diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index ad9a7cac..1cfceeed 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -64,7 +64,7 @@ spec:
             imagePullPolicy: "IfNotPresent"
             image:
               repository: "ghcr.io/mshekow/github-app-installation-token"
-              tag: "2023.12.02@sha256:6b7574c4539dc500c3d543ca2070e3aab43d0747205caddb19505ece3d382253"
+              tag: "2023.12.06@sha256:b35b6e7a2dc1900ad0d9df1beac801bcfbfbc8e5c64aef725c86a0fe53575b76"
             command: ["/bin/sh", "-c", "node index.js ${SECRET_RENOVATE_GITHUB_APP_APP_ID} ${SECRET_RENOVATE_GITHUB_APP_INSTALL_ID} /privkey | tee /config/RENOVATE_TOKEN"]
             securityContext: *sc
           02-config: