diff --git a/roles/metabase/defaults/main.yml b/roles/metabase/defaults/main.yml
index 2537e3e..2cfe864 100644
--- a/roles/metabase/defaults/main.yml
+++ b/roles/metabase/defaults/main.yml
@@ -1,15 +1,15 @@
 ---
 
 # Version to deploy
-metabase_version: 0.50.5
+metabase_version: 0.50.13
 # URL to fetch the jar
 metabase_jar_url: https://downloads.metabase.com/v{{ metabase_version }}/metabase.jar
 # Expected sha256 of the jar
-metabase_jar_sha256: 51f44436b95deee73ae71b21f66321d82b8f12ca40577230b1d657378e000a73
+metabase_jar_sha256: 57b54ebd2b60e8fc52ba332062d9130f60489aba33aa56b9e639d4ad450c815b
 # When building from source
 metabase_archive_url: https://github.com/metabase/metabase/archive/refs/tags/v{{ metabase_version }}.tar.gz
 # Expected sha256 of the archive
-metabase_archive_sha256: db9b25a67d8efbf8c616320f3fa8a101b8fab82bb9d50400ed04bb7fafd6fda7
+metabase_archive_sha256: 2757a67e2a57ce8f0f4247430c360812677a01321fc71a707d1a9f1b0b376f6b
 # Should ansible handle upgrades ? If set to false, only the initial install (and the config) will be handled
 metabase_manage_upgrade: True
 
diff --git a/roles/penpot/defaults/main.yml b/roles/penpot/defaults/main.yml
index a7c65a5..77c4613 100644
--- a/roles/penpot/defaults/main.yml
+++ b/roles/penpot/defaults/main.yml
@@ -1,7 +1,7 @@
 ---
 
 # Penpot version to deploy
-penpot_version: 2.0.0
+penpot_version: 2.1.0
 # SHould ansible manage upgrades. If False, only the initial install will be done
 penpot_manage_upgrade: True
 
@@ -10,7 +10,7 @@ penpot_root_dir: /opt/penpot
 # URL of the archive
 penpot_archive_url: https://github.com/penpot/penpot/archive/refs/tags/{{ penpot_version }}.tar.gz
 # Expected sha256 of the archive
-penpot_archive_sha256: 133fc088b2e194ffdd3a9816c7fabcf9630699157ce28a242c81cb6283de6af6
+penpot_archive_sha256: 47b816b92896c0786196385150fb4a8c7e5d3240516f7d48da1c998910f5c006
 # User under which penpot will run. Will be created
 penpot_user: penpot
 
diff --git a/roles/penpot/tasks/install.yml b/roles/penpot/tasks/install.yml
index 3c7ed6c..6bbb580 100644
--- a/roles/penpot/tasks/install.yml
+++ b/roles/penpot/tasks/install.yml
@@ -52,6 +52,10 @@
       shell: |
         corepack enable
         yarn set version 4.0.2
+        {% if system_proxy is defined and system_proxy != '' %}
+        yarn config set httpProxy {{ system_proxy }}
+        yarn config set httpsProxy {{ system_proxy }}
+        {% endif %}
       args:
         chdir: "{{ penpot_root_dir }}/tmp/penpot-{{ penpot_version }}/frontend"
 
@@ -63,6 +67,17 @@
         CURRENT_HASH: "{{ penpot_version }}"
         PATH: "/usr/lib/jvm/java-21/bin:/opt/penpot/bin:/usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin"
 
+    - name: Install yarn
+      shell: |
+        corepack enable
+        yarn set version 4.0.2
+        {% if system_proxy is defined and system_proxy != '' %}
+        yarn config set httpProxy {{ system_proxy }}
+        yarn config set httpsProxy {{ system_proxy }}
+        {% endif %}
+      args:
+        chdir: "{{ penpot_root_dir }}/tmp/penpot-{{ penpot_version }}/exporter"
+
     - name: Build penpot exporter
       command: ./scripts/build
       args:
diff --git a/roles/squid/files/acl/software_various.domains b/roles/squid/files/acl/software_various.domains
index e6f6e8f..b8ee1ee 100644
--- a/roles/squid/files/acl/software_various.domains
+++ b/roles/squid/files/acl/software_various.domains
@@ -231,6 +231,7 @@ registry.npmjs.org
 registry.npmjs.com
 # Yarn
 yarnpkg.com
+repo.yarnpkg.com
 registry.yarnpkg.com
 classic.yarnpkg.com
 dl.yarnpkg.com