diff --git a/kube/deploy/core/monitoring/karma/app/hr.yaml b/kube/deploy/core/monitoring/karma/app/hr.yaml
index 88130d99a7..27aa02b0aa 100644
--- a/kube/deploy/core/monitoring/karma/app/hr.yaml
+++ b/kube/deploy/core/monitoring/karma/app/hr.yaml
@@ -27,7 +27,7 @@ spec:
           main:
             image: &img
               repository: "ghcr.io/prymitive/karma"
-              tag: "v0.119@sha256:ff17725ded0810cf09fc63f343365a297221cb313309aedfde6db328c1009d08"
+              tag: "v0.120@sha256:733bff15f2529065f1c1b50b13e4a56a541d3c0615dbc6b4b6a07befbfcc27ff"
             env:
               TZ: "${CONFIG_TZ}"
               # TODO: use full config mapping to all AM instances and 1 cluster, including different deployments for authentik, cloudflared and Tailscale's forward auth headers