diff --git a/kube/deploy/apps/authentik/app/hr.yaml b/kube/deploy/apps/authentik/app/hr.yaml
index 33ae778998..19f55564ce 100644
--- a/kube/deploy/apps/authentik/app/hr.yaml
+++ b/kube/deploy/apps/authentik/app/hr.yaml
@@ -46,7 +46,7 @@ spec:
           main:
             image: &img
               repository: ghcr.io/goauthentik/server
-              tag: 2024.8.3
+              tag: 2024.8.4@sha256:2a6dd873c0920fe5b9ff90f0783d56607aa398823e3477a9f4036de6dfbb1ee5
             args: [server]
             env: &env
               TZ: "${CONFIG_TZ}"
@@ -161,7 +161,7 @@ spec:
             image:
               <<: *img
               repository: ghcr.io/goauthentik/ldap
-              tag: 2024.8.3@sha256:6b50f781bd50c0b849c5a7ec32127e65d5018c3a9c5939a072f988027449a978
+              tag: 2024.8.4@sha256:b8868451b56c6c618289365af0294f29fe3b9348741693a8f3b384cc8a8c4700
             env:
               AUTHENTIK_HOST: "https://${APP_DNS_AUTHENTIK}"
               AUTHENTIK_TOKEN:
@@ -199,7 +199,7 @@ spec:
             image:
               <<: *img
               repository: ghcr.io/goauthentik/radius
-              tag: 2024.8.3@sha256:487c2cc98193ad84286b260115b1ded3b405b28c08aa57e45116fcce362c7fa9
+              tag: 2024.8.4@sha256:97c76cb41b14055be64a0e671f228d9253463d7d807025220b265cf2c204e50e
             env:
               AUTHENTIK_HOST: "https://${APP_DNS_AUTHENTIK}"
               AUTHENTIK_TOKEN: