diff --git a/healprod/preprod.healdata.org/values/values.yaml b/healprod/preprod.healdata.org/values/values.yaml
index d1d490e7..dcad0fa0 100644
--- a/healprod/preprod.healdata.org/values/values.yaml
+++ b/healprod/preprod.healdata.org/values/values.yaml
@@ -10,14 +10,14 @@ arborist:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/arborist
-    tag: '2025.11'
+    tag: '2025.12'
 audit:
   enabled: true
   externalSecrets:
     auditG3auto: healpreprod-audit-g3auto
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/audit-service
-    tag: '2025.11'
+    tag: '2025.12'
   serviceAccount:
     annotations:
       eks.amazonaws.com/role-arn: arn:aws:iam::205252583234:role/healprod--healpreprod-helm--audit-sqs-receiver
@@ -45,7 +45,7 @@ dashboard:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/gen3-statics
-    tag: '2025.11'
+    tag: '2025.12'
   serviceAccount:
     annotations:
       eks.amazonaws.com/role-arn: arn:aws:iam::205252583234:role/healprod--healpreprod-helm--dashboard-access
@@ -72,7 +72,7 @@ fence:
     fenceJwtKeys: healpreprod-fence-jwt
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/fence
-    tag: '12.4.0'
+    tag: '2025.12'
   FENCE_CONFIG_PUBLIC:
     S3_BUCKETS:
       healprod-healpreprod-205252583234-upload:
@@ -159,7 +159,7 @@ hatchery:
     stataG3auto: stata-workspace-gen3-license-preprod-heal
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/hatchery
-    tag: '2.6.0'
+    tag: '2025.12'
   hatchery:
     json: |-
       {
@@ -369,14 +369,14 @@ indexd:
     serviceCreds: healpreprod-indexd-service-creds
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/indexd
-    tag: '2025.11'
+    tag: '2025.12'
 manifestservice:
   enabled: true
   externalSecrets:
     manifestserviceG3auto: healpreprod-manifestservice-g3auto
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/manifestservice
-    tag: '2025.11'
+    tag: '2025.12'
   serviceAccount:
     annotations:
       eks.amazonaws.com/role-arn: arn:aws:iam::205252583234:role/healprod--healpreprod-helm--manifest-service-sa
@@ -1406,7 +1406,7 @@ metadata:
     metadataG3auto: healpreprod-metadata-g3auto
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/metadata-service
-    tag: '4.1.0'
+    tag: '2025.12'
   useAggMds: true
   schedule: 30 8 * * *
   suspendCronjob: false
@@ -1416,7 +1416,7 @@ peregrine:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/peregrine
-    tag: '2025.11'
+    tag: '2025.12'
 portal:
   enabled: true
   dataUploadBucket: healprod-healpreprod-205252583234-upload
@@ -1429,12 +1429,12 @@ portal:
     gen3Bundle: heal
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/data-portal
-    tag: '2025.11'
+    tag: '2025.12'
 requestor:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/requestor
-    tag: '2025.11'
+    tag: '2025.12'
 revproxy:
   replicaCount: 4
   autoscaling:
@@ -1445,7 +1445,7 @@ revproxy:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/nginx
-    tag: '2025.11'
+    tag: '2025.12'
   ingress:
     aws:
       group: healprod
@@ -1453,7 +1453,7 @@ sheepdog:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/sheepdog
-    tag: '2025.11'
+    tag: '2025.12'
   replicaCount: 4
 sower:
   enabled: true
@@ -1462,7 +1462,7 @@ sower:
     createK8sSowerJobsSecret: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/sower
-    tag: '2025.11'
+    tag: '2025.12'
   sowerConfig:
     - action: batch-export
       activeDeadlineSeconds: 600
@@ -1476,7 +1476,7 @@ sower:
                 name: manifest-global
           - name: BUCKET
             value: preprod-healdata-org-batch-export-bucket
-        image: quay.io/cdis/batch-export:2025.11
+        image: quay.io/cdis/batch-export:2025.12
         labels:
           internet: 'yes'
         memory-limit: 1Gi
@@ -1498,8 +1498,8 @@ ssjdispatcher:
     credsFile: healpreprod-ssjdispatcher-creds
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/ssjdispatcher
-    tag: '2025.11'
-  indexing: quay.io/cdis/indexs3client:2025.11
+    tag: '2025.12'
+  indexing: quay.io/cdis/indexs3client:2025.12
 wts:
   enabled: true
   externalSecrets:
@@ -1508,4 +1508,4 @@ wts:
     wtsOidcClient: healpreprod-wts-client-secret
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/workspace-token-service
-    tag: '2025.11'
+    tag: '2025.12'