diff --git a/tests/docker/render-config/Dockerfile b/tests/docker/render-config/Dockerfile
index f49e84d..7f3651c 100644
--- a/tests/docker/render-config/Dockerfile
+++ b/tests/docker/render-config/Dockerfile
@@ -1,5 +1,5 @@
 # Pinned to the digest of hashicorp/terraform:1.14.3 for supply-chain integrity; tag kept for readability: 1.14.3
-FROM hashicorp/terraform:1.15.9@sha256:fd5debae63188975d6febc6aa5bd1a982a588f55e4a4ddb7de28be923f250456
+FROM hashicorp/terraform:1.16.2@sha256:c3308fcbb530627c102c4c4b993e226b202429084328c3cc505cc2a69342e883
 
 # Used to robustly extract the cfg from `terraform show -json` without brittle heredoc parsing.
 RUN apk add --no-cache jq