diff --git a/bdcatprod/gen3.biodatacatalyst.nhlbi.nih.gov/values/values.yaml b/bdcatprod/gen3.biodatacatalyst.nhlbi.nih.gov/values/values.yaml
index e746d9b40..f95e06f6b 100644
--- a/bdcatprod/gen3.biodatacatalyst.nhlbi.nih.gov/values/values.yaml
+++ b/bdcatprod/gen3.biodatacatalyst.nhlbi.nih.gov/values/values.yaml
@@ -2,7 +2,7 @@ access-backend:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/access-backend
-    tag: '2025.09'
+    tag: '2025.12'
   externalSecrets:
     accessBackendG3auto: bdcatprod-access-backend-g3auto
     accessBackendKv: bdcatprod-access-backend-kv
@@ -20,14 +20,14 @@ arborist:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/arborist
-    tag: '2025.09'
+    tag: '2025.12'
 audit:
   enabled: true
   externalSecrets:
     auditG3auto: bdcatprod-audit-g3auto
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/audit-service
-    tag: '2025.09'
+    tag: '2025.12'
   serviceAccount:
     annotations:
       eks.amazonaws.com/role-arn: arn:aws:iam::895962626746:role/bdcatprod--bdcatprod-helm--audit-sqs-receiver
@@ -41,7 +41,7 @@ awshelper:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/awshelper
-    tag: '2025.09'
+    tag: '2025.12'
 etl:
   esEndpoint: elasticsearch
   etlMapping:
@@ -240,9 +240,9 @@ etl:
         type: collector
   image:
     tube:
-      tag: '2025.09'
+      tag: '2025.12'
     spark:
-      tag: '2025.09'
+      tag: '2025.12'
 fence:
   resources:
     requests:
@@ -274,8 +274,8 @@ fence:
     fenceSshKeys: bdcatprod-fence-ssh-keys
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/fence
-    tag: '11.4.1'
-  FENCE_CONFIG: 
+    tag: '2025.12'
+  FENCE_CONFIG:
     ENABLE_VISA_UPDATE_CRON: true
   FENCE_CONFIG_PUBLIC:
     PRIVACY_POLICY_URL: https://biodatacatalyst.nhlbi.nih.gov/privacy/
@@ -2010,9 +2010,6 @@ fence:
       nih-nhlbi-bdc-image-copdgene-phs004023-v1-r1-c2:
         cred: fence-bot
         region: us-east-1
-      nih-nhlbi-bdc-imaging-dmri-vgc-phs004002-v1-r1-c1:
-        cred: fence-bot
-        region: us-east-1
       nih-nhlbi-bdc-mesa-ecg-phs003703-v1-r2-c1:
         cred: fence-bot
         region: us-east-1
@@ -2331,7 +2328,7 @@ gen3-user-data-library:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/gen3-user-data-library
-    tag: '2025.09'
+    tag: '2025.12'
   externalSecrets:
     dbcreds: bdcatprod-gen3userdatalibrary-creds
     gen3UserDataLibraryG3auto: bdcatprod-gen3userdatalibrary-g3auto
@@ -2346,10 +2343,8 @@ global:
       enabled: true
       roleArn: arn:aws:iam::895962626746:role/bdcatprod-external-secrets-sa
     wafv2:
-      # -- (bool) Set to true if using AWS WAFv2
       enabled: true
-      # -- (string) ARN for the WAFv2 ACL.
-      wafAclArn: "arn:aws:wafv2:us-east-1:895962626746:regional/webacl/bdcatprod-waf/41bc2f16-1aa1-41b3-bc63-a82875f5f57d"
+      wafAclArn: arn:aws:wafv2:us-east-1:895962626746:regional/webacl/bdcatprod-waf/41bc2f16-1aa1-41b3-bc63-a82875f5f57d
   dev: false
   dictionaryUrl: https://s3.amazonaws.com/dictionary-artifacts/gtexdictionary/4.8.0/schema.json
   dispatcherJobNum: '10'
@@ -2383,7 +2378,7 @@ guppy:
   esEndpoint: http://elasticsearch:9200
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/guppy
-    tag: '2025.09'
+    tag: '2025.12'
   indices:
     - index: gen3.biodatacatalyst.nhlbi.nih.gov_subject
       type: subject
@@ -2404,13 +2399,13 @@ indexd:
     serviceCreds: bdcatprod-indexd-service-creds
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/indexd
-    tag: '2025.09'
+    tag: '2025.12'
 manifestservice:
   enabled: true
   externalSecrets:
     manifestserviceG3auto: bdcatprod-manifestservice-g3auto
   image:
-    tag: '2025.09'
+    tag: '2025.12'
 metadata:
   autoscaling:
     enabled: false
@@ -2424,7 +2419,7 @@ metadata:
     metadataG3auto: bdcatprod-metadata-g3auto
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/metadata-service
-    tag: '2025.09'
+    tag: '2025.12'
 metadata-delete-expired-objects:
   enabled: true
   image:
@@ -2440,7 +2435,7 @@ peregrine:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/peregrine
-    tag: '2025.09'
+    tag: '2025.12'
 portal:
   autoscaling:
     enabled: false
@@ -2451,13 +2446,13 @@ portal:
   enabled: true
   customConfig:
     enabled: true
-    dir: "bdcatprod/gen3.biodatacatalyst.nhlbi.nih.gov/values/portal/"
+    dir: bdcatprod/gen3.biodatacatalyst.nhlbi.nih.gov/values/portal/
     repo: https://github.com/uc-cdis/gen3-gitops.git
     branch: master
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/data-portal
-    tag: 'feature_data_library'
-    pullPolicy: 'Always'
+    tag: '2025.12'
+    pullPolicy: Always
 revproxy:
   autoscaling:
     enabled: false
@@ -2468,7 +2463,7 @@ revproxy:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/nginx
-    tag: '2025.09'
+    tag: '2025.12'
   ingress:
     aws:
       group: bdcatprod
@@ -2483,7 +2478,7 @@ sheepdog:
   enabled: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/sheepdog
-    tag: '2025.09'
+    tag: '2025.12'
 sower:
   enabled: true
   externalSecrets:
@@ -2492,7 +2487,7 @@ sower:
     createK8sSowerJobsSecret: true
   image:
     repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/sower
-    tag: '2025.09'
+    tag: '2025.12'
   sowerConfig:
     - action: export
       container:
@@ -2530,7 +2525,7 @@ sower:
                 name: manifest-global
           - name: ROOT_NODE
             value: subject
-        image: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/pelican-export:2025.09
+        image: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/pelican-export:2025.12
         memory-limit: 12Gi
         name: job-task
         pull_policy: Always
@@ -2588,7 +2583,7 @@ sower:
               secretKeyRef:
                 name: indexd-service-creds
                 key: sheepdog
-        image: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/pelican-export:2025.09
+        image: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/pelican-export:2025.12
         memory-limit: 12Gi
         name: job-task
         pull_policy: Always