MaterializeInc · def- · Nov 21, 2025 · Nov 19, 2025
@@ -324,7 +324,7 @@ $ ps ax | grep <FAULTY-PROCESS-NAME>
 $ gdb -p <FAULTY-PROCESS-PID>
 ```
 
-[autouseradd]: https://github.com/benesch/autouseradd
+[autouseradd]: https://github.com/MaterializeInc/autouseradd
 [Buildkite]: https://buildkite.com
 [Docker Compose]: https://docs.docker.com/compose/
 [MacStadium]: https://www.macstadium.com

diff --git a/misc/images/debezium/Dockerfile b/misc/images/debezium/Dockerfile
@@ -16,7 +16,7 @@ FROM confluentinc/cp-kafka-connect-base:8.0.0
 # Be sure to use a `X.Y.Z.Final` tag here; `X.Y` tags refer to the latest minor
 # version in the release series, and minor versions have been known to introduce
 # breakage.
-ARG DEBEZIUM_VERSION="3.2.0.Final"
+ARG DEBEZIUM_VERSION="3.3.1.Final"
 
 RUN : \
     && curl -fsSL https://repo1.maven.org/maven2/io/debezium/debezium-connector-mysql/${DEBEZIUM_VERSION}/debezium-connector-mysql-${DEBEZIUM_VERSION}-plugin.tar.gz | tar -zxC /usr/share/java \

diff --git a/misc/images/materialized-base/Dockerfile b/misc/images/materialized-base/Dockerfile
@@ -15,7 +15,7 @@
 # deployed to production, but the version needs to be bumped whenever features
 # that the console depends upon are removed (to a version of the console that
 # doesn't depend on those features).
-FROM materialize/console:26.0.0-dev.2 AS console
+FROM materialize/console:26.0.0 AS console
 
 MZFROM ubuntu-base
 

diff --git a/misc/images/ubuntu-base/Dockerfile b/misc/images/ubuntu-base/Dockerfile
@@ -7,7 +7,7 @@
 # the Business Source License, use of this software will be governed
 # by the Apache License, Version 2.0.
 
-FROM ubuntu:plucky-20251001
+FROM ubuntu:resolute-20251101
 
 # Ensure any Rust binaries that crash print a backtrace.
 ENV RUST_BACKTRACE=1

diff --git a/misc/python/materialize/mzcompose/__init__.py b/misc/python/materialize/mzcompose/__init__.py
@@ -33,7 +33,7 @@
 say = ui.speaker("C> ")
 
 
-DEFAULT_CONFLUENT_PLATFORM_VERSION = "7.9.0"
+DEFAULT_CONFLUENT_PLATFORM_VERSION = "7.9.4"
 
 DEFAULT_MZ_VOLUMES = [
     "mzdata:/mzdata",

diff --git a/misc/python/materialize/mzcompose/services/cockroach.py b/misc/python/materialize/mzcompose/services/cockroach.py
@@ -21,6 +21,7 @@
 
 
 class Cockroach(Service):
+    # TODO(def-): Bump when https://github.com/cockroachdb/cockroach/issues/158051 is fixed
     DEFAULT_COCKROACH_TAG = "v24.2.0"
 
     def __init__(

diff --git a/misc/python/materialize/mzcompose/services/grafana.py b/misc/python/materialize/mzcompose/services/grafana.py
@@ -19,7 +19,7 @@ def __init__(self, name: str = "grafana") -> None:
         super().__init__(
             name=name,
             config={
-                "image": "grafana/grafana:9.3.2",
+                "image": "grafana/grafana:12.2.0",
                 "ports": ["3000"],
                 "environment": [
                     "GF_AUTH_ANONYMOUS_ENABLED=true",

diff --git a/misc/python/materialize/mzcompose/services/mysql.py b/misc/python/materialize/mzcompose/services/mysql.py
@@ -32,7 +32,7 @@ def create_mysql_server_args(server_id: str, is_master: bool) -> list[str]:
 
 class MySql(Service):
     DEFAULT_ROOT_PASSWORD = "p@ssw0rd"
-    DEFAULT_VERSION = "9.4.0"
+    DEFAULT_VERSION = "9.5.0"
 
     DEFAULT_ADDITIONAL_ARGS = create_mysql_server_args(server_id="1", is_master=True)
 

diff --git a/misc/python/materialize/mzcompose/services/polaris.py b/misc/python/materialize/mzcompose/services/polaris.py
@@ -18,7 +18,7 @@ def __init__(
         self,
         name: str = "polaris-bootstrap",
         image: str = "apache/polaris-admin-tool",
-        tag: str = "1.0.1-incubating",
+        tag: str = "1.2.0-incubating",
         environment: list[str] = [
             "POLARIS_BOOTSTRAP_CREDENTIALS=POLARIS,root,root",
             "POLARIS_PERSISTENCE_TYPE=relational-jdbc",

diff --git a/misc/python/materialize/mzcompose/services/prometheus.py b/misc/python/materialize/mzcompose/services/prometheus.py
@@ -19,7 +19,7 @@ def __init__(self, name: str = "prometheus") -> None:
         super().__init__(
             name=name,
             config={
-                "image": "prom/prometheus:v2.41.0",
+                "image": "prom/prometheus:v3.7.3",
                 "ports": ["9090"],
                 "volumes": [
                     str(

diff --git a/misc/python/materialize/mzcompose/services/redpanda.py b/misc/python/materialize/mzcompose/services/redpanda.py
@@ -13,7 +13,7 @@
     ServiceConfig,
 )
 
-REDPANDA_VERSION = "v25.1.4"
+REDPANDA_VERSION = "v25.2.11"
 
 
 class Redpanda(Service):

