diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index c74d6688..0e6f9e61 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.153.1@sha256:f966b6598146522ea8f1501d6a063f54fb32da1d767ddfe41e9fae4a077186a9"
+              tag: "37.153.2@sha256:be2a778548e7b3ecd990ea21a1dfee79da79c41240b4f5b11fb2f832a0c15315"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"