diff --git a/k8s/providers/hetzner/apps/agentic-engineer/deployment-anthropic-proxy.yaml b/k8s/providers/hetzner/apps/agentic-engineer/deployment-anthropic-proxy.yaml
index 29f1b8b3f..db28d493d 100644
--- a/k8s/providers/hetzner/apps/agentic-engineer/deployment-anthropic-proxy.yaml
+++ b/k8s/providers/hetzner/apps/agentic-engineer/deployment-anthropic-proxy.yaml
@@ -37,7 +37,7 @@ spec:
       initContainers:
         # A native sidecar: Envoy starts only once the first token is written.
         - name: token-refresher
-          image: docker.io/badouralix/curl-jq:latest@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc
+          image: docker.io/badouralix/curl-jq:latest@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7
           imagePullPolicy: IfNotPresent
           restartPolicy: Always
           command: ["/bin/sh", "/etc/anthropic-proxy/refresh.sh"]
diff --git a/k8s/providers/hetzner/apps/agentic-engineer/job-schedule.yaml b/k8s/providers/hetzner/apps/agentic-engineer/job-schedule.yaml
index 735b80548..7a2151d40 100644
--- a/k8s/providers/hetzner/apps/agentic-engineer/job-schedule.yaml
+++ b/k8s/providers/hetzner/apps/agentic-engineer/job-schedule.yaml
@@ -60,7 +60,7 @@ spec:
               mountPath: /tools
       containers:
         - name: schedule
-          image: docker.io/badouralix/curl-jq:latest@sha256:1e7c0284e24572ace7170df9fc91f15fd3b79ebf056d4dde17244d5d74bbfabc
+          image: docker.io/badouralix/curl-jq:latest@sha256:7f3c18b2a7d72e8f6f89d5395f171d37a83d6015b6de718e5f4c5396305981b7
           imagePullPolicy: IfNotPresent
           env:
             - name: NAME