diff --git a/kube/deploy/apps/renovate/app/hr.yaml b/kube/deploy/apps/renovate/app/hr.yaml
index a4e64a9b..1957dfc9 100644
--- a/kube/deploy/apps/renovate/app/hr.yaml
+++ b/kube/deploy/apps/renovate/app/hr.yaml
@@ -28,7 +28,7 @@ spec:
           main:
             image:
               repository: "ghcr.io/renovatebot/renovate"
-              tag: "37.89.4@sha256:c7f2c9328f2140817c1b621157e71257d4ecb63aff8a1207c4e39ee1ed5a413a"
+              tag: "37.89.5@sha256:a0599df0ee10e362da003585e4b1804d910da3e616457268b41b85cfc87c312b"
             args: ["JJGadgets/Biohazard"] # TODO: use only on main home-prod GitOps repo first
             env:
               TZ: "${CONFIG_TZ}"