diff --git a/base/Dockerfile b/base/Dockerfile
index f52ff09..d96ce88 100644
--- a/base/Dockerfile
+++ b/base/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.23@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659
+FROM alpine:3.23@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
 
 ARG \
     TARGETARCH \
@@ -13,7 +13,7 @@ ARG \
     # renovate: datasource=repology depName=alpine_3_23/gnupg
     GNUPG_VERSION=2.4.9-r0 \
     # renovate: datasource=repology depName=alpine_3_23/go
-    GO_VERSION=1.25.7-r0 \
+    GO_VERSION=1.25.9-r0 \
     # renovate: datasource=repology depName=alpine_3_23/gzip
     GZIP_VERSION=1.14-r2 \
     # renovate: datasource=repology depName=alpine_3_23/jq
@@ -23,7 +23,7 @@ ARG \
     # renovate: datasource=repology depName=alpine_3_23/netcat-openbsd
     NETCAT_OPENBSD_VERSION=1.234.1-r0 \
     # renovate: datasource=repology depName=alpine_3_23/openssl
-    OPENSSL_VERSION=3.5.5-r0 \
+    OPENSSL_VERSION=3.5.6-r0 \
     # renovate: datasource=repology depName=alpine_3_23/patch
     PATCH_VERSION=2.8-r0 \
     # renovate: datasource=repology depName=alpine_3_23/procps-ng
@@ -31,9 +31,9 @@ ARG \
     # renovate: datasource=repology depName=alpine_3_23/shadow
     SHADOW_VERSION=4.18.0-r0 \
     # renovate: datasource=repology depName=alpine_3_23/util-linux
-    UTIL_LINUX_VERSION=2.41.2-r0 \
+    UTIL_LINUX_VERSION=2.41.4-r0 \
     # renovate: datasource=repology depName=alpine_3_23/yq-go
-    YQ_VERSION=4.49.2-r3
+    YQ_VERSION=4.49.2-r5
 
 RUN --mount=type=cache,id=base-apk-${TARGETARCH},sharing=locked,target=/var/cache/apk \
     ln -s /var/cache/apk /etc/apk/cache && \