diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index d80a6c6..113bbee 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -29,7 +29,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -57,7 +57,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index 997ff0c..1d6577b 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -29,7 +29,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
 
@@ -65,7 +65,7 @@ jobs:
 
       - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
         with:
-          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
+          image: harbor.cryptic.systems/docker/tonistiigi/binfmt:qemu-v10.2.1 # renovate: datasource=docker registryUrl=https://docker.io depName=tonistiigi/binfmt extractVersion='qemu-(?<version>v\d+\.\d+\.\d+)$'
 
       - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0