diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 69b3f15..e135719 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,6 +18,6 @@ jobs:
       registry-server: ghcr.io
       registry-username: ${{ github.actor }}
       image: ${{ github.repository }}
-      version: 0.20.0
+      version: 0.20.1
     secrets:
       pull-request-token: ${{ secrets.GH_ORG_PAT }}
diff --git a/docs/quick-start/getting-started.md b/docs/quick-start/getting-started.md
index 2ecd66e..4de5fbd 100644
--- a/docs/quick-start/getting-started.md
+++ b/docs/quick-start/getting-started.md
@@ -50,7 +50,7 @@ Add the Kadras repository to make the platform packages available to the cluster
 
   ```shell
   kctrl package repository add -r kadras-packages \
-    --url ghcr.io/kadras-io/kadras-packages:0.22.0 \
+    --url ghcr.io/kadras-io/kadras-packages:0.22.1 \
     -n kadras-system --create-namespace
   ```
 
@@ -78,7 +78,7 @@ Reference the `values.yml` file you created in the previous step and install the
   ```shell
   kctrl package install -i engineering-platform \
     -p engineering-platform.packages.kadras.io \
-    -v 0.20.0 \
+    -v 0.20.1 \
     -n kadras-system \
     --values-file values.yml
   ```
diff --git a/package/config/components/developer-portal.yml b/package/config/components/developer-portal.yml
index d60080b..1675487 100644
--- a/package/config/components/developer-portal.yml
+++ b/package/config/components/developer-portal.yml
@@ -26,7 +26,7 @@ spec:
   packageRef:
     refName: developer-portal.packages.kadras.io
     versionSelection:
-      constraints: 0.2.1
+      constraints: 0.3.0
   values:
     - secretRef:
         name: developer-portal-values
diff --git a/package/config/components/kyverno.yml b/package/config/components/kyverno.yml
index a2a937e..04fe77a 100644
--- a/package/config/components/kyverno.yml
+++ b/package/config/components/kyverno.yml
@@ -24,6 +24,7 @@ metadata:
   namespace: #@ data.values.platform.namespace
   annotations:
     kapp.k14s.io/change-group: kyverno
+    kapp.k14s.io/change-rule.cert-manager: upsert after upserting cert-manager
     kapp.k14s.io/change-rule.serviceaccount: delete before deleting serviceaccount
 spec:
   serviceAccountName: kadras-install-sa
diff --git a/package/config/components/tempo-operator.yml b/package/config/components/tempo-operator.yml
index cf1a6cd..fe8ff05 100644
--- a/package/config/components/tempo-operator.yml
+++ b/package/config/components/tempo-operator.yml
@@ -18,6 +18,7 @@ metadata:
   namespace: #@ data.values.platform.namespace
   annotations:
     kapp.k14s.io/change-group: tempo-operator
+    kapp.k14s.io/change-rule.cert-manager: upsert after upserting cert-manager
     kapp.k14s.io/change-rule.secretgen-controller: upsert after upserting secretgen-controller
     kapp.k14s.io/change-rule.serviceaccount: delete before deleting serviceaccount
 spec: