diff --git a/clusters/cl01tl/helm/tailscale-operator/templates/dns-config.yaml b/clusters/cl01tl/helm/tailscale-operator/templates/dns-config.yaml
index 4b3b9a3da..0ce3baecb 100644
--- a/clusters/cl01tl/helm/tailscale-operator/templates/dns-config.yaml
+++ b/clusters/cl01tl/helm/tailscale-operator/templates/dns-config.yaml
@@ -11,4 +11,5 @@ spec:
   nameserver:
     image:
       repo: tailscale/k8s-nameserver
-      tag: unstable-v1.93.44
+      # renovate: datasource=docker depName=tailscale/k8s-nameserver
+      tag: v1.94.2
diff --git a/renovate.json b/renovate.json
index 0b73576ef..dc5ffe8b3 100644
--- a/renovate.json
+++ b/renovate.json
@@ -7,13 +7,20 @@
   ],
   "customManagers": [
     {
-      "description": "Update appVersion in Chart.yaml via magic comments",
+      "description": "Update appVersion in Chart.yaml",
       "customType": "regex",
       "fileMatch": ["(^|/)Chart\\.yaml$"],
       "matchStrings": [
         "#\\s*renovate:\\s*datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+appVersion:\\s*[\"']?(?<currentValue>[^\"'\\s]+)[\"']?"
       ]
     },
+    {
+      "customType": "regex",
+      "fileMatch": ["(^|/)templates/.*\\.yaml$"],
+      "matchStrings": [
+        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+tag: (?<currentValue>.*)"
+      ]
+    },
     {
       "description": "Update Helm CLI version in GitHub Actions",
       "customType": "regex",