diff --git a/.github/renovate.json5 b/.github/renovate.json5
index e055052502f..0cdfdf83de0 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,9 +1,8 @@
 {
   $schema: "https://docs.renovatebot.com/renovate-schema.json",
   extends: [
-    "config:recommended",
+    "config:best-practices",
     "docker:enableMajor",
-    "helpers:pinGitHubActionDigests",
     "security:openssf-scorecard",
     ":automergeBranch",
     ":automergeDigest",
@@ -22,19 +21,16 @@
   dependencyDashboardTitle: "Renovate Dashboard 🤖",
   suppressNotifications: ["prEditedNotification", "prIgnoreNotification"],
   "pre-commit": {
-    "enabled": true
+    enabled: true,
   },
-  ignorePaths: [
-    "**/*.enc.*",
-    "**/resources/**",
-  ],
+  ignorePaths: ["**/*.enc.*", "**/resources/**"],
   flux: {
-    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"]
+    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"],
   },
   "helm-values": {
-    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"]
+    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"],
   },
   kubernetes: {
-    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"]
+    managerFilePatterns: ["/(^|/)kubernetes/.+\\.ya?ml$/"],
   },
 }
diff --git a/kubernetes/apps/base/game-servers/enemy-territory/app/helmrelease.yaml b/kubernetes/apps/base/game-servers/enemy-territory/app/helmrelease.yaml
index 7f6849cc248..9768d685383 100644
--- a/kubernetes/apps/base/game-servers/enemy-territory/app/helmrelease.yaml
+++ b/kubernetes/apps/base/game-servers/enemy-territory/app/helmrelease.yaml
@@ -43,7 +43,7 @@ spec:
           init-config:
             image:
               repository: registry.k8s.io/git-sync/git-sync
-              tag: v4.4.3
+              tag: v4.5.0@sha256:0e64aedb0d0ae0a3bab880349a5109b2a31891d646dd61e433ca36ed220dff1f
             args:
               - --repo=https://github.com/xunholy/etlegacy-server
               - --ref=HEAD
diff --git a/kubernetes/apps/base/home-system/bazarr/app/helmrelease.yaml b/kubernetes/apps/base/home-system/bazarr/app/helmrelease.yaml
index cabd12652ce..d2c3b4bae25 100644
--- a/kubernetes/apps/base/home-system/bazarr/app/helmrelease.yaml
+++ b/kubernetes/apps/base/home-system/bazarr/app/helmrelease.yaml
@@ -79,7 +79,7 @@ spec:
           subcleaner:
             image:
               repository: registry.k8s.io/git-sync/git-sync
-              tag: v4.4.3@sha256:ee0dda4203f56848f09b41650447353edf69ab0e4319254cd854adab3074dd2e
+              tag: v4.5.0@sha256:0e64aedb0d0ae0a3bab880349a5109b2a31891d646dd61e433ca36ed220dff1f
             env:
               GITSYNC_REPO: https://github.com/KBlixt/subcleaner
               GITSYNC_REF: master