diff --git a/iso/bread-lockfile.toml b/iso/bread-lockfile.toml
index e1ef73a..6154893 100644
--- a/iso/bread-lockfile.toml
+++ b/iso/bread-lockfile.toml
@@ -48,23 +48,20 @@ optional_bins = [
 ]
 
 # Package name → version. Must exist at dl.breadway.dev/<pkg>/<ver>/ and
-# should match the signed index so CI can verify sha256. Newer git tags
-# that bakery release CI did not publish (breadpad 0.5.1, breadmon 0.1.3,
-# breadclip 0.2.2, breadshot 0.1.2, breadhelp 0.2.4, breadcrumbs 2.1.7)
-# stay off this list until those artifacts exist.
+# should match the signed index so CI can verify sha256.
 # [[pin]] { package, version } is accepted as well and merged (conflict = bake error).
 [versions]
-bakery = "0.7.2"
+bakery = "0.7.3"
 bread = "0.8.0"
-bread-theme = "0.7.2"
-breadbar = "0.3.1"
-breadbox = "0.3.1"
-breadcrumbs = "2.1.6"
-breadpad = "0.5.0"
-breadpaper = "0.1.12"
-breadmon = "0.1.2"
-breadsearch = "0.3.1"
-breadclip = "0.1.1"
-breadshot = "0.1.1"
-bos-settings = "0.8.0"
-breadhelp = "0.2.3"
+bread-theme = "0.7.3"
+breadbar = "0.3.2"
+breadbox = "0.3.2"
+breadcrumbs = "2.1.8"
+breadpad = "0.5.2"
+breadpaper = "0.1.13"
+breadmon = "0.1.4"
+breadsearch = "0.3.2"
+breadclip = "0.2.3"
+breadshot = "0.1.3"
+bos-settings = "0.8.1"
+breadhelp = "0.2.5"