diff --git a/kube/deploy/core/ingress/cloudflare/tunnel/hr.yaml b/kube/deploy/core/ingress/cloudflare/tunnel/hr.yaml
index c164c368..880e7abc 100644
--- a/kube/deploy/core/ingress/cloudflare/tunnel/hr.yaml
+++ b/kube/deploy/core/ingress/cloudflare/tunnel/hr.yaml
@@ -21,7 +21,7 @@ spec:
       prom.home.arpa/kps: "allow"
     image:
       repository: cloudflare/cloudflared
-      tag: 2025.6.1@sha256:175aee7e8b548f983f7e3b79ace217676d2a79255a73c074dacb491e59603679
+      tag: 2025.7.0@sha256:803b17adb5326a38ce397b9c9f374289ad290ee5526d204b5879a1423b6f5c3e
     args: ['tunnel', '--config', '/etc/cloudflared/config.yaml', '--metrics', '0.0.0.0:9090', 'run']
     service:
       main: