diff --git a/Dockerfile b/Dockerfile
index ac3340d..22368c1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -41,7 +41,7 @@ ARG BINARY=source
 # source: compile touchmark for the target platform on the build platform,
 # with the flags .goreleaser.yaml uses (and -buildvcs=false: the build
 # context has no .git).
-FROM --platform=$BUILDPLATFORM golang:1.27.2-alpine3.24@sha256:f92b6ef800e499660581efdabdf25d9d817a9d124eaf900924f0504e7e27e12d AS source
+FROM --platform=$BUILDPLATFORM golang:1.27.3-alpine3.24@sha256:b8c9b82affbbb82a020bbcf998dad2ba9516944ac7e883524642a481a9505e9c AS source
 ARG TARGETOS
 ARG TARGETARCH
 ARG VERSION=dev
@@ -66,7 +66,7 @@ COPY ${TARGETPLATFORM}/touchmark /out/touchmark
 
 FROM ${BINARY} AS binary
 
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
 ARG VERSION=dev
 ARG COMMIT=
 ARG DATE=