diff --git a/kube/deploy/apps/nextcloud/app/hr.yaml b/kube/deploy/apps/nextcloud/app/hr.yaml
index 49416aeb..9e73b8b3 100644
--- a/kube/deploy/apps/nextcloud/app/hr.yaml
+++ b/kube/deploy/apps/nextcloud/app/hr.yaml
@@ -94,7 +94,7 @@ spec:
           redis:
             image:
               repository: "public.ecr.aws/docker/library/redis"
-              tag: "7.2.4-bookworm@sha256:75d170565a468e94690c7932feec34fc704e1cdd635a36d744ddba09a3a3749f"
+              tag: "7.2.4-bookworm@sha256:fbd09b3d3d4007843020a412f7fa6e77bcdac8e92374e55d94e0f0a8de47a4f3"
             command: ["redis-server", "--port", "0", "--bind", "127.0.0.1", "--unixsocket", "/sockets/redis.sock", "--unixsocketperm", "700"]
             securityContext: *sc
             resources:
diff --git a/kube/deploy/apps/paperless-ngx/app/hr.yaml b/kube/deploy/apps/paperless-ngx/app/hr.yaml
index 4ebbf7d5..31c62ad0 100644
--- a/kube/deploy/apps/paperless-ngx/app/hr.yaml
+++ b/kube/deploy/apps/paperless-ngx/app/hr.yaml
@@ -100,7 +100,7 @@ spec:
           redis:
             image:
               repository: "public.ecr.aws/docker/library/redis"
-              tag: "7.2.4-bookworm@sha256:75d170565a468e94690c7932feec34fc704e1cdd635a36d744ddba09a3a3749f"
+              tag: "7.2.4-bookworm@sha256:fbd09b3d3d4007843020a412f7fa6e77bcdac8e92374e55d94e0f0a8de47a4f3"
             command: ["redis-server", "--save", "''", "--appendonly", "no", "--port", "0", "--bind", "127.0.0.1", "--unixsocket", "/sockets/redis.sock", "--unixsocketperm", "700"] # save and appendonly options forcibly disable RDB and AOF persistence entirely
             securityContext: *sc
             resources:
diff --git a/kube/deploy/apps/yagpdb/app/hr.yaml b/kube/deploy/apps/yagpdb/app/hr.yaml
index ddd5d5af..efb3e74b 100644
--- a/kube/deploy/apps/yagpdb/app/hr.yaml
+++ b/kube/deploy/apps/yagpdb/app/hr.yaml
@@ -71,7 +71,7 @@ spec:
           redis:
             image:
               repository: "public.ecr.aws/docker/library/redis"
-              tag: "7.2.4-bookworm@sha256:75d170565a468e94690c7932feec34fc704e1cdd635a36d744ddba09a3a3749f"
+              tag: "7.2.4-bookworm@sha256:fbd09b3d3d4007843020a412f7fa6e77bcdac8e92374e55d94e0f0a8de47a4f3"
             command: ["redis-server", "--save", "''", "--appendonly", "no", "--port", "6379", "--bind", "127.0.0.1"]
             securityContext: *sc
             resources: