diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 0cad170d..2755c727 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.140.15@sha256:0269a65171ad71cb1fd7f880d152edbb9d7e1d45013337e46b44a78627255b72"
+              tag: "37.140.16@sha256:b8dd77d3276186d81f1870a5542a937b564d8e2ce8fffac117eac86d55ec8f27"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"