diff --git a/Dockerfile b/Dockerfile
index 311dd51a..468c3a25 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,7 +15,7 @@
 # Stage 1: Build the release binary
 # ---------------------------------------------------------------------------
 # Base images pinned by tag and digest; refresh both together.
-FROM rust:1.99-trixie@sha256:931c2c0531a8b143e044f0f3914dfe802f15bb3d1955f0b657e9359327ac2ffc AS builder
+FROM rust:1.99-trixie@sha256:8a4e90c7946b74626488b1446f712c0fe0ed1a596cbd3d871684bc9c5433ae07 AS builder
 
 # Install build dependencies for aws-lc-rs (used by rustls).
 RUN apt-get update && apt-get install -y --no-install-recommends \