diff --git a/renovate.json b/renovate.json
index d36e7fef..2d0a9848 100644
--- a/renovate.json
+++ b/renovate.json
@@ -34,8 +34,8 @@
       "matchUpdateTypes": [
         "minor"
       ],
-      "excludePackageNames": [
-        "git.hamburg.ccc.de/ccchh/oci-images/keycloak"
+      "matchPackageNames": [
+        "!git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
     {
diff --git a/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2 b/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
index e321b2f3..0e9b23ef 100644
--- a/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
@@ -22,7 +22,7 @@
 
 services:
   keycloak:
-    image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.7.2
+    image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.7.3
     pull_policy: always
     restart: unless-stopped
     command: start --optimized