diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 2c3a729a..2687ce1c 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.100.0@sha256:b36a31810d5f3ae45a46f41dece3ab36458138b7fe90aa01825e2c1ed1ce78b2"
+              tag: "37.100.0@sha256:de100dfd988b98bac2408ae6da22566b10c7e9e4eac0895130ebcc4c8c9f1897"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"