diff --git a/Dockerfile.apisix b/Dockerfile.apisix
index 0d741b73e..108570469 100644
--- a/Dockerfile.apisix
+++ b/Dockerfile.apisix
@@ -16,7 +16,7 @@ RUN wget -q -O hivemind.gz https://github.com/DarthSim/hivemind/releases/downloa
 # get daprd
 RUN wget -q https://github.com/dapr/dapr/releases/download/v$DAPR_VERSION/daprd_linux_amd64.tar.gz -O - | tar -xzvf - daprd
 
-FROM apache/apisix:3.11.0-debian
+FROM apache/apisix:3.14.1-debian
 USER root
 ENV DAPR_APP_ID=gateway
 # DAPR_HTTP_READ_BUFFER_SIZE: default 4KB
diff --git a/Dockerfile.service b/Dockerfile.service
index 998cf01a1..26dfc1539 100644
--- a/Dockerfile.service
+++ b/Dockerfile.service
@@ -4,7 +4,7 @@
 #
 # pull deps
 #
-FROM debian:12.8 AS deps
+FROM debian:12.12 AS deps
 
 
 # renovate: datasource=github-releases depName=golang-migrate/migrate
@@ -21,7 +21,7 @@ RUN wget -q https://github.com/golang-migrate/migrate/releases/download/v$MIGRAT
 # builder builds a go service
 # the build args SERVICE and VERSION must be set!
 
-FROM golang:1.23-bookworm AS builder
+FROM golang:1.25-bookworm AS builder
 
 #
 # build spice helper (for migrations)
@@ -59,7 +59,7 @@ RUN mkdir -p migrations
 
 RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-X main.Version=${VERSION}" -a -o app .
 
-FROM alpine:3.21.0 AS production
+FROM alpine:3.23.0 AS production
 
 RUN apk update && apk add postgresql-client --no-cache
 
diff --git a/Dockerfile.standalone b/Dockerfile.standalone
index 4264ae330..7e86019e4 100644
--- a/Dockerfile.standalone
+++ b/Dockerfile.standalone
@@ -4,7 +4,7 @@
 # builder builds a go service
 # the build args SERVICE and VERSION must be set!
 
-FROM golang:1.23-bookworm AS builder
+FROM golang:1.25-bookworm AS builder
 
 #
 # build spice helper (for migrations)
@@ -42,7 +42,7 @@ RUN mkdir -p migrations
 
 RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-X main.Version=${VERSION}" -a -o app .
 
-FROM debian:12.8 AS deps
+FROM debian:12.12 AS deps
 
 # renovate: datasource=github-releases depName=DarthSim/hivemind
 ARG HIVEMIND_VERSION=1.1.0
@@ -65,7 +65,7 @@ RUN wget -q https://github.com/golang-migrate/migrate/releases/download/v$MIGRAT
 # get daprd
 RUN wget -q https://github.com/dapr/dapr/releases/download/v$DAPR_VERSION/daprd_linux_amd64.tar.gz -O - | tar -xzvf - daprd
 
-FROM alpine:3.21.0 AS production
+FROM alpine:3.23.0 AS production
 
 RUN apk update && apk add postgresql-client --no-cache
 
diff --git a/images/dev-go/Dockerfile b/images/dev-go/Dockerfile
index c85f15c48..9a013708b 100644
--- a/images/dev-go/Dockerfile
+++ b/images/dev-go/Dockerfile
@@ -5,7 +5,7 @@
 
 # based on the debian 12 ("bookworm") go image
 # for now this only builds x86_64 images (TODO)
-FROM golang:1.23-bookworm
+FROM golang:1.25-bookworm
 
 # appearently this is not set by the go image
 ENV GOROOT="/usr/local/go"