diff --git a/manifests/grist/grist.yaml b/manifests/grist/grist.yaml
index 99a6753..bcca1f9 100644
--- a/manifests/grist/grist.yaml
+++ b/manifests/grist/grist.yaml
@@ -72,7 +72,7 @@ spec:
       serviceAccountName: grist
       containers:
         - name: grist
-          image: gristlabs/grist-oss:1.1.18
+          image: gristlabs/grist-oss:1.3.0
           imagePullPolicy: IfNotPresent
           ports:
             - name: http
@@ -103,6 +103,12 @@ spec:
               value: "false"
             - name: GRIST_FORCE_LOGIN
               value: "true"
+            - name: GRIST_SANDBOX_FLAVOR
+              value: gvisor
+          securityContext:
+            capabilities:
+              add:
+              - SYS_PTRACE
           envFrom:
           - secretRef:
               name: grist