diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index d4f6198..0697666 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -25,7 +25,7 @@ jobs:
 
     - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
       with:
-        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt versioning='regex:^qemu-v(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)$'
 
     - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -51,7 +51,7 @@ jobs:
 
     - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
       with:
-        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt versioning='regex:^qemu-v(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)$'
 
     - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -77,7 +77,7 @@ jobs:
 
     - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
       with:
-        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='^qemu-(?<version>\d+\.\d+\.\d+)$'
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt versioning='regex:^qemu-v(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)$'
 
     - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index 337df9a..ad5583f 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -25,7 +25,7 @@ jobs:
 
     - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
       with:
-        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt versioning='regex:^qemu-v(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)$'
 
     - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -58,7 +58,7 @@ jobs:
 
     - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
       with:
-        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.3 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt versioning='regex:^qemu-v(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)$'
 
     - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -91,7 +91,7 @@ jobs:
 
     - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
       with:
-        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt versioning='regex:^qemu-v(?<major>\d+)\.(?<minor>\d+)\.(?<patch>\d+)$'
 
     - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0