diff --git a/Dockerfile b/Dockerfile
index 6f6b535..cb9da8c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,7 +5,7 @@
 # non-root user and serves HTTP on port 3000, matching deploy/deployment.yaml's
 # securityContext (runAsNonRoot, readOnlyRootFilesystem) and its liveness/readiness
 # probes. Replace it with your stack's (typically multi-stage) build.
-FROM python:3.13-alpine
+FROM python:3.14.5-alpine
 WORKDIR /app
 RUN printf '<!doctype html><title>gitops-tenant-template</title><h1>Replace this placeholder with your app.</h1>\n' > index.html
 EXPOSE 3000
