diff --git a/kustomizations/forgejo/forgejo-ssh-keys.patch.yaml b/kustomizations/forgejo/forgejo-ssh-keys.patch.yaml
index ec41dfe..17092b7 100644
--- a/kustomizations/forgejo/forgejo-ssh-keys.patch.yaml
+++ b/kustomizations/forgejo/forgejo-ssh-keys.patch.yaml
@@ -7,7 +7,7 @@ spec:
     spec:
       initContainers:
       - name: forgejo-ssh-key-prep
-        image: codeberg.org/forgejo/forgejo:1.20.5-0
+        image: codeberg.org/forgejo/forgejo:1.21.11-1
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
diff --git a/kustomizations/forgejo/kustomization.yaml b/kustomizations/forgejo/kustomization.yaml
index 683a8bf..30ef2ea 100644
--- a/kustomizations/forgejo/kustomization.yaml
+++ b/kustomizations/forgejo/kustomization.yaml
@@ -33,5 +33,5 @@ configMapGenerator:
   files:
   - app_template.ini
 images:
-- name: codeberg.org/forgejo/forgejo:1.20.5-0
-  newTag: 1.20.5-0@sha256:d665129e66cc04fa72aa6a284eb98b17c0eee642aeaad7c88edec21f9edbf519
+- name: codeberg.org/forgejo/forgejo:1.21.11-1
+  newTag: 1.21.11-1@sha256:d036b8021aac6449e3a128fda50bae3598f1403578f3e83bb7717bceb60ae875
diff --git a/kustomizations/forgejo/resources.yaml b/kustomizations/forgejo/resources.yaml
index 8d079a5..feedca5 100644
--- a/kustomizations/forgejo/resources.yaml
+++ b/kustomizations/forgejo/resources.yaml
@@ -43,7 +43,7 @@ spec:
           type: RuntimeDefault
       initContainers:
       - name: forgejo-ensure-directories
-        image: codeberg.org/forgejo/forgejo:1.20.5-0
+        image: codeberg.org/forgejo/forgejo:1.21.11-1
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
@@ -61,7 +61,7 @@ spec:
         - name: forgejo-data
           mountPath: /data
       - name: config-templater
-        image: codeberg.org/forgejo/forgejo:1.20.5-0
+        image: codeberg.org/forgejo/forgejo:1.21.11-1
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
@@ -79,7 +79,7 @@ spec:
         - name: forgejo-config
           mountPath: /output
       - name: forgejo-migrate
-        image: codeberg.org/forgejo/forgejo:1.20.5-0
+        image: codeberg.org/forgejo/forgejo:1.21.11-1
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
@@ -96,7 +96,7 @@ spec:
         - name: forgejo-config
           mountPath: /etc/forgejo
       - name: forgejo-oidc
-        image: codeberg.org/forgejo/forgejo:1.20.5-0
+        image: codeberg.org/forgejo/forgejo:1.21.11-1
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
@@ -120,7 +120,7 @@ spec:
           mountPath: /etc/forgejo
       containers:
       - name: forgejo-web
-        image: codeberg.org/forgejo/forgejo:1.20.5-0
+        image: codeberg.org/forgejo/forgejo:1.21.11-1
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
@@ -140,7 +140,7 @@ spec:
         - name: forgejo-config
           mountPath: /etc/forgejo
       - name: forgejo-ssh
-        image: codeberg.org/forgejo/forgejo:1.20.5-0
+        image: codeberg.org/forgejo/forgejo:1.21.11-1
         securityContext:
           allowPrivilegeEscalation: false
           capabilities: