diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ecdc636..a1c11cd 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -46,7 +46,7 @@ repos:
 
   # Linter and formatter
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.9
+    rev: v0.14.10
     hooks:
       - id: ruff
         args:
@@ -62,7 +62,7 @@ repos:
 
   # Type linter
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.19.0
+    rev: v1.19.1
     hooks:
       - id: mypy
         args:
@@ -85,6 +85,6 @@ repos:
 
   # renovate.json validator
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 42.52.8
+    rev: 42.64.1
     hooks:
       - id: renovate-config-validator
diff --git a/Dockerfile b/Dockerfile
index bc1a675..561b681 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM quay.io/fedora/python-313:20251210@sha256:72bfab50b9d57212473c8b0cab6b1a0b8098154d4d3fb0cfbc0e00f7c24102b4 AS builder
+FROM quay.io/fedora/python-313:20251217@sha256:553c80e3c7174e24a6e37ecdd2e9498aab99d2148d8624a7b6da8ae70de6dffc AS builder
 
 # builder should use root to install/create all files
 USER root
diff --git a/docker-compose.yml b/docker-compose.yml
index 69db7ac..6e4af94 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -35,7 +35,7 @@ services:
       - 127.0.0.1:9125:9125  # statsd
 
   resultsdb-db: &resultsdb-db
-    image: docker.io/library/postgres:18.1-alpine@sha256:eca6fb2d91fda290eb8cfb8ba53dd0dcbf3508a08011e30adb039ea7c8e1e9f2
+    image: docker.io/library/postgres:18.1-alpine@sha256:b40d931bd0e7ce6eecc59a5a6ac3b3c04a01e559750e73e7086b6dbd7f8bf545
     restart: always
     env_file: ["docker/resultsdb-db.env"]
     healthcheck: