diff --git a/deploy/helm/forge/charts/postgresql/values.yaml b/deploy/helm/forge/charts/postgresql/values.yaml
index 5c7240e7..dd276a2f 100644
--- a/deploy/helm/forge/charts/postgresql/values.yaml
+++ b/deploy/helm/forge/charts/postgresql/values.yaml
@@ -12,7 +12,7 @@ image:
   repository: forgepkg/forge/postgres
   # Pinned by digest (`<tag>@sha256:…`, the multi-arch index), which
   # Dependabot bumps together with the tag; `digest`, when set, replaces it.
-  tag: "18@sha256:edb0c08dc33befd0262ab3b5cf1c4f3f8cfd8b09e88c05b45adee29d6761ddb6"
+  tag: "18@sha256:3a4264520e121176619f54ff867d12774bc81e95e7b84db58d63bccdb6144b81"
   digest: ""
   pullPolicy: IfNotPresent
 
diff --git a/deploy/kubernetes/components/postgres/postgres.yaml b/deploy/kubernetes/components/postgres/postgres.yaml
index abc739d5..313c1049 100644
--- a/deploy/kubernetes/components/postgres/postgres.yaml
+++ b/deploy/kubernetes/components/postgres/postgres.yaml
@@ -51,7 +51,7 @@ spec:
           # Docker Hub's library/postgres, mirrored to ghcr.io under the same
           # digest (.github/workflows/mirror-images.yml). Pinned by digest;
           # Dependabot bumps tag and digest together.
-          image: ghcr.io/forgepkg/forge/postgres:18@sha256:edb0c08dc33befd0262ab3b5cf1c4f3f8cfd8b09e88c05b45adee29d6761ddb6
+          image: ghcr.io/forgepkg/forge/postgres:18@sha256:3a4264520e121176619f54ff867d12774bc81e95e7b84db58d63bccdb6144b81
           env:
             - name: POSTGRES_DB
               value: forge