diff --git a/.forgejo/workflows/renovate.yml b/.forgejo/workflows/renovate.yml
index f6998c5ef..0a1e6fc12 100644
--- a/.forgejo/workflows/renovate.yml
+++ b/.forgejo/workflows/renovate.yml
@@ -23,7 +23,7 @@ jobs:
 
     runs-on: docker
     container:
-      image: code.forgejo.org/forgejo-contrib/renovate:38.18.12
+      image: code.forgejo.org/forgejo-contrib/renovate:38.21.3
 
     steps:
       - name: Load renovate repo cache
diff --git a/Makefile b/Makefile
index 2ba79cd1a..cb9790e51 100644
--- a/Makefile
+++ b/Makefile
@@ -39,7 +39,7 @@ GOVULNCHECK_PACKAGE ?= golang.org/x/vuln/cmd/govulncheck@v1 # renovate: datasour
 DEADCODE_PACKAGE ?= golang.org/x/tools/cmd/deadcode@v0.23.0 # renovate: datasource=go
 GOMOCK_PACKAGE ?= go.uber.org/mock/mockgen@v0.4.0 # renovate: datasource=go
 GOPLS_PACKAGE ?= golang.org/x/tools/gopls@v0.16.1 # renovate: datasource=go
-RENOVATE_NPM_PACKAGE ?= renovate@38.18.12 # renovate: datasource=docker packageName=code.forgejo.org/forgejo-contrib/renovate
+RENOVATE_NPM_PACKAGE ?= renovate@38.21.3 # renovate: datasource=docker packageName=code.forgejo.org/forgejo-contrib/renovate
 
 DOCKER_IMAGE ?= gitea/gitea
 DOCKER_TAG ?= latest