diff --git a/output/staging/manifest.yaml b/output/staging/manifest.yaml
index 94b44ba..512896e 100644
--- a/output/staging/manifest.yaml
+++ b/output/staging/manifest.yaml
@@ -118,7 +118,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+        image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
         name: default
         ports:
         - containerPort: 8080
@@ -274,7 +274,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+        image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
         name: apply-db-migrations
         resources:
           limits:
@@ -337,7 +337,7 @@ spec:
         - secretRef:
             name: tsn-26bc5hg2gb
             optional: false
-        image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+        image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
         name: django-collectstatic
         resources:
           limits:
@@ -463,7 +463,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
@@ -564,7 +564,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
@@ -664,7 +664,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
@@ -765,7 +765,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
@@ -866,7 +866,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
@@ -968,7 +968,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
@@ -1069,7 +1069,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
@@ -1171,7 +1171,7 @@ spec:
             - secretRef:
                 name: tsn-26bc5hg2gb
                 optional: false
-            image: ghcr.io/lcogt/mop/mop:5.3.6.4-3-g91628db@sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+            image: ghcr.io/lcogt/mop/mop:5.3.6.5-2-gaa90dcc@sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
             name: default
             securityContext:
               capabilities:
diff --git a/staging/base/Kptfile b/staging/base/Kptfile
index 2f0ee63..21b3a45 100644
--- a/staging/base/Kptfile
+++ b/staging/base/Kptfile
@@ -7,12 +7,12 @@ upstream:
   git:
     repo: https://github.com/LCOGT/mop
     directory: /k8s/base
-    ref: 91628dba4c2cf2b821b808e855d1e9ef024c7c2b
+    ref: aa90dccbf78b489dc147e5c4a21144111e706618
   updateStrategy: resource-merge
 upstreamLock:
   type: git
   git:
     repo: https://github.com/LCOGT/mop
     directory: /k8s/base
-    ref: 91628dba4c2cf2b821b808e855d1e9ef024c7c2b
-    commit: 91628dba4c2cf2b821b808e855d1e9ef024c7c2b
+    ref: aa90dccbf78b489dc147e5c4a21144111e706618
+    commit: aa90dccbf78b489dc147e5c4a21144111e706618
diff --git a/staging/cd-set-images/kustomization.yaml b/staging/cd-set-images/kustomization.yaml
index 2a138f9..15f7f23 100644
--- a/staging/cd-set-images/kustomization.yaml
+++ b/staging/cd-set-images/kustomization.yaml
@@ -5,7 +5,7 @@ apiVersion: kustomize.config.k8s.io/v1alpha1
 kind: Component
 
 images:
-- digest: sha256:0e4af98721774df32415924abd501f25555c70a8c24e21db2fcf948732805fdd
+- digest: sha256:4c865bb26652954f547691a6cd4282a82314d649a6877672d6f901ac6b600e94
   name: mop
   newName: ghcr.io/lcogt/mop/mop
-  newTag: 5.3.6.4-3-g91628db
+  newTag: 5.3.6.5-2-gaa90dcc