diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 87d652ea..11f47058 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.89.3@sha256:e78f3b2427d899f0f37cbd4a9ab804d9630de565747e389bb4228d770f4db3dc"
+              tag: "37.89.4@sha256:329b9a86cfc8cf8cb03dffccf4e87e2d129fed1de5973cbbef8461fbd2779f9a"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"