diff --git a/containers/apps/renovate/Dockerfile b/containers/apps/renovate/Dockerfile
index 41c15ea1dd9..64541fa0bd4 100644
--- a/containers/apps/renovate/Dockerfile
+++ b/containers/apps/renovate/Dockerfile
@@ -1,5 +1,5 @@
 # hadolint ignore=DL3007
-FROM docker.io/renovate/renovate:39.234.0-full
+FROM docker.io/renovate/renovate:39.238.0-full@sha256:93001356fe33c0c641dc00b88a9662bfcc5f2a10f181b584accd632ab6fe78da
 
 ARG VERSION
 ARG CONTAINER_NAME