diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index b9019d107eea8546eda30df2de7ca0766caf9529..b33d16dded277f04423f0a75a423e318b981bcb2 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,17 +5,17 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:7.28.4@sha256:674b88af9f69e75ebd80ec7df8d0226c69a49841a664ad5fea8517d058306df8 AS slim-base
+FROM ghcr.io/renovatebot/base-image:7.28.6@sha256:60e828cd6a232d555837a71c7f13fdb19088bc947a84e6c211ead294177e3cca AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:7.28.4-full@sha256:5a05969f4c35172d64b8e12a291efd2e5030b90f68b800c7622c51f32deaf2ba AS full-base
+FROM ghcr.io/renovatebot/base-image:7.28.6-full@sha256:5f09e5aa69fc4429bc20ec3e61223808aea83cb53bf4100ae564f18475de0bcb AS full-base
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:7.28.4@sha256:674b88af9f69e75ebd80ec7df8d0226c69a49841a664ad5fea8517d058306df8 AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:7.28.6@sha256:60e828cd6a232d555837a71c7f13fdb19088bc947a84e6c211ead294177e3cca AS build
 
 # We want a specific node version here
 # renovate: datasource=node-version