diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 539c739df..13a7bed51 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -15,7 +15,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Close stale pull requests
-        uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
+        uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0
         with:
           stale-issue-message: 'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.'
           stale-pr-message: 'This pull request has been marked as stale because it has been inactive for more than 30 days. Please update this pull request or it will be automatically closed in 30 days.'
diff --git a/hack/distro/cert-manager/release.flux.yaml b/hack/distro/cert-manager/release.flux.yaml
index ac9162b41..56c1b8bb8 100644
--- a/hack/distro/cert-manager/release.flux.yaml
+++ b/hack/distro/cert-manager/release.flux.yaml
@@ -13,7 +13,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: "v1.20.3"
+      version: "v1.21.0"
       sourceRef:
         kind: HelmRepository
         name: cert-manager
diff --git a/hack/distro/monitoring/kube-prometheus-stack/release.flux.yaml b/hack/distro/monitoring/kube-prometheus-stack/release.flux.yaml
index 4af9529b5..ef5c6e666 100644
--- a/hack/distro/monitoring/kube-prometheus-stack/release.flux.yaml
+++ b/hack/distro/monitoring/kube-prometheus-stack/release.flux.yaml
@@ -13,7 +13,7 @@ spec:
   chart:
     spec:
       chart: kube-prometheus-stack
-      version: "87.12.1"
+      version: "87.15.1"
       sourceRef:
         kind: HelmRepository
         name: kube-prometheus-stack