diff --git a/Dockerfile b/Dockerfile
index a8c14a5..28fb8c1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -22,9 +22,9 @@
 
 FROM ubuntu:22.04
 
-ADD https://download.nextcloud.com/server/releases/nextcloud-28.0.7.tar.bz2 /root/nextcloud.tar.bz2
-ADD https://github.com/nextcloud-releases/richdocuments/releases/download/v8.3.8/richdocuments-v8.3.8.tar.gz /root/richdocuments.tar.gz
-ADD https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v9.2.2/onlyoffice.tar.gz /root/onlyoffice.tar.gz
+ADD https://download.nextcloud.com/server/releases/nextcloud-28.0.14.tar.bz2 /root/nextcloud.tar.bz2
+ADD https://github.com/nextcloud-releases/richdocuments/releases/download/v8.3.13/richdocuments-v8.3.13.tar.gz /root/richdocuments.tar.gz
+ADD https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v9.5.0/onlyoffice.tar.gz /root/onlyoffice.tar.gz
 COPY resources/entrypoint.sh /usr/sbin/
 COPY resources/60-nextcloud.ini /etc/php/8.1/apache2/conf.d/
 COPY resources/60-nextcloud.ini /etc/php/8.1/cli/conf.d/
diff --git a/Makefile b/Makefile
index 85854ef..7677b8f 100644
--- a/Makefile
+++ b/Makefile
@@ -18,7 +18,7 @@
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 app_name=nextcloud
-app_version=28.0.7-0
+app_version=28.0.14-0
 app_upgrade_from=27.1.6-0
 
 ucs_version=5.0
diff --git a/setup b/setup
index f3d8512..6c83ed4 100644
--- a/setup
+++ b/setup
@@ -111,7 +111,8 @@ $OCC upgrade 2>&1>> "$UPGRADE_LOGFILE"
 error_msg "The upgrade log is written to $UPGRADE_LOGFILE within the nextcloud container"
 
 # basic Nextcloud configuration
-eval "$(cat \"$NC_UCR_FILE\")"
+# shellcheck disable=SC1090
+source "${NC_UCR_FILE}"
 if [ "$NC_IS_UPGRADE" -eq 0 ] ; then
     $OCC config:system:set updatechecker --type=boolean --value="false"    # this is handled via UCS AppCenter
     $OCC config:system:set upgrade.disable-web --type=boolean --value="true"