diff --git a/.tekton/managed-node-metadata-operator-agentic-sdlc-check-pull-request.yaml b/.tekton/managed-node-metadata-operator-agentic-sdlc-check-pull-request.yaml
index f9ac779f..b88a1c3a 100644
--- a/.tekton/managed-node-metadata-operator-agentic-sdlc-check-pull-request.yaml
+++ b/.tekton/managed-node-metadata-operator-agentic-sdlc-check-pull-request.yaml
@@ -43,7 +43,7 @@ spec:
       - name: url
         value: https://github.com/openshift/boilerplate
       - name: revision
-        value: b361d1a597f5a3a840ccea7efd40dc92f8cfa789
+        value: 195c29d18279f69ea5b4e53ae9d90a795c27144a
       - name: pathInRepo
         value: pipelines/agentic-sdlc-check/pipeline.yaml
 status: {}
diff --git a/boilerplate/_data/last-boilerplate-commit b/boilerplate/_data/last-boilerplate-commit
index 1d4e057b..db9c1a3d 100644
--- a/boilerplate/_data/last-boilerplate-commit
+++ b/boilerplate/_data/last-boilerplate-commit
@@ -1 +1 @@
-b361d1a597f5a3a840ccea7efd40dc92f8cfa789
+195c29d18279f69ea5b4e53ae9d90a795c27144a
diff --git a/boilerplate/openshift/golang-osd-e2e/.coderabbit.yaml b/boilerplate/openshift/golang-osd-e2e/.coderabbit.yaml
new file mode 100644
index 00000000..e4fdc1ba
--- /dev/null
+++ b/boilerplate/openshift/golang-osd-e2e/.coderabbit.yaml
@@ -0,0 +1,5 @@
+inheritance: true
+reviews:
+  path_filters:
+    # Boilerplate-managed: skip review of boilerplate changes
+    - "!boilerplate/**"
diff --git a/boilerplate/openshift/golang-osd-e2e/update b/boilerplate/openshift/golang-osd-e2e/update
index fbd86675..4e3a06aa 100755
--- a/boilerplate/openshift/golang-osd-e2e/update
+++ b/boilerplate/openshift/golang-osd-e2e/update
@@ -10,6 +10,14 @@ source $CONVENTION_ROOT/_lib/common.sh
 # Expect POST
 [[ "$1" == "POST" ]] || err "Got a parameter I don't understand: '$1'. Did the infrastructure change?"
 
+# Seed CodeRabbit configuration without overwriting repo customizations.
+if [[ ! -f "${REPO_ROOT}/.coderabbit.yaml" ]]; then
+	echo "Copying .coderabbit.yaml to your repository root."
+	cp "${HERE}/.coderabbit.yaml" "${REPO_ROOT}/.coderabbit.yaml"
+else
+	echo ".coderabbit.yaml already exists; leaving it unchanged."
+fi
+
 REPO_ROOT=$(git rev-parse --show-toplevel)
 OPERATOR_NAME=$(sed -n 's/.*OperatorName .*=.*"\([^"]*\)".*/\1/p' "${REPO_ROOT}/config/config.go")
 GO_MODULE_PATH=$(awk '/^module / { print $2; exit }' "${REPO_ROOT}/go.mod")
diff --git a/boilerplate/openshift/golang-osd-operator/.coderabbit.yaml b/boilerplate/openshift/golang-osd-operator/.coderabbit.yaml
new file mode 100644
index 00000000..e4fdc1ba
--- /dev/null
+++ b/boilerplate/openshift/golang-osd-operator/.coderabbit.yaml
@@ -0,0 +1,5 @@
+inheritance: true
+reviews:
+  path_filters:
+    # Boilerplate-managed: skip review of boilerplate changes
+    - "!boilerplate/**"
diff --git a/boilerplate/openshift/golang-osd-operator/update b/boilerplate/openshift/golang-osd-operator/update
index ff479267..0318348d 100755
--- a/boilerplate/openshift/golang-osd-operator/update
+++ b/boilerplate/openshift/golang-osd-operator/update
@@ -14,6 +14,15 @@ source $CONVENTION_ROOT/_lib/common.sh
 echo "Copying .codecov.yml to your repository root."
 cp ${HERE}/.codecov.yml $REPO_ROOT
 
+# Seed CodeRabbit configuration without overwriting repo customizations.
+CODERABBIT_CONFIG="${REPO_ROOT}/.coderabbit.yaml"
+if [[ ! -f "${CODERABBIT_CONFIG}" ]]; then
+  echo "Copying .coderabbit.yaml to your repository root."
+  cp "${HERE}/.coderabbit.yaml" "${CODERABBIT_CONFIG}"
+else
+  echo ".coderabbit.yaml already exists; leaving it unchanged."
+fi
+
 # Add OWNERS_ALIASES to $REPO_ROOT
 echo "Copying OWNERS_ALIASES to your repository root."
 cp -L ${HERE}/OWNERS_ALIASES $REPO_ROOT
diff --git a/build/Dockerfile b/build/Dockerfile
index e40bb7c3..ba3d808c 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -18,7 +18,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build -mod=mod -a -o
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1788166357
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1789349365
 
 ENV USER_UID=1001 \
     USER_NAME=managed-node-metadata-operator
diff --git a/build/Dockerfile.olm-registry b/build/Dockerfile.olm-registry
index 08bf2be5..1ef66c46 100644
--- a/build/Dockerfile.olm-registry
+++ b/build/Dockerfile.olm-registry
@@ -4,7 +4,7 @@ COPY ${SAAS_OPERATOR_DIR} manifests
 RUN initializer --permissive
 
 # ubi-micro does not work for clusters with fips enabled unless we make OpenSSL available
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1788166357
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1789349365
 
 COPY --from=builder /bin/registry-server /bin/registry-server
 COPY --from=builder /bin/grpc_health_probe /bin/grpc_health_probe