diff --git a/kubernetes/apps/default/echo/app/ocirepository.yaml b/kubernetes/apps/default/echo/app/ocirepository.yaml
index b04e450..881e17c 100644
--- a/kubernetes/apps/default/echo/app/ocirepository.yaml
+++ b/kubernetes/apps/default/echo/app/ocirepository.yaml
@@ -10,5 +10,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.2.0
+    tag: 4.4.0
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
diff --git a/kubernetes/apps/external-secrets/external-secrets/stores/onepassword/repo.yaml b/kubernetes/apps/external-secrets/external-secrets/stores/onepassword/repo.yaml
index ff88eb2..4c106e7 100644
--- a/kubernetes/apps/external-secrets/external-secrets/stores/onepassword/repo.yaml
+++ b/kubernetes/apps/external-secrets/external-secrets/stores/onepassword/repo.yaml
@@ -10,5 +10,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.2.0
+    tag: 4.4.0
   url: oci://ghcr.io/bjw-s-labs/helm/app-template
diff --git a/kubernetes/apps/network/cloudflare-tunnel/app/ocirepository.yaml b/kubernetes/apps/network/cloudflare-tunnel/app/ocirepository.yaml
index 99152b9..4f75112 100644
--- a/kubernetes/apps/network/cloudflare-tunnel/app/ocirepository.yaml
+++ b/kubernetes/apps/network/cloudflare-tunnel/app/ocirepository.yaml
@@ -10,5 +10,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 4.2.0
+    tag: 4.4.0
   url: oci://ghcr.io/bjw-s-labs/helm/app-template