,7 +148,7 @@ nodes['htz.ex42-1048908'] = {
             },
         },
         'matrix-media-repo': {
-            'version': 'v1.2.2',
+            'version': 'v1.2.3',
             'homeservers': {
                 'franzi.business': {
                     'domain': 'http://[::1]:20080/',
@@ -331,7 +331,7 @@ nodes['htz.ex42-1048908'] = {
             'message_size_limit_mb': 50,
         },
         'postfixadmin': {
-            'version': '3.3.7',
+            'version': '3.3.8',
             'setup_password': vault.decrypt('encrypt$gAAAAABfpwn8NKxTztI39GzhGw66NNsWa72Wq7Sa_LoIG_L0ewCVPzhmw93xhWo3jfT8hCn9sqJgbArmPHtLMcLkSHdBPbQe0bLZMSib-mA9sEQD0wgKMyuRCPHIIMKSAoMaJaYnHSTO-mz1q7_tKzd6LkHF_AGsboS1vpQvg-CDth6e0msTwe8='),
         },
         'radicale': {