diff --git a/.github/renovate.json b/.github/renovate.json
index 316c653e..0cbb51fb 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -181,7 +181,8 @@
       "fileMatch": ["^deps\\.list$"],
       "matchStrings": ["UPX_VERSION=(?<currentValue>.*?)\\n"],
       "depNameTemplate": "upx/upx",
-      "datasourceTemplate": "github-releases"
+      "datasourceTemplate": "github-releases",
+      "extractVersionTemplate": "^v(?<version>.*)$"
     },
     {
       "fileMatch": ["^deps\\.list$"],
diff --git a/Dockerfile b/Dockerfile
index 7d194bb5..9d89d7f5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -389,8 +389,8 @@ RUN install -D /dart-protobuf/protoc_plugin/protoc_plugin /out/usr/bin/protoc-ge
 FROM --platform=$BUILDPLATFORM alpine_host as upx
 RUN mkdir -p /upx
 ARG BUILDARCH BUILDOS UPX_VERSION
-RUN if ! [ "${TARGETARCH}" = "arm64" ]; then curl -sSL https://github.com/upx/upx/releases/download/v${UPX_VERSION}/upx-${UPX_VERSION}-${BUILDARCH}_${BUILDOS}.tar.xz | tar xJ --strip 1 -C /upx; fi
-RUN if ! [ "${TARGETARCH}" = "arm64" ]; then install -D /upx/upx /usr/local/bin/upx; fi
+RUN curl -sSL https://github.com/upx/upx/releases/download/v${UPX_VERSION}/upx-${UPX_VERSION}-${BUILDARCH}_${BUILDOS}.tar.xz | tar xJ --strip 1 -C /upx
+RUN install -D /upx/upx /usr/local/bin/upx
 COPY --from=googleapis /out/ /out/
 COPY --from=grpc_gateway /out/ /out/
 COPY --from=grpc_rust /out/ /out/
@@ -411,14 +411,9 @@ COPY --from=protoc_gen_rust /out/ /out/
 COPY --from=protoc_gen_scala /out/ /out/
 COPY --from=protoc_gen_validate /out/ /out/
 ARG TARGETARCH
-RUN <<EOF
-    if ! [ "${TARGETARCH}" = "arm64" ]; then
-        upx --lzma $(find /out/usr/bin/ -type f \
+RUN upx --lzma $(find /out/usr/bin/ -type f \
             -name 'protoc-gen-*' -or \
-            -name 'grpc_*' \
-        )
-    fi
-EOF
+            -name 'grpc_*')
 RUN find /out -name "*.a" -delete -or -name "*.la" -delete
 
 
diff --git a/deps.list b/deps.list
index c50ac666..c6f0b28b 100644
--- a/deps.list
+++ b/deps.list
@@ -26,5 +26,5 @@ PROTOC_GEN_VALIDATE_VERSION=v0.9.1
 RUST_IMAGE_VERSION=1.67.0-alpine3.17
 SCALA_SBT_IMAGE_VERSION=graalvm-ce-21.3.0-java17_1.8.0_3.2.1
 SWIFT_IMAGE_VERSION=5.7-focal
-UPX_VERSION=4.0.1
+UPX_VERSION=4.0.2
 XX_IMAGE_VERSION=1.2.0