diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index b31f8c2..7996197 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -22,7 +22,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -50,7 +50,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
diff --git a/.gitea/workflows/release-latest.yaml b/.gitea/workflows/release-latest.yaml
index 90eb1f8..7b74ea8 100644
--- a/.gitea/workflows/release-latest.yaml
+++ b/.gitea/workflows/release-latest.yaml
@@ -25,7 +25,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -59,7 +59,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
diff --git a/.gitea/workflows/release-tagged.yaml b/.gitea/workflows/release-tagged.yaml
index afe2f85..99d8a79 100644
--- a/.gitea/workflows/release-tagged.yaml
+++ b/.gitea/workflows/release-tagged.yaml
@@ -46,7 +46,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -96,7 +96,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0