diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index b1792a20..5ae9dff9 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.100.1@sha256:d6f66298369fc24a609a1e5e83ca33cc2b0059a41e8d79cf162985a7148ec221"
+              tag: "37.100.2@sha256:28fe6d04f44dab4f332dba3f80c3c46a07db7559790d09147d3c6e1a3eafa551"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"