diff --git a/Dockerfile b/Dockerfile
index 15e9555..26c634c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25-alpine3.22@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb AS builder
+FROM golang:1.26-alpine3.22@sha256:7ef941168f213aa115df2e61364d67682129e99dc8188b734139dea862cc7d31 AS builder
 
 SHELL ["/bin/ash", "-o", "pipefail", "-ex", "-c"]
 
@@ -10,7 +10,7 @@ ARG \
     # renovate: datasource=repology depName=alpine_3_22/dpkg
     DPKG_VERSION=1.22.15-r0 \
     # renovate: datasource=repology depName=alpine_3_22/gnupg
-    GNUPG_VERSION=2.4.7-r0 \
+    GNUPG_VERSION=2.4.9-r0 \
     # renovate: datasource=github-releases depName=gosu packageName=tianon/gosu
     GOSU_VERSION=1.19
 
@@ -40,7 +40,7 @@ COPY main.go ./
 RUN --mount=type=cache,target=/root/.cache/go-build \
     CGO_ENABLED=0 go build -ldflags="-s -w" -o /app/vault-proxy .
 
-FROM alpine:3.22@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+FROM alpine:3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
 
 SHELL ["/bin/ash", "-o", "pipefail", "-c"]