diff --git a/apps/wave-1/radarr.yaml b/apps/wave-1/radarr.yaml
index 7cb9ea3..f4c3e80 100644
--- a/apps/wave-1/radarr.yaml
+++ b/apps/wave-1/radarr.yaml
@@ -122,7 +122,7 @@ spec:
     spec:
       containers:
       - name: radarr
-        image: lscr.io/linuxserver/radarr:5.21.1
+        image: lscr.io/linuxserver/radarr:5.28.0
         ports:
         - containerPort: 7878
         env:
diff --git a/catalog/radarr.yaml b/catalog/radarr.yaml
index c2def75..44cf691 100644
--- a/catalog/radarr.yaml
+++ b/catalog/radarr.yaml
@@ -8,7 +8,7 @@
 name: radarr
 kind: container
 source:
-  image: lscr.io/linuxserver/radarr:5.21.1   # pinned stable v5 tag (R-UPD-01); update.range governs advancement
+  image: lscr.io/linuxserver/radarr:5.28.0   # pinned stable v5 tag (R-UPD-01); update.range governs advancement
 # LinuxServer images run their service as the user `abc`, whose uid/gid these two set. They are
 # LOAD-BEARING for the bulk mount, not cosmetic: see the storage note below. The default is 911,
 # which cannot write a 1000:3000-owned 0755 tree.