diff --git a/charts/recruit/Chart.lock b/charts/recruit/Chart.lock
index 81cbd6e0..05c50700 100644
--- a/charts/recruit/Chart.lock
+++ b/charts/recruit/Chart.lock
@@ -1,18 +1,18 @@
 dependencies:
 - name: hapi-fhir-jpaserver
   repository: https://hapifhir.github.io/hapi-fhir-jpaserver-starter
-  version: 0.13.0
+  version: 0.14.0
 - name: mailhog
   repository: https://codecentric.github.io/helm-charts
   version: 5.2.3
 - name: ohdsi
   repository: oci://ghcr.io/chgl/charts
-  version: 0.21.8
+  version: 0.21.9
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
   version: 12.5.6
 - name: fhir-pseudonymizer
   repository: oci://ghcr.io/miracum/charts
-  version: 0.5.3
-digest: sha256:73c4d16045043bbf39ffcf1925f643d1ef0cc0bf3a31d5050e0ed1c092de132f
-generated: "2023-09-09T19:52:37.982386394+02:00"
+  version: 0.5.7
+digest: sha256:c2b7683d4a388608001e49ee35ec03cd8c8d00a8b04ff555788f8f616e01e2d7
+generated: "2023-11-01T18:33:13.820819951Z"
diff --git a/charts/recruit/Chart.yaml b/charts/recruit/Chart.yaml
index 61f0c923..f862a1aa 100644
--- a/charts/recruit/Chart.yaml
+++ b/charts/recruit/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
     alias: fhirserver
     name: hapi-fhir-jpaserver
     repository: https://hapifhir.github.io/hapi-fhir-jpaserver-starter
-    version: 0.13.0
+    version: 0.14.0
   - condition: mailhog.enabled
     name: mailhog
     repository: https://codecentric.github.io/helm-charts
@@ -30,18 +30,18 @@ dependencies:
   - condition: ohdsi.enabled
     name: ohdsi
     repository: oci://ghcr.io/chgl/charts
-    version: 0.21.8
+    version: 0.21.9
   - name: postgresql
     version: 12.5.6
     repository: oci://registry-1.docker.io/bitnamicharts
     condition: postgresql.enabled
   - condition: fhir-pseudonymizer.enabled
     name: fhir-pseudonymizer
-    version: 0.5.3
+    version: 0.5.7
     repository: oci://ghcr.io/miracum/charts
 # x-release-please-start-version
-version: 10.1.6
-appVersion: 10.1.6
+version: 10.1.7
+appVersion: 10.1.7
 # x-release-please-end
 annotations:
   artifacthub.io/containsSecurityUpdates: "false"
@@ -71,6 +71,6 @@ annotations:
   #     comment so the `reset-chart-changelog-annotations.yaml` correctly keeps that entry in place.
   artifacthub.io/changes: |-
     - kind: changed
-      description: updated recruIT image tags to v10.1.6 # x-release-please-version
+      description: updated recruIT image tags to v10.1.7 # x-release-please-version
     - kind: changed
       description: updated OHDSI sub-chart to 0.21.8
diff --git a/charts/recruit/README.md b/charts/recruit/README.md
index 91074ed5..7f669ffa 100644
--- a/charts/recruit/README.md
+++ b/charts/recruit/README.md
@@ -228,4 +228,4 @@ See the documentation on distributed tracing for more information: <https://mira
 
