diff --git a/src/development/stack.yml b/src/development/stack.yml
index fcf94ddd..45d5485e 100644
--- a/src/development/stack.yml
+++ b/src/development/stack.yml
@@ -396,8 +396,6 @@ services:
     # You cannot access the database migrations directly.
     image: maevsi/sqitch:dev
     secrets:
-      - postgres_role_grafana_password
-      - postgres_role_grafana_username
       - postgres_role_maevsi-postgraphile_password
       - postgres_role_maevsi-postgraphile_username
       - postgres_role_maevsi_password
diff --git a/src/production/production.yml b/src/production/production.yml
index 49666adf..5ec0059f 100644
--- a/src/production/production.yml
+++ b/src/production/production.yml
@@ -51,7 +51,7 @@ services:
         - (( append ))
         - traefik.http.routers.maevsi.middlewares=maevsi_cors,maevsi_redirectregex
         - traefik.http.routers.maevsi_secure.tls.certresolver=default
-    image: ghcr.io/maevsi/maevsi:7.2.1
+    image: ghcr.io/maevsi/maevsi:8.0.1
     user: (( prune ))
   maevsi_beta:
     # You can access the main project frontend's beta version at [beta.localhost](https://beta.localhost/).
@@ -75,7 +75,7 @@ services:
       NUXT_PUBLIC_TURNSTILE_SITE_KEY: ${MAEVSI_NUXT_PUBLIC_TURNSTILE_SITE_KEY}
       NUXT_PUBLIC_VIO_ENVIRONMENT: beta
       PGHOST: ${MAEVSI_PGHOST}
-    image: ghcr.io/maevsi/maevsi:7.2.1
+    image: ghcr.io/maevsi/maevsi:8.0.1
     secrets:
       - source: maevsi_api-notification-secret
         target: /run/environment-variables/NUXT_PRIVATE_API_NOTIFICATION_SECRET
@@ -128,7 +128,7 @@ services:
         - (( append ))
         - traefik.http.routers.prometheus_secure.tls.certresolver=default
   sqitch:
-    image: ghcr.io/maevsi/sqitch:4.13.4
+    image: ghcr.io/maevsi/sqitch:5.0.1
     volumes: (( prune ))
   traefik:
     command: