diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 9c9e107d..65ceaf0d 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.115.0@sha256:6db0fce154cfc1860526e1050bab5e0635fb6f2f1d84190f91608327910dfe20"
+              tag: "37.115.0@sha256:61cebfdbd8668aa94256bd089b0e73ffacd08879f72ac00333d5fc84ebc65fd5"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"