diff --git a/pkg/config/static/metadata.yaml b/pkg/config/static/metadata.yaml
index f22170da8..044ff522f 100644
--- a/pkg/config/static/metadata.yaml
+++ b/pkg/config/static/metadata.yaml
@@ -9,38 +9,38 @@ images:
     calico-cni:
         repo: proxy.replicated.com/anonymous/replicated/ec-calico-cni
         tag:
-            amd64: 3.28.2-r1-amd64@sha256:5c4e80ef1cdfd8de00e072c6743eb9e35265e2bc44a1cddd2699642434720797
-            arm64: 3.28.2-r1-arm64@sha256:6c475102f30db63f071435d7073203456126de9f9239b7215f96723a203a559b
+            amd64: 3.28.2-r1-amd64@sha256:11e50d56d6336d0ef16c7f296bc951c0195175a116253621dbc3c748f481b3cd
+            arm64: 3.28.2-r1-arm64@sha256:af961e8622342208f853fa5c7cfcf4c50c9e9491916231505868308a5d7092af
     calico-kube-controllers:
         repo: proxy.replicated.com/anonymous/replicated/ec-calico-kube-controllers
         tag:
-            amd64: 3.28.2-r1-amd64@sha256:c8ab448a67ffb0115e7055f57b774a69a9de3986858a4306dad4f6585dd14280
-            arm64: 3.28.2-r1-arm64@sha256:4130984609fe0911f87df1d35e21bcbcdecd6c13b0c26d76097849da43b8fd77
+            amd64: 3.28.2-r1-amd64@sha256:9e5d15cb66ba35758d5fce6d5c00c950d962fcf51c6980d86008f349ba1645e6
+            arm64: 3.28.2-r1-arm64@sha256:659bc30c8d75cfe2834d97ca2835762ca110e537cbdccfaafb70fcf2edcf0da1
     calico-node:
         repo: proxy.replicated.com/anonymous/replicated/ec-calico-node
         tag:
-            amd64: 3.28.2-r1-amd64@sha256:a9a3d8cf4463202d3ed3a3af0cfbfdf0ff47940812ed05d5ea3d959a4433aabe
-            arm64: 3.28.2-r1-arm64@sha256:43ec0a8a5a9442d08a0db3e5d09d53cc1cbafc5d13339101639f499a9246bd46
+            amd64: 3.28.2-r1-amd64@sha256:441883b1f3b5267502489ba8ce3b24acae6a948e529d497d62bc7dee7dafccc8
+            arm64: 3.28.2-r1-arm64@sha256:773450587482522775cbea749405429d2fb5db5829a5aba895663a76179ff026
     coredns:
         repo: proxy.replicated.com/anonymous/replicated/ec-coredns
         tag:
-            amd64: 1.12.1-r1-amd64@sha256:df9e5ac74158ae26fb93e58ff71431c64c241ddaad4b4b7ab060cb0478e4fe73
-            arm64: 1.12.1-r1-arm64@sha256:da24cc0b15e1b7c95083173c101fa0fbc3e9912002a3c1199ce0d1c2c04d0644
+            amd64: 1.12.1-r2-amd64@sha256:021a5aad540c9d1f5c1b27b500286fe7ce49c110d0b1b96e07f10b66e7b82597
+            arm64: 1.12.1-r2-arm64@sha256:9ee528f103cde7f512f9474dd6f84e0b5d0e6b509d187f0a2f49519ecd929911
     envoy-distroless:
         repo: proxy.replicated.com/anonymous/replicated/ec-envoy-distroless
         tag:
-            amd64: 1.30.4-r0-amd64@sha256:f541169e956b7d55ced5af044cf52b53b3f8c2b6f4c4297119c3fc02e35ffa47
-            arm64: 1.30.4-r0-arm64@sha256:02cb7ae5c4ef41bc23194411295584e771fadb0c33f819fb117c1d704bbcb861
+            amd64: 1.30.4-r0-amd64@sha256:9f7cefe6a4d68dfd7c4ca05e2375580117dcacc12ff22055194affae2581268a
+            arm64: 1.30.4-r0-arm64@sha256:c71fa8396ad1a3da090da32cf73c2deef22fdb3cd44f410c959d7777eb265436
     kube-proxy:
         repo: proxy.replicated.com/anonymous/registry.k8s.io/kube-proxy
         tag:
-            amd64: v1.30.11-amd64@sha256:1fe6b17f5be77fc56dc78a19d6043cf149f83c4fbbb444f8253dbb9a1987b4a3
-            arm64: v1.30.11-arm64@sha256:cb38d5d2afd4b5b7ea12bd37eac4453572005922929ac48d355a11fb8c66177b
+            amd64: v1.30.12-amd64@sha256:748acbfa1e003140d75ed7f7bc5447dd5bc030c0d1eccc8dfcbeb897eba5d978
+            arm64: v1.30.12-arm64@sha256:67ba16685970867538b01fdb1bede524302a241084eb5765ca9970a016d8f99d
     metrics-server:
         repo: proxy.replicated.com/anonymous/replicated/ec-metrics-server
         tag:
-            amd64: 0.7.2-r11-amd64@sha256:2bd5276bda3e063e90c438f9da7d77cd8dfa6bf0ce2fbd41f36b80540f1a4290
-            arm64: 0.7.2-r11-arm64@sha256:24d845ca5199caeb020c1985591431ed3fdf1dde2d5b5f92a9d64432b9840912
+            amd64: 0.7.2-r12-amd64@sha256:a4420f96cbe5652eed55102d8d4e56151cfdbb87407a2d92f0f48ca5d2784853
+            arm64: 0.7.2-r12-arm64@sha256:b199661fdaead1bf9892fb84625595a488c40dce14baa49ebcd4218992b8b453
     pause:
         repo: proxy.replicated.com/anonymous/registry.k8s.io/pause
         tag: