diff --git a/charts/gitops-runtime/README.md b/charts/gitops-runtime/README.md
index 6e323aa10..bbd24e7bc 100644
--- a/charts/gitops-runtime/README.md
+++ b/charts/gitops-runtime/README.md
@@ -728,7 +728,7 @@ global:
 | internal-router.fullnameOverride | string | `"internal-router"` |  |
 | internal-router.image.pullPolicy | string | `"IfNotPresent"` |  |
 | internal-router.image.repository | string | `"docker.io/nginxinc/nginx-unprivileged"` |  |
-| internal-router.image.tag | string | `"1.29-alpine3.22"` |  |
+| internal-router.image.tag | string | `"1.29-alpine3.23"` |  |
 | internal-router.imagePullSecrets | list | `[]` |  |
 | internal-router.ipv6 | object | `{"enabled":false}` | For ipv6 enabled clusters switch ipv6 enabled to true |
 | internal-router.nameOverride | string | `""` |  |
diff --git a/charts/gitops-runtime/values.yaml b/charts/gitops-runtime/values.yaml
index e8f77f5a0..fc0ab653e 100644
--- a/charts/gitops-runtime/values.yaml
+++ b/charts/gitops-runtime/values.yaml
@@ -327,7 +327,7 @@ internal-router:
   image:
     repository: docker.io/nginxinc/nginx-unprivileged
     pullPolicy: IfNotPresent
-    tag: 1.29-alpine3.22
+    tag: 1.29-alpine3.23
   imagePullSecrets: []
   nameOverride: ""
   fullnameOverride: "internal-router"