diff --git a/Dockerfile b/Dockerfile
index 5c0ba4e..6c59f8b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,7 +5,7 @@
 #
 # The app is deliberately insecure. Publish the port on 127.0.0.1 only, as
 # above, and never serve it from a domain you care about.
-FROM python:3.13-slim@sha256:70729b46c69b4f1e97c4822c1af3df53a1476cf5ddc6c087c0c10bc3a5678c2f
+FROM python:3.14-slim@sha256:a2b82f3c48559aa0a8446d9af49826b6e2b2016f4cd2afabfe6013ec53729170
 
 WORKDIR /app
 COPY . .