diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 43f4301..0f3e829 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -54,7 +54,7 @@ jobs:
           BUILD_ARGS: "--load"
 
       - name: Publish Artifacts to GitHub
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
         with:
           name: output
           path: _output/**
diff --git a/Makefile b/Makefile
index 2ca2904..4780ee0 100644
--- a/Makefile
+++ b/Makefile
@@ -117,7 +117,7 @@ PLATFORMS ?= linux_amd64
 
 # Tool Versions
 # ------------------
-UP_VERSION = v0.36.1
+UP_VERSION = v0.36.2
 UP_CHANNEL = stable
 CROSSPLANE_CLI_VERSION = v1.18.0
 CROSSPLANE_VERSION = v1.18.0-up.1
@@ -134,7 +134,7 @@ KIND_CLUSTER_NAME ?= uptest-$(PROJECT_NAME)
 # XPKG Configuration
 # ------------------
 XPKG_DIR = $(shell pwd)
-XPKG_IGNORE = .github/workflows/*.yaml,.github/workflows/*.yml,examples/*.yaml,.work/uptest-datasource.yaml,.cache/render/*
+XPKG_IGNORE ?= .github/workflows/*.yaml,.github/workflows/*.yml,examples/*.yaml,.work/uptest-datasource.yaml,.cache/render/*
 XPKG_REG_ORGS ?= xpkg.upbound.io/upbound
 # NOTE: Skip promoting on xpkg.upbound.io as channel tags are inferred
 XPKG_REG_ORGS_NO_PROMOTE ?= xpkg.upbound.io/upbound