diff --git a/tests/integration/brokers/cockroachdb/docker-compose.cockroachdb.yml b/tests/integration/brokers/cockroachdb/docker-compose.cockroachdb.yml
index 7735cdf7..d88c8229 100644
--- a/tests/integration/brokers/cockroachdb/docker-compose.cockroachdb.yml
+++ b/tests/integration/brokers/cockroachdb/docker-compose.cockroachdb.yml
@@ -19,7 +19,7 @@ services:
     # suite, so an upstream regression still surfaces within a day — attributable
     # to the bump, instead of turning the nightly red underneath a run.
     # Production users pin their own version.
-    image: cockroachdb/cockroach:v26.3.1
+    image: cockroachdb/cockroach:v26.3.2
     # Single node, no TLS: this is a throwaway test instance, and insecure
     # mode is what lets the runner connect with `sslmode=disable`.
     command: start-single-node --insecure