diff --git a/.renovate/commitMessage.json5 b/.renovate/commitMessage.json5
index 58403bae..1eff94e2 100644
--- a/.renovate/commitMessage.json5
+++ b/.renovate/commitMessage.json5
@@ -49,7 +49,7 @@
       "matchDatasources": ["docker"],
       "matchDepNames": ["*/*/**"],
       "matchUpdateTypes": ["major"],
-      "commitMessagePrefix": "feat(oci/{{#if groupName}}{{groupName}}{{else}}{{ lookup (split depName '/') 2 }}{{#if (lookup (split depName '/') 3)}}/{{ lookup (split depName '/') 3 }}{{/if}}{{#if (lookup (split depName '/') 4)}}/{{ lookup (split depName '/') 4 }}{{/if}}{{#if (lookup (split depName '/') 5)}}/{{ lookup (split depName '/') 5 }}{{/if}}{{/if}}!: "
+      "commitMessagePrefix": "feat(oci/{{#if groupName}}{{groupName}}{{else}}{{ lookup (split depName '/') 2 }}{{#if (lookup (split depName '/') 3)}}/{{ lookup (split depName '/') 3 }}{{/if}}{{#if (lookup (split depName '/') 4)}}/{{ lookup (split depName '/') 4 }}{{/if}}{{#if (lookup (split depName '/') 5)}}/{{ lookup (split depName '/') 5 }}{{/if}}{{/if}})!: "
     },
     {
       "matchDatasources": ["docker"],
diff --git a/kube/deploy/apps/authentik/app/hr.yaml b/kube/deploy/apps/authentik/app/hr.yaml
index 3690ef06..4c39f706 100644
--- a/kube/deploy/apps/authentik/app/hr.yaml
+++ b/kube/deploy/apps/authentik/app/hr.yaml
@@ -320,6 +320,59 @@ spec:
                 enabled: true
               readiness:
                 enabled: true
+      renovate-test:
+        enabled: false
+        type: deployment
+        replicas: 0
+        strategy: RollingUpdate
+        rollingUpdate:
+          unavailable: "90%"
+        containers:
+          main:
+            image: &img
+              repository: ghcr.io/goauthentik/server
+              tag: 2024.12.3@sha256:7464a70c0d84df0816858106116a3306a80359b4300aa656c3a5ab790a38c229
+            args: [server]
+            env: &env
+              TZ: "${CONFIG_TZ}"
+            securityContext: &sc
+              readOnlyRootFilesystem: true
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop: ["ALL"]
+            resources:
+              requests:
+                cpu: "0"
+                memory: "0"
+              limits:
+                cpu: "1000m"
+                memory: "2Gi"
+          anubis:
+            image:
+              repository: ghcr.io/xe/x/anubis
+              tag: latest@sha256:f54385a986e2032b238c626e9cec989acc4e36160ab87b88722171929cb5880b
+            env:
+              TZ: "${CONFIG_TZ}"
+              BIND: ":8923"
+              DIFFICULTY: "5"
+              SERVE_ROBOTS_TXT: "true"
+              TARGET: "http://127.0.0.1:9000"
+            securityContext: *sc
+            resources:
+              requests:
+                cpu: "5m"
+                memory: "32Mi"
+              limits:
+                cpu: "1"
+                memory: "128Mi"
+            ports:
+              - name: anubis
+                containerPort: &anubis 8923
+            probes:
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
     service:
       authentik:
         controller: authentik