diff --git a/renovate.json b/renovate.json
index d36e7fef..2d0a9848 100644
--- a/renovate.json
+++ b/renovate.json
@@ -34,8 +34,8 @@
       "matchUpdateTypes": [
         "minor"
       ],
-      "excludePackageNames": [
-        "git.hamburg.ccc.de/ccchh/oci-images/keycloak"
+      "matchPackageNames": [
+        "!git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
     {
diff --git a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2 b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
index 72d898fa..2dff4bcd 100644
--- a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
@@ -3,7 +3,7 @@
 
 services:
   database:
-    image: docker.io/library/mariadb:11
+    image: docker.io/library/mariadb:12
     environment:
       - "MARIADB_DATABASE=wordpress"
       - "MARIADB_ROOT_PASSWORD={{ secret__mariadb_root_password }}"