diff --git a/Dockerfile b/Dockerfile
index 311dd51a..9f1e4bbc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -43,7 +43,7 @@ RUN if [ -n "$STEALTH_VERSION" ]; then \
 # ---------------------------------------------------------------------------
 # Stage 2: Minimal Debian runtime
 # ---------------------------------------------------------------------------
-FROM debian:trixie-slim@sha256:62bd423aeee912639ca8ee681c2b762cb3e25137e0a92b20be455898a9f034ad
+FROM debian:trixie-slim@sha256:a72b4433de1cf7d6bae0c4cee74d0547f58601a643b3375f070c51600d63b6b2
 
 LABEL org.opencontainers.image.source="https://github.com/Olib-AI/StealthRelay"
 LABEL org.opencontainers.image.description="Zero-knowledge WebSocket relay server for E2E encrypted peer connections"