diff --git a/.gitignore b/.gitignore
index 1d86515..93cefbe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@ metadata
 pg-demo-connection/data
 certs
 .DS_Store
+.idea
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..d41aa17
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+
+## 2023-12-21
+
+### Updated images
+- datalens-control-api: 0.2038.1 -> 0.2040.0  
+- datalens-data-api: 0.2038.1 -> 0.2040.0  
+- datalens-us: 0.116.0 -> 0.132.0  
+- datalens-ui: 0.955.0 -> 0.1113.0  
+
+### Changed
+
+- Updated system dependencies to fix vulnerabilities.  
+- datalens-ui and datalens-us containers switched to rootless mode.  
+- Some small improvements.
\ No newline at end of file
diff --git a/docker-compose.yml b/docker-compose.yml
index 1166b02..681ead1 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -11,7 +11,7 @@ services:
 
   control-api:
     container_name: datalens-control-api
-    image: ghcr.io/datalens-tech/datalens-control-api:0.2038.1
+    image: ghcr.io/datalens-tech/datalens-control-api:0.2040.0
     environment:
       BI_API_UWSGI_WORKERS_COUNT: 4
       CONNECTOR_AVAILABILITY_VISIBLE: "clickhouse,postgres,chyt"
@@ -31,7 +31,7 @@ services:
 
   data-api:
     container_name: datalens-data-api
-    image: ghcr.io/datalens-tech/datalens-data-api:0.2038.1
+    image: ghcr.io/datalens-tech/datalens-data-api:0.2040.0
     environment:
       GUNICORN_WORKERS_COUNT: 5
       RQE_FORCE_OFF: 1
@@ -76,7 +76,7 @@ services:
 
   us:
     container_name: datalens-us
-    image: ghcr.io/datalens-tech/datalens-us:0.116.0
+    image: ghcr.io/datalens-tech/datalens-us:0.132.0
     depends_on:
       - pg-us
     environment:
@@ -97,7 +97,7 @@ services:
 
   datalens:
     container_name: datalens-ui
-    image: ghcr.io/datalens-tech/datalens-ui:0.955.0
+    image: ghcr.io/datalens-tech/datalens-ui:0.1113.0
     ports:
       - 8080:80
     depends_on: