diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 7bbbcbbb..a12a992a 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.89.7@sha256:14d6ac796a013b5a21f3f7921867fd719b29dfe7563d9bb99afb6a9623d5187a"
+              tag: "37.89.7@sha256:1fdeaea493af9d149eb7bde6d81cb9eb170cb469b4177aa7104cdd058b922071"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"