diff --git a/kubernetes/components/egress-proxy-singbox/helmrelease-patch.yaml b/kubernetes/components/egress-proxy-singbox/helmrelease-patch.yaml
index ba41b10c..a711d3de 100644
--- a/kubernetes/components/egress-proxy-singbox/helmrelease-patch.yaml
+++ b/kubernetes/components/egress-proxy-singbox/helmrelease-patch.yaml
@@ -189,7 +189,7 @@ spec:
                       # Native Kubernetes "sidecar": a restartable initContainer.
                       # This ensures sing-box is started before the app container.
                       - name: sing-box
-                        image: ghcr.io/sagernet/sing-box:v1.13.4@sha256:b378dd84f5d28c6b493b74b936b05501ec125cdcaaf3fb31ad4a4f7e5ae92583
+                        image: ghcr.io/sagernet/sing-box:v1.13.5@sha256:8772c662c8e349d3afb0c233ccc3864d7df69ce840d5aa25db4c248d5bcb44f7
                         imagePullPolicy: IfNotPresent
                         restartPolicy: Always
                         securityContext: