diff --git a/renovate.json b/renovate.json
index d36e7fef..2d0a9848 100644
--- a/renovate.json
+++ b/renovate.json
@@ -34,8 +34,8 @@
       "matchUpdateTypes": [
         "minor"
       ],
-      "excludePackageNames": [
-        "git.hamburg.ccc.de/ccchh/oci-images/keycloak"
+      "matchPackageNames": [
+        "!git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
     {
diff --git a/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2 b/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2
index 8ee08bab..0e3d5e59 100644
--- a/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/sunders/docker_compose/compose.yaml.j2
@@ -3,7 +3,7 @@
 
 services:
   db:
-    image: mariadb:12.3.2
+    image: mariadb:12.3.3
     command: --max_allowed_packet=3250585600
     environment:
       MYSQL_ROOT_PASSWORD: "{{ secret__sunders_db_root_password }}"