diff --git a/deployments/Dockerfile b/deployments/Dockerfile
index 4e42d68..c18fbd7 100644
--- a/deployments/Dockerfile
+++ b/deployments/Dockerfile
@@ -9,7 +9,7 @@ COPY . .
 RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w -X main.version=${VERSION}" -o codeforge ./cmd/codeforge
 
 # Stage 2: Runtime
-FROM alpine:3.20
+FROM alpine:3.24
 ARG CLAUDE_CODE_VERSION=2.1.215
 ARG CODEX_VERSION=0.104.0
 # bash: the claude CLI Bash tool refuses to run without a POSIX shell beyond busybox
diff --git a/deployments/Dockerfile.action b/deployments/Dockerfile.action
index 0aece87..53caf1c 100644
--- a/deployments/Dockerfile.action
+++ b/deployments/Dockerfile.action
@@ -11,7 +11,7 @@ COPY . .
 RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /codeforge-action ./cmd/codeforge-action
 
 # Runtime — minimal image with git + Node.js for CLI installation
-FROM alpine:3.21
+FROM alpine:3.24
 
 RUN apk add --no-cache git nodejs npm ca-certificates tzdata su-exec bash \
     && adduser -D -s /bin/bash -h /home/codeforge codeforge