 ---
 
-Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
+Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)
diff --git a/charts/recruit/ci/kitchen-sink-values.yaml b/charts/recruit/ci/kitchen-sink-values.yaml
index 536003f4..81c625fa 100644
--- a/charts/recruit/ci/kitchen-sink-values.yaml
+++ b/charts/recruit/ci/kitchen-sink-values.yaml
@@ -73,6 +73,7 @@ query:
 postgresql:
   enabled: true
   auth:
+    # kics-scan ignore-line
     postgresPassword: recruit-notify-ha
   primary:
     service:
@@ -86,6 +87,7 @@ ohdsi:
       - host: recruit-ohdsi.127.0.0.1.nip.io
   postgresql:
     auth:
+      # kics-scan ignore-line
       postgresPassword: ohdsi
     primary:
       service:
@@ -132,6 +134,7 @@ fhirserver:
         paths: ["/"]
   postgresql:
     auth:
+      # kics-scan ignore-line
       postgresPassword: fhir
     primary:
       service:
diff --git a/charts/recruit/values-integrationtest.yaml b/charts/recruit/values-integrationtest.yaml
index 6962c2e0..8fa22897 100644
--- a/charts/recruit/values-integrationtest.yaml
+++ b/charts/recruit/values-integrationtest.yaml
@@ -1,6 +1,7 @@
 fhirserver:
   postgresql:
     auth:
+      # kics-scan ignore-line
       postgresPassword: fhir
 
 query:
@@ -13,6 +14,7 @@ query:
     port: 5432
     database: postgres
     username: postgres
+    # kics-scan ignore-line
     password: mypass
     resultsSchema: demo_cdm_results
     cdmSchema: demo_cdm
@@ -47,6 +49,7 @@ notify:
 postgresql:
   enabled: true
   auth:
+    # kics-scan ignore-line
     postgresPassword: recruit-notify-ha
 
 ohdsi:
@@ -58,6 +61,7 @@ ohdsi:
       port: 5432
       database: "postgres"
       username: "postgres"
+      # kics-scan ignore-line
       password: "mypass"
       schema: "webapi"
     extraEnv:
diff --git a/charts/recruit/values-test.yaml b/charts/recruit/values-test.yaml
index efee8751..b5926cd6 100644
--- a/charts/recruit/values-test.yaml
+++ b/charts/recruit/values-test.yaml
@@ -1,6 +1,7 @@
 ohdsi:
   postgresql:
     auth:
+      # kics-scan ignore-line
       postgresPassword: ohdsi
     primary:
       service:
@@ -17,6 +18,7 @@ ohdsi:
 fhirserver:
   postgresql:
     auth:
+      # kics-scan ignore-line
       postgresPassword: fhir
     primary:
       service:
@@ -73,6 +75,7 @@ notify:
 postgresql:
   enabled: true
   auth:
+    # kics-scan ignore-line
     postgresPassword: recruit-notify-ha
   primary:
     service:
diff --git a/charts/recruit/values.yaml b/charts/recruit/values.yaml
index 63eeb112..1e390bfa 100644
--- a/charts/recruit/values.yaml
+++ b/charts/recruit/values.yaml
@@ -158,7 +158,7 @@ query:
   image: # +doc-gen:ignore
     registry: ghcr.io
     repository: miracum/recruit/query
-    tag: v10.1.6 # x-release-please-version
+    tag: v10.1.7 # x-release-please-version
     pullPolicy: IfNotPresent
 
   metrics:
@@ -316,7 +316,7 @@ notify:
   image: # +doc-gen:ignore
     registry: ghcr.io
     repository: miracum/recruit/notify
-    tag: v10.1.6 # x-release-please-version
+    tag: v10.1.7 # x-release-please-version
     pullPolicy: IfNotPresent
 
   metrics:
@@ -496,7 +496,7 @@ list:
   image: # +doc-gen:ignore
     registry: ghcr.io
     repository: miracum/recruit/list
-    tag: v10.1.6 # x-release-please-version
+    tag: v10.1.7 # x-release-please-version
     pullPolicy: IfNotPresent
 
   # -- the service used to expose the list module web port
@@ -677,7 +677,7 @@ curl: # +doc-gen:ignore
   image:
     registry: docker.io
     repository: curlimages/curl
-    tag: 8.2.1@sha256:bb0843a1307b1aa73f65f24379d11dde881c16db62ba50810de0c64d48e740ed
+    tag: 8.4.0@sha256:4a3396ae573c44932d06ba33f8696db4429c419da87cbdc82965ee96a37dd0af
 
 broadseaAtlasdb:
   # -- whether to deploy the OHDSI Broadsea Atlasdb (<https://github.com/OHDSI/Broadsea-Atlasdb>)