diff --git a/kube/deploy/apps/actual/app/hr.yaml b/kube/deploy/apps/actual/app/hr.yaml
index f62ee20b..d5323556 100644
--- a/kube/deploy/apps/actual/app/hr.yaml
+++ b/kube/deploy/apps/actual/app/hr.yaml
@@ -29,7 +29,7 @@ spec:
           main:
             image: &img
               repository: ghcr.io/actualbudget/actual-server
-              tag: 25.1.0
+              tag: 25.2.0@sha256:82882cb2ad4caa7d8c157f60db0578545af8a5d0b03defaed4b1076df145177c
               # tag: sha-4bb59fd@sha256:48978b9941b8d51fc09e9211e1e07bb1c253cf9efdb79b2cf43ef66fe362bd7f
             env: &env
               TZ: "${CONFIG_TZ}"