diff --git a/Dockerfile b/Dockerfile
index e37c0eb7b29fc2a9045a5f036cc236e64c60d374..1fec80821303bce9a8bc0c5119a42cdbeddb0ec9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@ ARG BASE_TAG=nonroot
 
 ARG TERRAFORM_VERSION=1.7.5
 
-FROM xpkg.upbound.io/crossplane-contrib/provider-keycloak:v0.15.0 as provider
+FROM xpkg.upbound.io/crossplane-contrib/provider-keycloak:v0.16.0 as provider
 FROM registry1.dso.mil/ironbank/hashicorp/terraform:${TERRAFORM_VERSION} as terraform
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
index f433dc1785e45e5fdea323e40f219e347802ef89..1b707e7f216a23e171cc38a0ebc261e829dafe8e 100644
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -3,7 +3,7 @@ apiVersion: v1
 name: opensource/crossplane-contrib/provider-keycloak
 
 tags:
-- "v0.15.0"
+- "v0.16.0"
 
 args:
   BASE_IMAGE: google/distroless/static
@@ -16,14 +16,14 @@ labels:
   org.opencontainers.image.licenses: Apache-2.0
   org.opencontainers.image.url: https://github.com/crossplane-contrib/provider-keycloak
   org.opencontainers.image.vendor: Crossplane-Contrib
-  org.opencontainers.image.version: v0.15.0
+  org.opencontainers.image.version: v0.16.0
   mil.dso.ironbank.image.keywords: kubernetes,serverless,cloud-native,crossplane,provider,crossplane-provider,provider-keycloak
   mil.dso.ironbank.image.type: opensource
   mil.dso.ironbank.product.name: Crossplane
 
 resources:
-- tag: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v0.15.0
-  url: docker://xpkg.upbound.io/crossplane-contrib/provider-keycloak@sha256:f452029b70264eadd9bb7128518e5c63bbe8bd8713fe4d4cd732c370db86a6c3
+- tag: xpkg.upbound.io/crossplane-contrib/provider-keycloak:v0.16.0
+  url: docker://xpkg.upbound.io/crossplane-contrib/provider-keycloak@sha256:3914a859174efbd8282e08a79798ca552706e5b7d6a3cbeee25c5f70f3a81602
 
 maintainers:
   - email: sam@braingu.com