diff --git a/renovate.json b/renovate.json
index 2d0a9848..a2ac9696 100644
--- a/renovate.json
+++ b/renovate.json
@@ -38,10 +38,13 @@
         "!git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
+    // Automatically merge patch level updates
+    // https://docs.renovatebot.com/key-concepts/automerge/
     {
       "matchUpdateTypes": ["patch"],
-      "matchCurrentVersion": "!/^0/",
-      "automerge": true
+      "automerge": true,
+      "ignoreTests": true,
+      "automergeType": "branch"
     },
     {
       "matchDatasources": ["docker"],
diff --git a/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2 b/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2
index 8ee08bab..0e3d5e59 100644
--- a/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2
@@ -3,7 +3,7 @@
 
 services:
   db:
-    image: mariadb:12.3.2
+    image: mariadb:12.3.3
     command: --max_allowed_packet=3250585600
     environment:
       MYSQL_ROOT_PASSWORD: "{{ secret__sunders_db_root_password }}"