diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 8eb9e661..f932e22a 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.131.0@sha256:267065bae6d5351010767dd35e1a505b285276af5656922dda4e410b976b9677"
+              tag: "37.131.0@sha256:c16e475bfe93b92f44cd376f20f9d41de4faeef127be19490b06f4ed7d4cd064"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"