diff --git a/Dockerfile b/Dockerfile
index b24d15b..33a7bcb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,7 +18,7 @@ RUN go mod tidy
 RUN CGO_ENABLED=0 GOOS=linux go build -o plex-oidc-bridge .
 
 # Stage 2: Runtime
-FROM alpine:3.24@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
+FROM alpine:3.24@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
 
 # Pull patched OS packages (e.g. libcrypto3/libssl3) from the Alpine repo. The
 # pinned base image lags fresh CVE fixes between Alpine's periodic rebuilds, so