diff --git a/docker-compose.yml b/docker-compose.yml
index 2d7f1e8..c430101 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -53,7 +53,7 @@ services:
     # periodically (~every 1-3 months); a stale local image then hits
     # "Runner version X is deprecated and cannot receive messages" and enters a
     # restart loop. Renovate bumps this digest via PR — see renovate.json.
-    image: myoung34/github-runner@sha256:832c905652efdc6322cbaef8a23d2bab946e06481821c66e05d1af447f634e4e
+    image: myoung34/github-runner@sha256:4bca87217776cf6f7eaa0374b5b7d6e58c25c9c8764022045054c4609829f1b2
     container_name: roku-runner
     depends_on:
       roku-runner-registrar: