diff --git a/devbox-plugins/base-config/config/ansible-requirements.txt.dist b/devbox-plugins/base-config/config/ansible-requirements.txt.dist
index a7a5733..85c9c6d 100644
--- a/devbox-plugins/base-config/config/ansible-requirements.txt.dist
+++ b/devbox-plugins/base-config/config/ansible-requirements.txt.dist
@@ -3,7 +3,7 @@
 # The files is supposed to contain our common selection of packages
 # and are used also to keep projects aligned by running specific devbox run command to distribute and possible merge with local
 # requirements files
-ansible-core==2.17.1
+ansible-core==2.20.5
 # For the Hetzner Cloud dynamic inventory plugin:
 # https://docs.ansible.com/ansible/latest/collections/hetzner/hcloud/hcloud_inventory.html#ansible-collections-hetzner-hcloud-hcloud-inventory-requirements
 # Error msg snippet if not installed:[WARNING]:  * Failed to parse ... inventories/stg/hcloud.yml with auto plugin: The Hetzner Cloud dynamic inventory plugin requires requests.
diff --git a/devbox-plugins/base-config/config/ansible.cfg.dist b/devbox-plugins/base-config/config/ansible.cfg.dist
index 3be78c9..834b204 100644
--- a/devbox-plugins/base-config/config/ansible.cfg.dist
+++ b/devbox-plugins/base-config/config/ansible.cfg.dist
@@ -5,7 +5,7 @@
 # devbox plugin code: https://github.com/jetify-com/devbox/blob/0.10.7/internal/plugin/plugin.go#L126
 
 # Ensure we can add the '{{"{{"}} ansible_managed {{"}}"}}' Jinja variable to templated files, to give a hint of traceability on where files comes from on the hosts.
-ansible_managed = Ansible managed file. From {{"{{%"}} if role_name is defined {{"%}}"}}role: '{{"{{{{"}} role_name {{"}}}}"}}'{{"{{%"}} else {{"%}}"}}playbook described with 'name: {{"{{{{"}} ansible_play_name {{"}}}}"}}' {{"{{%"}} endif {{"%}}"}}. Template source file name: {{"{{{{"}} template_path | basename {{"}}}}"}}
+# Ansible 2.20 deprecates configuring the ansible_managed variable through this file, ansible.cfg, and is therefore now handled in https://github.com/onlinecity/ansible-common/blob/master/playbooks/vars/all_playbooks.yml
 
 
 # Installs roles into [current dir]/roles/namespace.rolename
diff --git a/devbox-plugins/base-config/config/ci-lint.yml b/devbox-plugins/base-config/config/ci-lint.yml
index 07f17c9..746d52e 100644
--- a/devbox-plugins/base-config/config/ci-lint.yml
+++ b/devbox-plugins/base-config/config/ci-lint.yml
@@ -21,7 +21,7 @@ jobs:
           private-key: {{ `${{ secrets.APP_OC_GITHUB_ACTIONS_PEM }}` }}
           owner: {{ `${{ github.repository_owner }}` }}
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           token: {{ `${{ steps.generate-token.outputs.token }}` }}
           submodules: recursive
diff --git a/devbox-plugins/base-config/plugin.json b/devbox-plugins/base-config/plugin.json
index 22db482..145494d 100644
--- a/devbox-plugins/base-config/plugin.json
+++ b/devbox-plugins/base-config/plugin.json
@@ -4,11 +4,11 @@
   "version": "1.4.0",
   "description": "Base devbox config for OC DevOps projects",
   "packages":[
-    "python@3.10",
+    "python@3.13",
     // tenv are both for getting the correct version of terraform/tofu
     "tenv@1.11.2",
     "pre-commit@3.6.2",
-    "yamllint@1.35.1",
+    "yamllint@1.37.1",
     "tflint@0.50.3",
     "cowsay@3.7.0",
     // go-task, is taskfile https://taskfile.dev/