diff --git a/cli/Dockerfile b/cli/Dockerfile
index a90bf7ca6fb8173320fe116af73fcbae2e4e3145..c961c3f31fd21307a2a5853c7d160e0fbeffcd27 100644
--- a/cli/Dockerfile
+++ b/cli/Dockerfile
@@ -28,7 +28,7 @@ RUN curl -L "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz" | tar
 FROM registry.fedoraproject.org/fedora:35 as flux
 
 # renovate: datasource=github-releases depName=fluxcd/flux2
-ARG FLUX_VERSION=v0.28.2
+ARG FLUX_VERSION=v0.28.5
 ENV FLUX_VERSION=${FLUX_VERSION}
 
 RUN curl -L https://github.com/fluxcd/flux2/releases/download/${FLUX_VERSION}/flux_$(sed 's/^v//g' <<<${FLUX_VERSION})_linux_amd64.tar.gz | tar xvzf - flux \
diff --git a/clusters/k8s01/flux-system/gotk-components.yaml b/clusters/k8s01/flux-system/gotk-components.yaml
index 0aacff6f9a0d4bc62d2cb441f2459477292067f0..3d4e70046834189528516b15bbe4bf744e72643f 100644
--- a/clusters/k8s01/flux-system/gotk-components.yaml
+++ b/clusters/k8s01/flux-system/gotk-components.yaml
@@ -1,6 +1,6 @@
 ---
 # This manifest was generated by flux. DO NOT EDIT.
-# Flux Version: v0.28.2
+# Flux Version: v0.28.5
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller
 apiVersion: v1
 kind: Namespace
@@ -8,7 +8,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     pod-security.kubernetes.io/warn: restricted
     pod-security.kubernetes.io/warn-version: latest
   name: flux-system
@@ -22,7 +22,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: alerts.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -243,7 +243,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -753,7 +753,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -1480,7 +1480,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -2046,7 +2046,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -2885,7 +2885,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -3366,7 +3366,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
   group: kustomize.toolkit.fluxcd.io
@@ -4481,7 +4481,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: providers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -4686,7 +4686,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: receivers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -4912,7 +4912,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: helm-controller
   namespace: flux-system
 ---
@@ -4922,7 +4922,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: kustomize-controller
   namespace: flux-system
 ---
@@ -4932,7 +4932,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: notification-controller
   namespace: flux-system
 ---
@@ -4942,7 +4942,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: source-controller
   namespace: flux-system
 ---
@@ -4952,7 +4952,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -5033,7 +5033,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: cluster-reconciler-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -5053,7 +5053,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: crd-controller-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -5085,7 +5085,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -5105,7 +5105,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -5125,7 +5125,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     control-plane: controller
   name: webhook-receiver
   namespace: flux-system
@@ -5145,7 +5145,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     control-plane: controller
   name: helm-controller
   namespace: flux-system
@@ -5174,7 +5174,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/helm-controller:v0.18.1
+        image: ghcr.io/fluxcd/helm-controller:v0.18.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5227,7 +5227,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     control-plane: controller
   name: kustomize-controller
   namespace: flux-system
@@ -5256,7 +5256,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/kustomize-controller:v0.22.1
+        image: ghcr.io/fluxcd/kustomize-controller:v0.22.3
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5309,7 +5309,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -5337,7 +5337,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/notification-controller:v0.23.1
+        image: ghcr.io/fluxcd/notification-controller:v0.23.2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5396,7 +5396,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -5429,7 +5429,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: ghcr.io/fluxcd/source-controller:v0.22.2
+        image: ghcr.io/fluxcd/source-controller:v0.22.5
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
@@ -5489,7 +5489,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: allow-egress
   namespace: flux-system
 spec:
@@ -5509,7 +5509,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: allow-scraping
   namespace: flux-system
 spec:
@@ -5529,7 +5529,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.28.2
+    app.kubernetes.io/version: v0.28.5
   name: allow-webhooks
   namespace: flux-system
 spec: