diff --git a/templates/compose.telemetry.yml b/templates/compose.telemetry.yml
index 6efb86d..b8ddbf7 100644
--- a/templates/compose.telemetry.yml
+++ b/templates/compose.telemetry.yml
@@ -38,7 +38,7 @@ services:
     logging: *default-logging
 
   alloy:
-    image: grafana/alloy:v1.21.2@sha256:89a5a320168387336b9ac3c850609c3ba7757eadd4ae5f1d819deb35e9854b18
+    image: grafana/alloy:v1.21.3@sha256:8ab871206bd2d8f89277f53abffee5f452a293980788d52f85fa183a87a505a4
     restart: unless-stopped
     # Root to read root-only files under the host mounts below. The Docker API is
     # behind the proxy, so root here does not imply control of the daemon.