diff --git a/Dockerfile b/Dockerfile
index f8c9789..c85c370 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,7 +33,7 @@ ENV CGO_ENABLED=1
 RUN go build -trimpath -ldflags="-s -w" -o /out/taskmgr ./cmd/taskmgr
 
 # ─── runtime stage ────────────────────────────────────────────
-FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818
+FROM debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241
 
 RUN apt-get update \
  && apt-get install -y --no-install-recommends \