diff --git a/test/azurite/Dockerfile b/test/azurite/Dockerfile
@@ -7,11 +7,11 @@
 # the Business Source License, use of this software will be governed
 # by the Apache License, Version 2.0.
 
-FROM node:20-slim
+FROM node:25-slim
 
 RUN apt-get update && \
     apt-get install -y eatmydata netcat-openbsd && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
-RUN npm install -g azurite@3.33.0
+RUN npm install -g azurite@3.35.0
diff --git a/test/dnsmasq/Dockerfile b/test/dnsmasq/Dockerfile
@@ -7,7 +7,7 @@
 # the Business Source License, use of this software will be governed
 # by the Apache License, Version 2.0.
 
-FROM alpine:3.22.1
+FROM alpine:3.22.2
 
 RUN apk update && apk add dnsmasq
 

diff --git a/test/kafka-matrix/mzcompose.py b/test/kafka-matrix/mzcompose.py
@@ -29,8 +29,9 @@
     "v23.2.29",
     "v23.3.21",
     "v24.1.21",
-    "v24.2.24",
-    "v24.3.14",
+    "v24.2.27",
+    "v24.3.18",
+    "v25.1.12",
     REDPANDA_VERSION,
     "latest",
 ]
@@ -40,14 +41,14 @@
     "7.1.16",
     "7.2.14",
     "7.3.12",
-    "7.4.9",
-    "7.5.8",
-    "7.6.5",
-    "7.7.3",
-    "7.8.2",
+    "7.4.12",
+    "7.5.11",
+    "7.6.8",
+    "7.7.6",
+    "7.8.5",
     DEFAULT_CONFLUENT_PLATFORM_VERSION,
-    # There is currently a mismatch in the latest versions between zookeeper
-    # (7.9.0) and cp-kafka (8.0.0), making running them in combination
+    # There is currently a mismatch in the latest versions between cp-zookeeper
+    # (7.9.4) and cp-kafka (8.0.0), making running them in combination
     # impossible
     # "latest",
 ]

diff --git a/test/mssql-server/Dockerfile b/test/mssql-server/Dockerfile
@@ -9,5 +9,4 @@
 
 # Mirrored to DockerHub
 
-# 2017 mssql images core on OSx, 2019 is the earliest that has passed
-FROM mcr.microsoft.com/mssql/server:2019-CU32-ubuntu-20.04
+FROM mcr.microsoft.com/mssql/server:2022-CU21-ubuntu-22.04
diff --git a/test/mysql/Dockerfile b/test/mysql/Dockerfile
@@ -9,6 +9,6 @@
 
 MZFROM test-certs as certs
 
-FROM mysql:8.0.42
+FROM mysql:9.5.0
 
 ENV MYSQL_ROOT_PASSWORD=p@ssw0rd
diff --git a/test/postgres/Dockerfile b/test/postgres/Dockerfile
@@ -9,7 +9,7 @@
 
 MZFROM test-certs as certs
 
-FROM postgres:17.4
+FROM postgres:17.7
 
 ENV POSTGRES_PASSWORD=postgres
 

diff --git a/test/ssh-bastion-host/Dockerfile b/test/ssh-bastion-host/Dockerfile
@@ -8,4 +8,4 @@
 # by the Apache License, Version 2.0.
 
 # Mirrored so it's available on DockerHub when quay.io is down
-FROM quay.io/panubo/sshd:1.7.1
+FROM quay.io/panubo/sshd:1.9.0