diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 99844fa9..1f7ea5f3 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.83.3@sha256:4c3d7eb285cb0fb2b352a77ba4acec3822bb754c63cf6bedc36d9e74ebf2c3f3"
+              tag: "37.83.3@sha256:194ef01eda6e3fda81660f5c92ce7bd48cb3ddbf8b27fe31cc97d1588783206a"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"