diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7f15efa6a8b..1e6895cc0ee 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [25.21.3](https://github.com/renovatebot/github-action/compare/v25.21.1...v25.21.3) (2021-05-15)
+
+
+### Bug Fixes
+
+* **deps:** update renovate/renovate docker tag to v25.21.3 ([be66ab1](https://github.com/renovatebot/github-action/commit/be66ab11264104e7a10a5fd99f12be492cf1ab69))
+
 ### [25.21.1](https://github.com/renovatebot/github-action/compare/v25.20.1...v25.21.1) (2021-05-14)
 
 
diff --git a/dist/index.js b/dist/index.js
index 8397582ccd7..44f128233ab 100644
--- a/dist/index.js
+++ b/dist/index.js
@@ -1778,7 +1778,7 @@ class Docker {
     constructor() {
         this.repository = 'renovate/renovate';
         // renovate: datasource=docker depName=renovate/renovate versioning=docker
-        this.tag = '25.21.1-slim';
+        this.tag = '25.21.3-slim';
         this.tagSuffix = '-slim';
     }
     image() {
diff --git a/package-lock.json b/package-lock.json
index 70abb097645..693d0892dff 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "github-action",
-  "version": "25.21.1",
+  "version": "25.21.3",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index 875a9f40e50..fdbd180046d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "github-action",
-  "version": "25.21.1",
+  "version": "25.21.3",
   "description": "GitHub Action to run Renovate self-hosted.",
   "private": true,
   "main": "src/index.ts",