diff --git a/apps/media/tandoor/app/helmrelease.yaml b/apps/media/tandoor/app/helmrelease.yaml
index ebb03a137..04667c586 100644
--- a/apps/media/tandoor/app/helmrelease.yaml
+++ b/apps/media/tandoor/app/helmrelease.yaml
@@ -102,7 +102,7 @@ spec:
           nginx:
             image:
               repository: nginxinc/nginx-unprivileged
-              tag: 1.29.3-alpine@sha256:5aea7cc516b419e3526f47dd1531be31a56a046cfe44754d94f9383e13e2ee99
+              tag: 1.29.4-alpine@sha256:a6c4f61f456b85b8fdf7ec7ab28cc3e299440e6fb4a9dea520e5fd8fd440025e
 
     defaultPodOptions:
       securityContext: