diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index cffd7cc4f03f8a5c0e4550c3c5cd743125fa4809..90dc680814e8b23dfcb03f2f3700df9dd5685aa2 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,19 +5,19 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:9.38.5@sha256:2ebf261b680276ee6ba6b2323321026e67f2316eb813fb23c8db2037da977434 AS slim-base
+FROM ghcr.io/renovatebot/base-image:9.38.6@sha256:a3714418e1979ad8e1ae0098422a9a94cad47e3df044c0aaa22f4e839698ff72 AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:9.38.5-full@sha256:370085798d8ed1471bedd7b94f196223b7aa98c9dab4a518629d246ce2112a12 AS full-base
+FROM ghcr.io/renovatebot/base-image:9.38.6-full@sha256:0d6e6c2a057c73dcfe28aea1bde81c708a9c308a235b6eb8c09614eb8d6f9533 AS full-base
 
 ENV RENOVATE_BINARY_SOURCE=global
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.38.5@sha256:2ebf261b680276ee6ba6b2323321026e67f2316eb813fb23c8db2037da977434 AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.38.6@sha256:a3714418e1979ad8e1ae0098422a9a94cad47e3df044c0aaa22f4e839698ff72 AS build
 
 # We want a specific node version here
 # renovate: datasource=node-version