diff --git a/images/minesweeper/requirements.txt b/images/minesweeper/requirements.txt
index 615ea8d3..fc998cdc 100644
--- a/images/minesweeper/requirements.txt
+++ b/images/minesweeper/requirements.txt
@@ -6,7 +6,7 @@
 #
 cachetools==5.3.1
     # via google-auth
-certifi==2023.7.22
+certifi==2024.7.4
     # via
     #   kubernetes
     #   requests
diff --git a/paws/values.yaml b/paws/values.yaml
index 1f0cc937..d8e96912 100644
--- a/paws/values.yaml
+++ b/paws/values.yaml
@@ -309,7 +309,7 @@ minesweeper:
   enabled: false  # most local-dev testers won't have the key to configs
   image:
     name: quay.io/wikimedia-paws-prod/minesweeper
-    tag: pr-416 # minesweeper tag managed by github actions
+    tag: pr-438 # minesweeper tag managed by github actions
     template: "{{ .Values.minesweeper.image.name }}:{{ .Values.minesweeper.image.tag }}"
 # If not deployed for prod use, we use the some hacks for testing
 localdev: