diff --git a/stacks/observability/compose.yaml b/stacks/observability/compose.yaml
index b52322c..cf9bb68 100644
--- a/stacks/observability/compose.yaml
+++ b/stacks/observability/compose.yaml
@@ -28,7 +28,7 @@ services:
   # ---------------------------------------------------------------------------
   prometheus:
     <<: *service-defaults
-    image: prom/prometheus:v3.13.2@sha256:508729e0e2d18e11fd742a5a5ca70e557b940a93948c3c95fd0123a6fd538b69
+    image: prom/prometheus:v3.14.0@sha256:5ce7540c3c00ef4ab0c9d2c995c6a5b9c421f44b4a115d97a2c7af3b1c21cbb0
     container_name: prometheus
     user: "65534:65534"
     command:
@@ -60,7 +60,7 @@ services:
   # ---------------------------------------------------------------------------
   alertmanager:
     <<: *service-defaults
-    image: prom/alertmanager:v0.33.1@sha256:9e082985f56f4c8c9f724e18f2288c6708f472e56a5286b8863d080434ea065d
+    image: prom/alertmanager:v0.34.0@sha256:690c7b525f4367aa91f73e2f91c632206d32e97c6384bdbf2fb7a861b420340d
     container_name: alertmanager
     # Mounts ./alertmanager/.rendered, written 0600 by render-config.sh, so it
     # must run as the UID that rendered it. Required rather than defaulted: a