diff --git a/src/grafana-cognito-auth.ts b/src/grafana-cognito-auth.ts
index c07b161c..9a2f8e52 100644
--- a/src/grafana-cognito-auth.ts
+++ b/src/grafana-cognito-auth.ts
@@ -363,7 +363,7 @@ export class GrafanaCognitoAuth extends constructs.Construct {
     this.containerDefinitionOpts = {
       image: ecs.ContainerImage.fromRegistry(
         // renovate: datasource=docker depName=grafana/grafana-oss
-        "grafana/grafana-oss:11.6.5@sha256:d552f949693c54d17c6f867ff6aeb128b021e54e923895dcf9cd6aa8176c0d74",
+        "grafana/grafana-oss:12.4.1@sha256:e932bd6ed0e026595b08483cd0141e5103e1ab7ff8604839ff899b8dc54cabcb",
       ),
       logging: ecs.LogDriver.awsLogs({
         streamPrefix: "ecs",