diff --git a/inventories/chaosknoten/host_vars/cloud.yaml b/inventories/chaosknoten/host_vars/cloud.yaml
index 8f299b2d..c4164a77 100644
--- a/inventories/chaosknoten/host_vars/cloud.yaml
+++ b/inventories/chaosknoten/host_vars/cloud.yaml
@@ -1,7 +1,7 @@
 # renovate: datasource=docker depName=git.hamburg.ccc.de/ccchh/oci-images/nextcloud
 nextcloud__version: 34
 # renovate: datasource=docker depName=docker.io/library/postgres
-nextcloud__postgres_version: 15.18
+nextcloud__postgres_version: 18.6
 nextcloud__fqdn: cloud.hamburg.ccc.de
 nextcloud__data_dir: /data/nextcloud
 nextcloud__extra_configuration: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/cloud/nextcloud/extra_configuration.config.php.j2') }}"
diff --git a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2 b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2
index 7a109e8c..fc1cb194 100644
--- a/resources/chaosknoten/lists/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/lists/docker_compose/compose.yaml.j2
@@ -62,7 +62,7 @@ services:
       - POSTGRES_DB=mailmandb
       - POSTGRES_USER=mailman
       - "POSTGRES_PASSWORD={{ secret__lists__postgres_password }}"
-    image: docker.io/library/postgres:12-alpine
+    image: docker.io/library/postgres:18-alpine
     volumes:
       - /opt/mailman/database:/var/lib/postgresql/data
     networks:
diff --git a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2 b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
index 4538ede7..9830f909 100644
--- a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
@@ -3,7 +3,7 @@
 
 services:
   database:
-    image: docker.io/library/postgres:15-alpine
+    image: docker.io/library/postgres:18-alpine
     environment:
       - "POSTGRES_USER=pretalx"
       - "POSTGRES_PASSWORD={{ secret__pretalx_db_password }}"
diff --git a/roles/apt_update_and_upgrade/README.md b/roles/apt_update_and_upgrade/README.md
index c0e0acc4..01bd4406 100644
--- a/roles/apt_update_and_upgrade/README.md
+++ b/roles/apt_update_and_upgrade/README.md
@@ -1,6 +1,6 @@
 # Role `apt_update_and_upgrade`
 
-This role does an `apt-get update`, `apt-get dist-upgrade` and a potential reboot (if packages got upgraded) on the specified hosts.
+This role does an `apt-get update`, `apt-get dist-upgrade`, `apt-get autoremove` and a potential reboot (if packages got upgraded) on the specified hosts.
 
 ## `hosts`
 
diff --git a/roles/apt_update_and_upgrade/tasks/main.yaml b/roles/apt_update_and_upgrade/tasks/main.yaml
index 5d9181bf..62ba360a 100644
--- a/roles/apt_update_and_upgrade/tasks/main.yaml
+++ b/roles/apt_update_and_upgrade/tasks/main.yaml
@@ -11,3 +11,7 @@
       register: apt_update_and_upgrade__upgrade_result
       notify:
         - reboot the system
+
+    - name: Remove dependencies that are no longer required
+      ansible.builtin.apt:
+        autoremove: true