diff --git a/stacks/observability/compose.yaml b/stacks/observability/compose.yaml
index a68fdd60..080ef77a 100644
--- a/stacks/observability/compose.yaml
+++ b/stacks/observability/compose.yaml
@@ -202,7 +202,7 @@ services:
   # ---------------------------------------------------------------------------
   prometheus:
     <<: *service-defaults
-    image: prom/prometheus:v3.15.0@sha256:efd719c99d83b060d9daefdcf00360461adf279f45ef5391f8d111892118753e
+    image: prom/prometheus:v3.15.1@sha256:fa3302279710be2f21a8301ec17a8b4f2301fd829bd113839b3b6b02b6f191a2
     container_name: prometheus
     user: "65534:65534"
     # 5.2x the 198 MiB peak, the most generous multiplier of the seven, because
@@ -557,7 +557,7 @@ services:
   # ---------------------------------------------------------------------------
   snmp-exporter:
     <<: *service-defaults
-    image: prom/snmp-exporter:v0.30.1@sha256:e5fd5e8b43ace6c088fe9bf0b37b7fff0e04380bee352be7ec41b853a4dd5859
+    image: prom/snmp-exporter:v0.31.0@sha256:e5f1aba929145cea2a3bad89c29959efaec0dc26fb87e3761414616a1a392c1c
     container_name: snmp-exporter
     # Mounts ./snmp-exporter/.rendered/snmp.yaml, written 0600 by
     # render-config.sh, so it must run as the UID that rendered it. Required,
@@ -602,7 +602,7 @@ services:
   # ---------------------------------------------------------------------------
   blackbox-exporter:
     <<: *service-defaults
-    image: prom/blackbox-exporter:v0.29.0@sha256:9613f2884689b6fad9f1939f6a3b0388c93a022cfaededb19545b329b5c83dea
+    image: prom/blackbox-exporter:v0.29.1@sha256:ea1c7aa3ef3f307cd03e85f34abb604478ccb90b567fc690da0cd9776da76b13
     container_name: blackbox-exporter
     # 65534, and this line is here because the image does not supply one:
     # prom/blackbox-exporter:v0.28.0 sets no USER, so without it this container