diff --git a/apps/fc-dns/fc-dns.yaml b/apps/fc-dns/fc-dns.yaml
index c593d18..bfa72f4 100644
--- a/apps/fc-dns/fc-dns.yaml
+++ b/apps/fc-dns/fc-dns.yaml
@@ -129,7 +129,7 @@ spec:
         fsGroup: 1654
       containers:
         - name: dns-web
-          image: localhost/fc-dns-web:v20260615-dn1-6bb16e5
+          image: localhost/fc-dns-web:v20260616-dn2-3356ff8
           imagePullPolicy: Never
           securityContext:
             readOnlyRootFilesystem: true
@@ -363,7 +363,7 @@ spec:
         fsGroup: 1654
       containers:
         - name: dns-acme-webhook
-          image: localhost/fc-dns-acme-webhook:v20260615-dn1-6bb16e5
+          image: localhost/fc-dns-acme-webhook:v20260616-dn2-3356ff8
           imagePullPolicy: Never
           securityContext:
             readOnlyRootFilesystem: true
diff --git a/tests/bluejay-infra-lint/FleetManifestLintTests.cs b/tests/bluejay-infra-lint/FleetManifestLintTests.cs
index 460db11..3fff626 100644
--- a/tests/bluejay-infra-lint/FleetManifestLintTests.cs
+++ b/tests/bluejay-infra-lint/FleetManifestLintTests.cs
@@ -955,7 +955,7 @@ public sealed class FleetManifestLintTests
         var dnsPvc = AppDocuments("fc-dns")
             .Single(document => document.Kind == "PersistentVolumeClaim" && document.Name == "dns-web-data");
 
-        ManifestNodeExtensions.Scalar(dnsContainer, "image").Should().Be("localhost/fc-dns-web:v20260615-phase0-hybrid-f77fb94");
+        ManifestNodeExtensions.Scalar(dnsContainer, "image").Should().Be("localhost/fc-dns-web:v20260616-dn2-3356ff8");
         dnsPvc.Scalar("spec", "storageClassName").Should().Be("longhorn");
         dnsPvc.Scalar("spec", "resources", "requests", "storage").Should().Be("1Gi");