diff --git a/renovate.json b/renovate.json
index 2975de6..13774e4 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,7 +4,9 @@
     "config:recommended", // Included in config:best-practices anyway, but added for clarity.
     "config:best-practices",
     ":ignoreUnstable",
-    ":disableRateLimiting"
+    ":disableRateLimiting",
+    ":rebaseStalePrs",
+    ":label(renovate)"
   ],
   "semanticCommits": "disabled",
   "packageRules": [
diff --git a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2 b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
index 4c9d491..c5379bb 100644
--- a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
@@ -3,7 +3,7 @@
 
 services:
   database:
-    image: docker.io/library/mariadb:11@sha256:ae6119716edac6998ae85508431b3d2e666530ddf4e94c61a10710caec9b0f71
+    image: docker.io/library/mariadb:12@sha256:5b6a1eac15b85b981a61afb89aea2a22bf76b5f58809d05f0bcc13ab6ec44cb8
     environment:
       - "MARIADB_DATABASE=wordpress"
       - "MARIADB_ROOT_PASSWORD={{ secret__mariadb_root_password }}"