diff --git a/roles/documize/defaults/main.yml b/roles/documize/defaults/main.yml
index e8871f6..8621557 100644
--- a/roles/documize/defaults/main.yml
+++ b/roles/documize/defaults/main.yml
@@ -1,11 +1,11 @@
 ---
 
 # Version of cocumize to deploy
-documize_version: 4.2.2
+documize_version: 4.2.3
 # URL of the binary to install
 documize_bin_url: https://github.com/documize/community/releases/download/v{{ documize_version }}/documize-community-linux-amd64
 # Expected sha1 of the binary
-documize_bin_sha1: c82accfea29f1fa684d582b40c9a6389a2a39d51
+documize_bin_sha256: d6156eccaf6e6b2bdf3ffc03595fdd95edffa67bebc01720386e8902957a4798
 
 # Should documize handle upgrades or only initial install ?
 documize_manage_upgrade: True
diff --git a/roles/documize/tasks/install.yml b/roles/documize/tasks/install.yml
index 70f9e08..70d0313 100644
--- a/roles/documize/tasks/install.yml
+++ b/roles/documize/tasks/install.yml
@@ -12,7 +12,7 @@
   get_url:
     url: "{{ documize_bin_url }}"
     dest: "{{ documize_root_dir }}/bin/documize"
-    checksum: sha1:{{ documize_bin_sha1 }}
+    checksum: sha256:{{ documize_bin_sha256 }}
     mode: 755
   when: documize_install_mode != 'none'
   notify: restart documize
diff --git a/roles/matrix_element/defaults/main.yml b/roles/matrix_element/defaults/main.yml
index 1b09de5..b4e9744 100644
--- a/roles/matrix_element/defaults/main.yml
+++ b/roles/matrix_element/defaults/main.yml
@@ -5,9 +5,9 @@
 element_id: element
 
 # Version to deploy, and expected sha256
-element_version: 1.10.2
+element_version: 1.10.3
 # sha1sum of the tar.gz
-element_archive_sha256: 37d92f4b6ea038fb9b29815396b634ab9b6107e8d84de8a5ba3678a38811b1e8
+element_archive_sha256: 1ca3dd68794c9384b157241e0f3bd8e3ecc284ad3a7cdb639f8811b7c33a86a4
 
 # Where to install element
 element_root_dir: /opt/matrix/element
diff --git a/roles/seafile/defaults/main.yml b/roles/seafile/defaults/main.yml
index 5e11128..f9e9e24 100644
--- a/roles/seafile/defaults/main.yml
+++ b/roles/seafile/defaults/main.yml
@@ -11,11 +11,11 @@
 #   MaxUsers = "9"
 #   Mode = "subscription"
 #   etc...
-seafile_version: "{{ seafile_license is defined | ternary('9.0.4','9.0.2') }}"
+seafile_version: "{{ seafile_license is defined | ternary('9.0.4','9.0.3') }}"
 
 # Archive URL and sha1 are only used for the community version
 seafile_archive_url: https://s3.eu-central-1.amazonaws.com/download.seadrive.org/seafile-server_{{ seafile_version }}_x86-64.tar.gz
-seafile_archive_sha1: f93e32639d735e8eb8201139d5d962cd4067e1c2
+seafile_archive_sha256: e5e518b53486596c238e8c6e236c64384698aa8ac428150e87ad7cf4c00ba82a
 
 seafile_root_dir: /opt/seafile
 seafile_data_dir: "{{ seafile_root_dir }}/data"
diff --git a/roles/seafile/tasks/install.yml b/roles/seafile/tasks/install.yml
index f8b8a8b..c3e02fd 100644
--- a/roles/seafile/tasks/install.yml
+++ b/roles/seafile/tasks/install.yml
@@ -54,7 +54,7 @@
   get_url:
     url: "{{ seafile_archive_url }}"
     dest: "{{ seafile_root_dir }}/tmp/seafile-server_{{ seafile_version }}_x86-64.tar.gz"
-    checksum: "sha1:{{ seafile_archive_sha1 }}"
+    checksum: "sha256:{{ seafile_archive_sha256 }}"
   when:
     - seafile_install_mode != 'none'
     - seafile_license is not defined
diff --git a/roles/seafile/tasks/services.yml b/roles/seafile/tasks/services.yml
index 764b6fc..489cad5 100644
--- a/roles/seafile/tasks/services.yml
+++ b/roles/seafile/tasks/services.yml
@@ -5,7 +5,9 @@
   loop:
     - seafile
     - seahub
-  when: seafile_install_mode != 'upgrade' # We need to run upgrade script manually
+  # Only start services when not upgrading, or upgrading from the same major version
+  # On major version upgrades, we need to run upgrade scripts manually
+  when: seafile_install_mode != 'upgrade' or (seafile_current_version is defined and seafile_current_version | regex_replace('^(\d+)\..*','\\1') == seafile_version | regex_replace('^(\d+)\..*','\\1'))
   tags: seafile
 
 - name: Start and enable timers