diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 23a66c47..8870c80b 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -33,8 +33,10 @@
         '/^build.gradle.kts$/',
       ],
       matchStrings: [
-        '"(?<depName>otel/weaver):(?<currentValue>[^"]+)"',
+        '(?<depName>otel/weaver):(?<currentValue>[^@"]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?',
       ],
+      autoReplaceStringTemplate: '{{depName}}:{{newValue}}{{#if newDigest}}@{{newDigest}}{{/if}}',
+      versioningTemplate: 'docker',
     },
   ],
 }
diff --git a/build.gradle.kts b/build.gradle.kts
index 5760449c..5fba26c1 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -115,7 +115,7 @@ fun generateTask(taskName: String, incubating: Boolean) {
         "--mount", "type=bind,source=${modelPath},target=/home/weaver/source,readonly",
         "--mount", "type=bind,source=$projectDir/buildscripts/templates,target=/home/weaver/templates,readonly",
         "--mount", "type=bind,source=$projectDir/$outputDir,target=/home/weaver/target",
-        "otel/weaver:v0.16.1",
+        "otel/weaver:v0.16.1@sha256:5ca4901b460217604ddb83feaca05238e2b016a226ecfb9b87a95555918a03af",
         "registry", "generate",
         "--registry=/home/weaver/source",
         "--templates=/home/weaver/templates",