diff --git a/Taskfile.yml b/Taskfile.yml
index 894e932..572586b 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -34,7 +34,7 @@ vars:
   # Shared by `renovate:plan` and `renovate:patch`. Renovate-tracked
   # (custom regex manager in renovate.json5) and kept in lockstep with
   # `renovateImage` in dagger/base.go.
-  RENOVATE_IMAGE: renovate/renovate:44.13.2
+  RENOVATE_IMAGE: renovate/renovate:44.17.3
 
 tasks:
   default:
diff --git a/dagger/base.go b/dagger/base.go
index b23ade7..7824020 100644
--- a/dagger/base.go
+++ b/dagger/base.go
@@ -10,7 +10,7 @@ const (
 	golangImage = "golang:1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2"
 	alpineImage = "alpine:3.24.1@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b"
 	helmImage = "alpine/helm:4.2.3@sha256:b97ba4f9b27fe7af16ee3d37e6815783c9d4a51289b6240a9024ec471611ae9b"
-	renovateImage = "renovate/renovate:44.13.2@sha256:f2b16c288d9589b07fd6227d23f9bff5451475d88bee4652a45f8c056c6b80c7"
+	renovateImage = "renovate/renovate:44.17.3@sha256:58f45d505a1bdcc218de2f6894b77df758d3d48e0eb32d45c69e9444677a29e8"
 	helmDocsImage     = "jnorwood/helm-docs:v1.14.2@sha256:7e562b49ab6b1dbc50c3da8f2dd6ffa8a5c6bba327b1c6335cc15ce29267979c"
 	helmSchemaImage = "ghcr.io/dadav/helm-schema:v0.23.4@sha256:dc18c88498fc5f38dd66360e3072d5f836f0e35d9f348f8ad27becead0c86559"
 	markdownlintImage = "davidanson/markdownlint-cli2:v0.23.2@sha256:839558fd0d36c46da0e01ea84fd1d20a2822b5a8a60c16dc9708f0bb7c9e903b"