diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index ad88d713..85b0ee25 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.87.2@sha256:764d2381569cc4a2332e01feaf8d4fc325508e8562820933fe94da6ac01c5f3a"
+              tag: "37.87.2@sha256:b49df00575225ac8495b530a4414b21aa71add8efa9ac87835cd7eb63af67bd7"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"