diff --git a/aqua.yaml b/aqua.yaml
index 33e6f51b..0c9eecb6 100644
--- a/aqua.yaml
+++ b/aqua.yaml
@@ -9,7 +9,7 @@
 #   - all
 registries:
   - type: standard
-    ref: v4.386.0 # renovate: depName=aquaproj/aqua-registry
+    ref: v4.391.0 # renovate: depName=aquaproj/aqua-registry
 packages:
   - name: hashicorp/terraform@v1.12.2
   - name: siderolabs/talos@v1.10.5
diff --git a/terraform/cluster/talos/variables.tf b/terraform/cluster/talos/variables.tf
index 8f9bc63f..9c1e5b19 100644
--- a/terraform/cluster/talos/variables.tf
+++ b/terraform/cluster/talos/variables.tf
@@ -18,7 +18,7 @@ variable "kubernetes_version" {
   description = "The kubernetes version to deploy."
   type        = string
   # renovate: datasource=github-releases depName=kubernetes package=kubernetes/kubernetes
-  default = "1.33.2"
+  default = "1.33.3"
   validation {
     condition     = can(regex("^1\\.\\d+\\.\\d+$", var.kubernetes_version))
     error_message = "The Kubernetes version should be in semantic version format like '1.30.3'."