diff --git a/kube/deploy/apps/rclone-retro/app/hr.yaml b/kube/deploy/apps/rclone-retro/app/hr.yaml
index 4833aa95..0703257e 100644
--- a/kube/deploy/apps/rclone-retro/app/hr.yaml
+++ b/kube/deploy/apps/rclone-retro/app/hr.yaml
@@ -30,7 +30,7 @@ spec:
           app:
             image: &img
               repository: ghcr.io/rclone/rclone
-              tag: 1.70.2@sha256:2a25b0ac42aa0bcb690f039a0b9713974bdea501b48e4b4bb5de328ff3cf29ee
+              tag: 1.70.3@sha256:34c729127386abec1c610b2aa024e39b4498dc2b4a72a0798ae21fbdc1b0493b
             args: ["serve", "ftp", "/data", "--addr=:$(FTP_PORT)", "--log-level=DEBUG", "--use-json-log", "--rc", "--rc-addr=:$(HTTP_PORT)", "--rc-serve", "--rc-serve-no-modtime", "--rc-web-gui", "--rc-web-gui-no-open-browser", "--rc-enable-metrics", "--metrics-addr=:$(METRICS_PORT)", "--exclude", "**/／*", "--exclude", "**/／**", "--exclude", "Nintendo 3DS/title/*/*/content/*.app", "--exclude", "**.cia", "--exclude", "**.fbi", "--exclude", "**.nds", "--exclude", "**.mp3", "--exclude", "**.m4a", "--exclude", "**.aac", "--exclude", "**.wav", "--exclude", "**.flac"]
             env: &env
               TZ: "${CONFIG_TZ}"
diff --git a/kube/deploy/apps/rclone-retro/ks.yaml b/kube/deploy/apps/rclone-retro/ks.yaml
index b841ac91..c56e0b31 100644
--- a/kube/deploy/apps/rclone-retro/ks.yaml
+++ b/kube/deploy/apps/rclone-retro/ks.yaml
@@ -46,4 +46,4 @@ spec:
       RUID: &uid "1000"
       RGID: *uid
       RFSG: *uid
-      VS_APP_CURRENT_VERSION: "ghcr.io/rclone/rclone:1.70.2@sha256:b8dad82933961be28ebbe4aab87e14f2d2fcd23ed3e8335a43a837209cb46f5f"
+      VS_APP_CURRENT_VERSION: "ghcr.io/rclone/rclone:1.70.3@sha256:b8dad82933961be28ebbe4aab87e14f2d2fcd23ed3e8335a43a837209cb46f5f"