diff --git a/Dockerfile b/Dockerfile
index 8bf9461..d4f4a26 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -45,7 +45,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
 
 # Runtime stage — the binary is self-contained (templates are Go string
 # literals, Postgres migrations are go:embed), so no external assets are needed.
-FROM alpine:3.19
+FROM alpine:3.24
 
 RUN apk add --no-cache ca-certificates tzdata