diff --git a/.woodpecker/flux-reconcile-source.yaml b/.woodpecker/flux-reconcile-source.yaml
index c25be1f..271dcf1 100644
--- a/.woodpecker/flux-reconcile-source.yaml
+++ b/.woodpecker/flux-reconcile-source.yaml
@@ -6,7 +6,7 @@ skip_clone: true
 
 steps:
   - name: Get kubernetes access from OpenBao
-    image: quay.io/openbao/openbao:2.5.3
+    image: quay.io/openbao/openbao:2.5.4
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
       ROLE_ID:
@@ -41,7 +41,7 @@ steps:
     commands:
       - flux reconcile source git flux-system
   - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.3
+    image: quay.io/openbao/openbao:2.5.4
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
     commands:
diff --git a/.woodpecker/renovate.yaml b/.woodpecker/renovate.yaml
index ce814e4..6e7ee1a 100644
--- a/.woodpecker/renovate.yaml
+++ b/.woodpecker/renovate.yaml
@@ -6,7 +6,7 @@ skip_clone: true
 
 steps:
   - name: Get renovate token from OpenBao
-    image: quay.io/openbao/openbao:2.5.3
+    image: quay.io/openbao/openbao:2.5.4
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
       ROLE_ID:
@@ -30,7 +30,7 @@ steps:
       - export RENOVATE_TOKEN=$(cat /woodpecker/renovate_token)
       - /usr/local/sbin/renovate-entrypoint.sh renovate
   - name: Invalidate OpenBao token
-    image: quay.io/openbao/openbao:2.5.3
+    image: quay.io/openbao/openbao:2.5.4
     environment:
       VAULT_ADDR: https://openbao.lumpiasty.xyz:8200
     commands: