diff --git a/infra/images/zotero.Dockerfile b/infra/images/zotero.Dockerfile
index 5903b89..b9bf79f 100644
--- a/infra/images/zotero.Dockerfile
+++ b/infra/images/zotero.Dockerfile
@@ -30,7 +30,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 # purged above). KasmVNC's entrypoint hard-depends on it (mikefarah v4 syntax);
 # a recent release carries the patched Go stdlib that motivated the removal.
 # renovate: datasource=docker depName=mikefarah/yq
-ARG YQ_VERSION=4.53.3
+ARG YQ_VERSION=4.54.1
 RUN arch="$(dpkg --print-architecture)" \
     && curl -fsSL "https://github.com/mikefarah/yq/releases/download/v${YQ_VERSION}/yq_linux_${arch}" -o /usr/bin/yq \
     && chmod +x /usr/bin/yq \