diff --git a/.github/workflows/Renovate.yml b/.github/workflows/Renovate.yml
index b35c9a73..689accb5 100644
--- a/.github/workflows/Renovate.yml
+++ b/.github/workflows/Renovate.yml
@@ -62,7 +62,7 @@ jobs:
           persist-credentials: false
 
       - name: Renovate
-        uses: renovatebot/github-action@v46.3.6
+        uses: renovatebot/github-action@v46.3.7
         with:
           configurationFile: .github/renovate.json5
           token: "${{ steps.app-token.outputs.token }}"
diff --git a/infra/containers/nginx/nginx.MODULE.bazel b/infra/containers/nginx/nginx.MODULE.bazel
index 547049c0..47f84e40 100644
--- a/infra/containers/nginx/nginx.MODULE.bazel
+++ b/infra/containers/nginx/nginx.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/library/nginx
 oci.pull(
     name = "nginx",
-    digest = "sha256:abe47724e466aeab9a345d8e46a221c2fa8953c7848bb4a3bd9976a7199f8cf2",
+    digest = "sha256:f9ea18bfa4fad859e1ed38259d711da7ccad2c3516e875cec3351a57c859f571",
     image = "docker.io/library/nginx",
     platforms = [
         "linux/386",
diff --git a/infra/containers/radarr/radarr.MODULE.bazel b/infra/containers/radarr/radarr.MODULE.bazel
index fedcf5d1..e69c2430 100644
--- a/infra/containers/radarr/radarr.MODULE.bazel
+++ b/infra/containers/radarr/radarr.MODULE.bazel
@@ -3,7 +3,7 @@ oci = use_extension("@rules_oci//oci:extensions.bzl", "oci")
 # renovate: datasource=docker depName=docker.io/linuxserver/radarr
 oci.pull(
     name = "radarr",
-    digest = "sha256:adb6c09d6b729ea5e642c99cea35af72702ef476bf4763f153299ac5db9f0b4f",
+    digest = "sha256:7dfd049e79c00b16fbc29c3f5d96a9e7b9e73a23930b4c5b3c4541d60b366814",
     image = "docker.io/linuxserver/radarr",
     platforms = [
         "linux/amd64",
diff --git a/java.MODULE.bazel b/java.MODULE.bazel
index ab056ce8..495a6a9b 100644
--- a/java.MODULE.bazel
+++ b/java.MODULE.bazel
@@ -8,7 +8,7 @@ GUICE_VERSION = "7.0.0"
 RESTEASY_VERSION = "7.0.5.Final"
 
 # renovate: datasource=maven depName=org.eclipse.jetty:jetty-bom
-JETTY_VERSION = "12.1.13"
+JETTY_VERSION = "12.1.14"
 
 # renovate: datasource=maven depName=org.glassfish.jersey:jersey-bom
 JERSEY_VERSION = "5.0.0-M1"