diff --git a/runbooks/source/container-images.html.md.erb b/runbooks/source/container-images.html.md.erb
index df572619..ba27dacb 100644
--- a/runbooks/source/container-images.html.md.erb
+++ b/runbooks/source/container-images.html.md.erb
@@ -130,18 +130,18 @@ This depends on several factors, some of them are:
|-|-|-|-|-|
| docker.io/bitnami/redis:7.2.4-debian-11-r5 | 🟢 | 7.4.1-debian-12-r2 | [v7.4.1-debian-12-r2](https://hub.docker.com/layers/bitnami/redis/7.4.1-debian-12-r2/images/sha256-3413f16342b05f07b31c246240b8bf2295553c46c7b81294f88e2855ba1cb026?context=explore) | n/a |
| docker.io/bitnami/thanos:0.34.1-debian-12-r1 | 🟠| v0.36.1 | [v0.36.1](https://github.com/thanos-io/thanos/releases/tag/v0.36.1) | [v0.36.1](https://github.com/bitnami/charts/blob/main/bitnami/thanos/Chart.yaml#L13) |
-| docker.io/grafana/grafana:10.4.0 | 🟠| v11.3.0+security-01| [v11.3.0+security-01](https://github.com/grafana/grafana/releases/tag/v11.3.0%2Bsecurity-01) | [66.1.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
+| docker.io/grafana/grafana:11.3.0 | 🟢 | v11.3.0+security-01| [v11.3.0+security-01](https://github.com/grafana/grafana/releases/tag/v11.3.0%2Bsecurity-01) | [66.2.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
| ministryofjustice/prometheus-ecr-exporter:0.2.0 | 🟢 | managed by us | n/a | [0.4.0](https://github.com/ministryofjustice/cloud-platform-helm-charts/blob/main/prometheus-ecr-exporter/Chart.yaml#L5) |
| ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.61.2 | 🟢 | v0.61.2 | [v0.61.2](https://github.com/nerdswords/yet-another-cloudwatch-exporter/releases) | [0.38.0](https://github.com/nerdswords/helm-charts/releases)
-| quay.io/kiwigrid/k8s-sidecar:1.26.1 | 🟠| v1.28.0 | [v1.28.0](https://github.com/kiwigrid/k8s-sidecar/releases/tag/1.28.0) | [66.1.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
+| quay.io/kiwigrid/k8s-sidecar:1.28.0 | 🟢 | v1.28.0 | [v1.28.0](https://github.com/kiwigrid/k8s-sidecar/releases/tag/1.28.0) | [66.2.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
| quay.io/oauth2-proxy/oauth2-proxy:v7.6.0 | 🟠| v7.7.1 | [v7.7.1](https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.7.1) | [7.7.29](https://github.com/oauth2-proxy/manifests/releases/tag/oauth2-proxy-7.7.29) |
| quay.io/prometheus-operator/prometheus-config-reloader:v0.72.0 | 🔴 | v0.78.1 | [v0.78.1](https://github.com/prometheus-operator/prometheus-operator/releases/tag/v0.78.1) | [66.1.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
-| quay.io/prometheus-operator/prometheus-operator:v0.72.0 | 🔴 | v0.78.1 | [v0.78.1](https://github.com/prometheus-operator/prometheus-operator/releases/tag/v0.78.1) | [66.1.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
+| quay.io/prometheus-operator/prometheus-operator:v0.78.1 | 🟢 | v0.78.1 | [v0.78.1](https://github.com/prometheus-operator/prometheus-operator/releases/tag/v0.78.1) | [66.1.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
| quay.io/prometheus/alertmanager:v0.27.0 | 🟢 | v0.27.0 | [v0.27.0](https://github.com/prometheus/alertmanager/releases/tag/v0.27.0) | [60.4.0](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
| quay.io/prometheus/node-exporter:v1.7.0 | 🟢 | v1.7.0 | [v1.8.2](https://github.com/prometheus/node_exporter/releases/tag/v1.8.2) | [60.4.0](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
| quay.io/prometheus/prometheus:v2.51.0 | 🟢 | v3.0.0 | [v3.0.0](https://github.com/prometheus/prometheus/releases/tag/v3.0.0) | [66.1.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
-| quay.io/thanos/thanos:v0.33.0 | 🔴 | v0.36.0 | [v0.36.0](https://github.com/thanos-io/thanos/releases/tag/v0.36.0-rc.0) | [60.4.0](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
-| registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.11.0 | 🟠| [v2.13.0](https://github.com/kubernetes/kube-state-metrics?tab=readme-ov-file#compatibility-matrix) | [2.13.0](https://github.com/kubernetes/kube-state-metrics/releases) | [66.1.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
+| quay.io/thanos/thanos:v0.34.1 | 🟠| v0.36.1 | [v0.36.1](https://github.com/bitnami/charts/blob/c52ccd47ba9334bd99eeb438d2dc188497e50703/bitnami/thanos/Chart.yaml#L13) | [15.8.1](https://github.com/bitnami/charts/blob/c52ccd47ba9334bd99eeb438d2dc188497e50703/bitnami/thanos/Chart.yaml#L38) |
+| registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.0 | 🟢 | [v2.14.0](https://github.com/kubernetes/kube-state-metrics?tab=readme-ov-file#compatibility-matrix) | [2.14.0](https://github.com/kubernetes/kube-state-metrics/releases) | [66.2.1](https://github.com/prometheus-community/helm-charts/blob/main/charts/kube-prometheus-stack/Chart.yaml#L26) |
## overprovision
| container image | urgency | latest version for k8s 1.29 | latest version available | latest helm chart |