diff --git a/apps/kaneo/release.yaml b/apps/kaneo/release.yaml
index 46e00e0..9473ad1 100644
--- a/apps/kaneo/release.yaml
+++ b/apps/kaneo/release.yaml
@@ -53,6 +53,8 @@ spec:
       enabled: false
     
     kaneo:
+      image:
+        tag: "2.7.3"  # renovate: depName=ghcr.io/usekaneo/kaneo registryUrl=https://ghcr.io
       env:
         clientUrl: "https://kaneo.lumpiasty.xyz"
         disablePasswordRegistration: true
diff --git a/renovate.json b/renovate.json
index c14764d..ba431f0 100644
--- a/renovate.json
+++ b/renovate.json
@@ -12,6 +12,10 @@
   },
   "prHourlyLimit": 9,
   "packageRules": [
+    {
+      "matchPackageNames": ["usekaneo/kaneo", "ghcr.io/usekaneo/kaneo"],
+      "groupName": "kaneo"
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackageNames": ["ghcr.io/mostlygeek/llama-swap"],