diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 290aae05..f0968767 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.147.0@sha256:f451b0f5513f1cad0f45f86aa6132f1de32dbb8850984c5f39422d0f8e6e24eb"
+              tag: "37.148.1@sha256:c6cfbbd15895a55440a0848c6f026a4d773c02f0fc12618747c455058297ceb0"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"