diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 16d9ea74..4b79f584 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.152.1@sha256:95336f5340f8118d0f7f08f8270ba738cff46796033212f296e8b22a4d0e165b"
+              tag: "37.152.1@sha256:7ce3f3e92101b4947cfa6b5791c427417a352b8fd795e5c84e76b7cf61864baa"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"