diff --git a/images/minesweeper/requirements.txt b/images/minesweeper/requirements.txt
index 6710d37d..c25d8f32 100644
--- a/images/minesweeper/requirements.txt
+++ b/images/minesweeper/requirements.txt
@@ -14,7 +14,7 @@ charset-normalizer==3.2.0
     # via requests
 google-auth==2.22.0
     # via kubernetes
-idna==3.4
+idna==3.7
     # via requests
 kubernetes==27.2.0
     # via -r requirements.in
diff --git a/paws/values.yaml b/paws/values.yaml
index 44588879..9a554d4e 100644
--- a/paws/values.yaml
+++ b/paws/values.yaml
@@ -309,7 +309,7 @@ minesweeper:
   enabled: false  # most local-dev testers won't have the key to configs
   image:
     name: quay.io/wikimedia-paws-prod/minesweeper
-    tag: pr-340 # minesweeper tag managed by github actions
+    tag: pr-400 # minesweeper tag managed by github actions
     template: "{{ .Values.minesweeper.image.name }}:{{ .Values.minesweeper.image.tag }}"
 # If not deployed for prod use, we use the some hacks for testing
 localdev: