diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index 378389e8..7a855f25 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.107.0@sha256:f1e7a79b46e691e361360a1cfb662a3000763c1045009ad6af2092b558396158"
+              tag: "37.107.0@sha256:9b91d04e144f410c261aec5c9fd19ebc84f756efce35310fe7a43b0026add46f"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"