diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index d58ee73a..aad84f3c 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.135.0@sha256:f8afa94ec869d1ddc6f308bd129067a847ceabd46cec29f9e8fa0e79090bfb49"
+              tag: "37.137.2@sha256:81467981cfb32e749b250770a5413a8891ff7c30d3f6aa95336bf234b180bd39"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"