diff --git a/output/staging/manifest.yaml b/output/staging/manifest.yaml
index 31a67ad..525d7a2 100644
--- a/output/staging/manifest.yaml
+++ b/output/staging/manifest.yaml
@@ -118,7 +118,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+        image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
         name: default
         ports:
         - containerPort: 8080
@@ -274,7 +274,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+        image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
         name: apply-db-migrations
         resources:
           limits:
@@ -337,7 +337,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+        image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
         name: django-collectstatic
         resources:
           limits:
@@ -463,7 +463,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
@@ -564,7 +564,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
@@ -664,7 +664,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
@@ -765,7 +765,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
@@ -866,7 +866,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
@@ -968,7 +968,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
@@ -1069,7 +1069,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
@@ -1171,7 +1171,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6-3-g19118ed@sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+            image: ghcr.io/lcogt/mop/mop:5.3.6.1-1-g48efa79@sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
             name: default
             securityContext:
               capabilities:
diff --git a/staging/base/Kptfile b/staging/base/Kptfile
index 1ab8a00..0951fe5 100644
--- a/staging/base/Kptfile
+++ b/staging/base/Kptfile
@@ -7,12 +7,12 @@ upstream:
   git:
     repo: https://github.com/LCOGT/mop
     directory: /k8s/base
-    ref: 19118ed0037e0ae20e12b47dec1c8b7dd67bc085
+    ref: 48efa79bd6e75cb2d38bafc0ae9c25b1ccaa3a75
   updateStrategy: resource-merge
 upstreamLock:
   type: git
   git:
     repo: https://github.com/LCOGT/mop
     directory: /k8s/base
-    ref: 19118ed0037e0ae20e12b47dec1c8b7dd67bc085
-    commit: 19118ed0037e0ae20e12b47dec1c8b7dd67bc085
+    ref: 48efa79bd6e75cb2d38bafc0ae9c25b1ccaa3a75
+    commit: 48efa79bd6e75cb2d38bafc0ae9c25b1ccaa3a75
diff --git a/staging/cd-set-images/kustomization.yaml b/staging/cd-set-images/kustomization.yaml
index 6b431c2..8b6d434 100644
--- a/staging/cd-set-images/kustomization.yaml
+++ b/staging/cd-set-images/kustomization.yaml
@@ -5,7 +5,7 @@ apiVersion: kustomize.config.k8s.io/v1alpha1
 kind: Component
 
 images:
-- digest: sha256:d40567a1aad03d35680d223f954c7b0a10cacce40cc0805dffe371d0bfa91a34
+- digest: sha256:0698ed54741a68a516fd7f5c7688e78c9e8fb6c2e58dbfe64f43c4bfaad603e1
   name: mop
   newName: ghcr.io/lcogt/mop/mop
-  newTag: 5.3.6-3-g19118ed
+  newTag: 5.3.6.1-1-g48efa79