diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index efdf6ab2..ac9177ff 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.140.12@sha256:017c00713af924d634c287655ae1952b14b3ec87d390f849fd77d33e179702d0"
+              tag: "37.140.14@sha256:2c50e4f7b94c9e84288eda6bc26343cc94376a885f3d5be72ebd3a5adddf0584"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"