diff --git a/Dockerfile b/Dockerfile
index 0cd9712..6f67da6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@ COPY . .
 RUN CGO_ENABLED=0 go build -ldflags "-X main.Version=docker" -o /azemu ./cmd/azemu
 
 # --- Runtime stage ---
-FROM alpine:3.23
+FROM alpine:3.24
 RUN apk add --no-cache ca-certificates wget
 
 # Cert bundle directory; bind-mounted from host via docker-compose.
diff --git a/Dockerfile.release b/Dockerfile.release
index 4253a15..5dd1fd6 100644
--- a/Dockerfile.release
+++ b/Dockerfile.release
@@ -16,7 +16,7 @@
 #   - The binary named `azemu` is expected at the build-context root.
 #     goreleaser places it there automatically.
 
-FROM alpine:3.23
+FROM alpine:3.24
 RUN apk add --no-cache ca-certificates wget
 
 # Persistent TLS cert bundle; bind-mounted from host via docker-compose.