diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 95361d18..afc93ac4 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -8,6 +8,7 @@ on:
     - '.github/workflows/release.yaml'
     - '.releaserc.js'
     - 'package.json'
+    - 'bun.lock'
     - 'templates/**'
   workflow_dispatch:
     inputs:
diff --git a/.github/workflows/update-aqua-checksum.yaml b/.github/workflows/update-aqua-checksum.yaml
new file mode 100644
index 00000000..826e93a3
--- /dev/null
+++ b/.github/workflows/update-aqua-checksum.yaml
@@ -0,0 +1,28 @@
+---
+# yamllint disable rule:line-length
+name: update-aqua-checksum
+
+on:
+  pull_request:
+    paths:
+    - 'images/homelab-workspace/aqua.yaml'
+    - 'images/homelab-workspace/aqua-checksums.json'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  update-aqua-checksums:
+    uses: aquaproj/update-checksum-workflow/.github/workflows/update-checksum.yaml@d248abb88efce715d50eb324100d9b29a20f7d18 # v1.0.4
+    with:
+      # renovate: datasource=github-releases depName=aquaproj/aqua
+      aqua_version: v2.53.6
+      working_directory: private_dot_config/aquaproj-aqua
+      prune: false
+    secrets:
+      gh_app_id: ${{ secrets.HOMELAB_BOT_APP_ID }}
+      gh_app_private_key: ${{ secrets.HOMELAB_BOT_APP_PRIVATE_KEY }}