diff --git a/Dockerfile b/Dockerfile
index d512e71..614d963 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@ RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags='-s -w' -o /out/proxyar
 
 # ---- Runtime stage ----
 # alpine:latest 会随上游漂移导致不可复现构建; 固定 minor 版本。
-FROM alpine:3.21
+FROM alpine:3.24
 
 RUN apk --no-cache add ca-certificates wget && \
     addgroup -g 1001 -S appgroup && \