diff --git a/Dockerfile b/Dockerfile
index ee3f06b..2e46f3b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,7 +13,7 @@ COPY . .
 RUN CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags "-s -w -X main.version=${VERSION}" -o /out/crux ./cmd/crux
 
-FROM alpine:3.22
+FROM alpine:3.24
 RUN apk add --no-cache tmux ca-certificates git openssh-client bash \
  && adduser -D -u 1000 crux
 COPY --from=build /out/crux /usr/local/bin/crux
diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index e7767c2..45add52 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -1,7 +1,7 @@
 # Used only by goreleaser (.goreleaser.yaml), which copies in the binary it
 # already cross-compiled for the target platform. Keep the runtime layer in
 # step with Dockerfile.
-FROM alpine:3.22
+FROM alpine:3.24
 RUN apk add --no-cache tmux ca-certificates git openssh-client bash \
  && adduser -D -u 1000 crux
 COPY crux /usr/local/bin/crux