diff --git a/common/zarf.yaml b/common/zarf.yaml
index 5b55415..492aed1 100644
--- a/common/zarf.yaml
+++ b/common/zarf.yaml
@@ -13,7 +13,7 @@ components:
     charts:
       - name: crd
         url: https://neuvector.github.io/neuvector-helm/
-        version: 2.8.10
+        version: 2.8.11
         namespace: neuvector
         gitPath: charts/crd
       - name: uds-neuvector-config
@@ -24,7 +24,7 @@ components:
           - ../chart/values.yaml
       - name: core
         url: https://neuvector.github.io/neuvector-helm/
-        version: 2.8.10
+        version: 2.8.11
         namespace: neuvector
         gitPath: charts/core
         valuesFiles:
diff --git a/releaser.yaml b/releaser.yaml
index 4033b58..8f7dc56 100644
--- a/releaser.yaml
+++ b/releaser.yaml
@@ -4,10 +4,10 @@
 flavors:
   - name: upstream
     # renovate-uds: datasource=docker depName=docker.io/neuvector/controller versioning=docker
-    version: 5.4.8-uds.0
+    version: 5.4.9-uds.0
   - name: registry1
     # renovate-uds: datasource=docker depName=registry1.dso.mil/ironbank/neuvector/neuvector/controller versioning=docker
-    version: 5.4.8-uds.0
+    version: 5.4.9-uds.0
   - name: unicorn
     # renovate-uds: datasource=docker depName=quay.io/rfcurated/neuvector/controller versioning=docker extractVersion=^(?<version>\d+\.\d+\.\d+)(?:-.*)?$
-    version: 5.4.8-uds.0
+    version: 5.4.9-uds.0
diff --git a/tests/neuvector.test.ts b/tests/neuvector.test.ts
index d9e8a60..11bf61c 100644
--- a/tests/neuvector.test.ts
+++ b/tests/neuvector.test.ts
@@ -11,7 +11,7 @@ const url = `https://neuvector.admin.uds.dev`;
 test.use({ baseURL: url });
 
 test("validate system health", async ({ page }) => {
-  test.setTimeout(60_000);
+  test.setTimeout(120_000);
   await test.step("check sso", async () => {
     const eulaPromise = page.waitForResponse(res => res.url().startsWith(`${url}/eula`));
     await page.goto("/");
diff --git a/tests/playwright.config.ts b/tests/playwright.config.ts
index dc6bcb3..b42376b 100644
--- a/tests/playwright.config.ts
+++ b/tests/playwright.config.ts
@@ -14,7 +14,7 @@ export const authFile = `${playwrightDir}/auth/user.json`;
 export default defineConfig({
   fullyParallel: true,
   forbidOnly: !!process.env.CI, // fail CI if you accidentally leave `test.only` in source
-  retries: 2, // NeuVector can be slow clustering on install and does not have great healthprobes
+  retries: 4, // NeuVector can be slow clustering on install and does not have great healthprobes
   workers: 20, // Support up to 20 parallel workers
   timeout: 45000, // 45 second timeout for tests
   reporter: [
diff --git a/values/registry1-values.yaml b/values/registry1-values.yaml
index 3e47600..8a136c4 100644
--- a/values/registry1-values.yaml
+++ b/values/registry1-values.yaml
@@ -3,7 +3,7 @@
 
 registry: registry1.dso.mil
 # renovate: datasource=docker depName=registry1.dso.mil/ironbank/neuvector/neuvector/controller versioning=docker
-tag: "5.4.8"
+tag: "5.4.9"
 manager:
   image:
     repository: ironbank/neuvector/neuvector/manager
diff --git a/values/unicorn-values.yaml b/values/unicorn-values.yaml
index e4566b2..dc95b87 100644
--- a/values/unicorn-values.yaml
+++ b/values/unicorn-values.yaml
@@ -6,7 +6,7 @@ autoGenerateCert: true
 
 registry: quay.io
 # renovate: datasource=docker depName=quay.io/rfcurated/neuvector/controller versioning=docker
-tag: 5.4.8-jammy-scratch-fips-rfcurated
+tag: 5.4.9-jammy-scratch-fips-rfcurated
 
 manager:
   image:
diff --git a/values/upstream-values.yaml b/values/upstream-values.yaml
index e0ab1ec..c6c411a 100644
--- a/values/upstream-values.yaml
+++ b/values/upstream-values.yaml
@@ -3,7 +3,7 @@
 
 registry: docker.io
 # renovate: datasource=docker depName=docker.io/neuvector/controller versioning=docker
-tag: "5.4.8"
+tag: "5.4.9"
 manager:
   image:
     repository: neuvector/manager
diff --git a/zarf.yaml b/zarf.yaml
index aa8899c..6660368 100644
--- a/zarf.yaml
+++ b/zarf.yaml
@@ -35,11 +35,11 @@ components:
         valuesFiles:
           - values/upstream-values.yaml
     images:
-      - docker.io/neuvector/controller:5.4.8
-      - docker.io/neuvector/manager:5.4.8
+      - docker.io/neuvector/controller:5.4.9
+      - docker.io/neuvector/manager:5.4.9
       - docker.io/neuvector/updater:latest
       - docker.io/neuvector/scanner:latest
-      - docker.io/neuvector/enforcer:5.4.8
+      - docker.io/neuvector/enforcer:5.4.9
 
   - name: neuvector
     required: true
@@ -53,11 +53,11 @@ components:
         valuesFiles:
           - values/registry1-values.yaml
     images:
-      - registry1.dso.mil/ironbank/neuvector/neuvector/controller:5.4.8
-      - registry1.dso.mil/ironbank/neuvector/neuvector/manager:5.4.8
+      - registry1.dso.mil/ironbank/neuvector/neuvector/controller:5.4.9
+      - registry1.dso.mil/ironbank/neuvector/neuvector/manager:5.4.9
       - registry1.dso.mil/ironbank/redhat/ubi/ubi9-minimal:9.7
       - registry1.dso.mil/ironbank/neuvector/neuvector/scanner:6
-      - registry1.dso.mil/ironbank/neuvector/neuvector/enforcer:5.4.8
+      - registry1.dso.mil/ironbank/neuvector/neuvector/enforcer:5.4.9
 
   - name: neuvector
     required: true
@@ -71,8 +71,8 @@ components:
         valuesFiles:
           - values/unicorn-values.yaml
     images:
-      - quay.io/rfcurated/neuvector/controller:5.4.8-jammy-scratch-fips-rfcurated
-      - quay.io/rfcurated/neuvector/manager:5.4.8-jammy-scratch-fips-rfcurated
-      - quay.io/rfcurated/neuvector/enforcer:5.4.8-jammy-scratch-fips-rfcurated
+      - quay.io/rfcurated/neuvector/controller:5.4.9-jammy-scratch-fips-rfcurated
+      - quay.io/rfcurated/neuvector/manager:5.4.9-jammy-scratch-fips-rfcurated
+      - quay.io/rfcurated/neuvector/enforcer:5.4.9-jammy-scratch-fips-rfcurated
       - quay.io/rfcurated/curl:8.18.0-jammy-scratch-fips-rfcurated
       - quay.io/rfcurated/neuvector/scanner:latest-jammy-scratch-fips-rfcurated