diff --git a/docker/Dockerfile b/docker/Dockerfile
index 5754234c..26548b04 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,7 +1,7 @@
-# syntax=docker/dockerfile:1.12@sha256:93bfd3b68c109427185cd78b4779fc82b484b0b7618e36d0f104d4d801e66d25
-FROM ubuntu:noble-20241118.1@sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab as base
-ARG BASE_IMAGE_NAME=ubuntu:noble-20241118.1
-ARG BASE_IMAGE_DIGEST=sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab
+# syntax=docker/dockerfile:1.15@sha256:05e0ad437efefcf144bfbf9d7f728c17818408e6d01432d9e264ef958bbd52f3
+FROM ubuntu:noble-20250404@sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02 as base
+ARG BASE_IMAGE_NAME=ubuntu:noble-20250404
+ARG BASE_IMAGE_DIGEST=sha256:1e622c5f073b4f6bfad6632f2616c7f59ef256e96fe78bf6a595d1dc4376ac02
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/library/$BASE_IMAGE_NAME" \
@@ -15,17 +15,17 @@ ENV DEBIAN_FRONTEND noninteractive
 RUN --mount=type=cache,target=/var/cache/apt,id=apt_$TARGETARCH --mount=type=tmpfs,target=/var/lib/apt/lists \
     rm /etc/apt/apt.conf.d/docker-clean && \
     apt-get update && apt-get install -y --no-install-recommends \
-    python3.12=3.12.3-1ubuntu0.4 \
+    python3.12=3.12.3-1ubuntu0.5 \
     # renovate: srcname=python3.12
-    libpython3.12=3.12.3-1ubuntu0.4 \
+    libpython3.12=3.12.3-1ubuntu0.5 \
     # renovate: srcname=python3.12
-    python3.12-venv=3.12.3-1ubuntu0.4 \
+    python3.12-venv=3.12.3-1ubuntu0.5 \
     # renovate: srcname=python-pip
     python3-pip=24.0+dfsg-1ubuntu1.1 \
     # renovate: srcname=postgresql-16
-    libpq5=16.6-0ubuntu0.24.04.1 \
+    libpq5=16.8-0ubuntu0.24.04.1 \
     # renovate: srcname=postgresql-16
-    postgresql-client-16=16.6-0ubuntu0.24.04.1 \
+    postgresql-client-16=16.8-0ubuntu0.24.04.1 \
     curl=8.5.0-2ubuntu10.6 \
     # renovate: srcname=pcre3
     libpcre3=2:8.39-15build1 \
@@ -51,10 +51,10 @@ RUN --mount=type=cache,target=/var/cache/apt,id=apt_$TARGETARCH --mount=type=tmp
     apt-get update && apt-get install -y --no-install-recommends \
     build-essential=12.10ubuntu1 \
     # renovate: srcname=python3.12
-    python3.12-dev=3.12.3-1ubuntu0.4 \
+    python3.12-dev=3.12.3-1ubuntu0.5 \
     libpcre3-dev=2:8.39-15build1 \
     # renovate: srcname=postgresql-16
-    libpq-dev=16.6-0ubuntu0.24.04.1 \
+    libpq-dev=16.8-0ubuntu0.24.04.1 \
     # renovate: srcname=cairo
     libcairo2-dev=1.18.0-3build1 \
     libgirepository1.0-dev=1.80.1-1 \