diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 477c99e9..610c7a0a 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.132.0@sha256:5a03bcabde40715859e0891f3fbd8b7719fd822e151c1da43b0b510ded35d43d"
+              tag: "37.133.0@sha256:260e121ce9eb61b06721b591085430942d31169d6582e64c3d9b13afc75950f3"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"