diff --git a/.github/workflows/build-nightly-container.yml b/.github/workflows/build-nightly-container.yml
index 00094e5b..e37b9c96 100644
--- a/.github/workflows/build-nightly-container.yml
+++ b/.github/workflows/build-nightly-container.yml
@@ -86,7 +86,7 @@ jobs:
 
       # https://github.com/marketplace/actions/docker-manifest-create-action
       - name: Create and push manifest
-        uses: int128/docker-manifest-create-action@v2.20.0
+        uses: int128/docker-manifest-create-action@v2.21.0
         with:
           push: true
           tags: quay.io/invidious/invidious:master
diff --git a/.github/workflows/build-stable-container.yml b/.github/workflows/build-stable-container.yml
index 4297c196..9058d914 100644
--- a/.github/workflows/build-stable-container.yml
+++ b/.github/workflows/build-stable-container.yml
@@ -78,7 +78,7 @@ jobs:
 
       # https://github.com/marketplace/actions/docker-manifest-create-action
       - name: Create and push manifest
-        uses: int128/docker-manifest-create-action@v2.20.0
+        uses: int128/docker-manifest-create-action@v2.21.0
         with:
           push: true
           tags: quay.io/invidious/invidious:latest
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ee5b457c..e3ea7335 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
           - 1.17.1
           - 1.18.2
           - 1.19.2
-          - 1.20.1
+          - 1.20.2
         include:
           - crystal: nightly
             stable: false
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 820005ba..0822aafe 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,8 +1,8 @@
-# https://github.com/openssl/openssl/releases/tag/openssl-3.5.2
-ARG OPENSSL_VERSION='3.5.2'
-ARG OPENSSL_SHA256='c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec'
+# https://github.com/openssl/openssl/releases/tag/openssl-3.6.2
+ARG OPENSSL_VERSION='3.6.2'
+ARG OPENSSL_SHA256='aaf51a1fe064384f811daeaeb4ec4dce7340ec8bd893027eee676af31e83a04f'
 
-FROM crystallang/crystal:1.20.1-alpine AS dependabot-crystal
+FROM crystallang/crystal:1.20.2-alpine AS dependabot-crystal
 
 # We compile openssl ourselves due to a memory leak in how crystal interacts
 # with openssl
diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr
index a6a461ae..796c0c91 100644
--- a/src/invidious/views/watch.ecr
+++ b/src/invidious/views/watch.ecr
@@ -125,7 +125,7 @@ we're going to need to do it here in order to allow for translations.
                     end
                 -%>
                 <a id="link-yt-watch" rel="noreferrer noopener" data-base-url="<%= link_yt_watch %>" href="<%= link_yt_watch %>"><%= I18n.translate(locale, "videoinfo_watch_on_youTube") %></a>
-                (<a id="link-yt-embed" rel="noopener" data-base-url="<%= link_yt_embed %>" href="<%= link_yt_embed %>"><%= I18n.translate(locale, "videoinfo_youTube_embed_link") %></a>)
+                (<a id="link-yt-embed" referrerpolicy="origin-when-cross-origin" rel="noopener" data-base-url="<%= link_yt_embed %>" href="<%= link_yt_embed %>"><%= I18n.translate(locale, "videoinfo_youTube_embed_link") %></a>)
             </span>
 
             <p id="watch-on-another-invidious-instance">
diff --git a/src/invidious/yt_backend/extractors.cr b/src/invidious/yt_backend/extractors.cr
index 2edc86bb..9dea2746 100644
--- a/src/invidious/yt_backend/extractors.cr
+++ b/src/invidious/yt_backend/extractors.cr
@@ -650,9 +650,8 @@ private module Parsers
     private def parse_internal(item_contents, author_fallback)
       playlist_id = item_contents["contentId"].as_s
 
-      thumbnail_view_model = item_contents.dig?(
-        "contentImage", "collectionThumbnailViewModel",
-        "primaryThumbnail", "thumbnailViewModel"
+      thumbnail_view_model = item_contents.dig(
+        "contentImage", "thumbnailViewModel"
       )
 
       return nil if thumbnail_view_model.nil?