diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index acc8b47e..4af094be 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.88.2@sha256:e2ffd7ab4bf8ed12c956f40163e04111e2a1bfafff78aca7917abdedf0a018b1"
+              tag: "37.89.0@sha256:701d29d2c0b90fdee9ec7195dfe084f68dcd34480be5442f88516d80dc09f127"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"