diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index fd92c918..5f93fd6c 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -12,7 +12,7 @@ jobs:
         RENOVATE_REPOSITORIES: '["${{ github.repository }}"]'
         RENOVATE_REPOSITORY_CACHE: enabled
         RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
-      image: ghcr.io/renovatebot/renovate:37.202.2
+      image: ghcr.io/renovatebot/renovate:37.212.0@sha256:a22c18e29497c7fb35dfec15fdfa11c657f604b525d855aaac3bc9f30861cc8a
     runs-on: ubuntu-latest
     steps:
       - run: env | sort