diff --git a/atprotopds/ansible/roles/pds/defaults/main.yaml b/atprotopds/ansible/roles/pds/defaults/main.yaml
index 257de92..aca853e 100644
--- a/atprotopds/ansible/roles/pds/defaults/main.yaml
+++ b/atprotopds/ansible/roles/pds/defaults/main.yaml
@@ -8,7 +8,7 @@ pds_handle_domain: "{{ lookup('env', 'PDS_SERVICE_HANDLE_DOMAIN') }}"
 # @atproto/pds 0.5.9, which includes the built-in account management UI).
 # The upstream compose uses the moving :0.4 tag; watchtower will not bump a
 # pinned tag, so bump this role var to upgrade.
-pds_image: ghcr.io/bluesky-social/pds:0.4.5009
+pds_image: ghcr.io/bluesky-social/pds:0.4.5026
 pds_caddy_image: caddy:2
 pds_watchtower_image: ghcr.io/nicholas-fedor/watchtower:latest