diff --git a/Dockerfile b/Dockerfile
index 9eb115ce..8d8b1962 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -74,7 +74,7 @@ RUN zig build ${DISTRIBUTION} -Dcpu=baseline -Doptimize=ReleaseFast \
 # =============================================================================
 # Runtime stage - minimal Alpine image
 # =============================================================================
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
 
 # Upgrade base packages to get security fixes (e.g. openssl) that are newer
 # than the pinned image. Install runtime dependencies.
diff --git a/lambda/docker-compose.s3-dump.yml b/lambda/docker-compose.s3-dump.yml
index bd695591..059b0c3b 100644
--- a/lambda/docker-compose.s3-dump.yml
+++ b/lambda/docker-compose.s3-dump.yml
@@ -7,7 +7,7 @@
 # lambda-test with the dump-all policy (s3-dump extension) pointing at RustFS.
 services:
   rustfs:
-    image: rustfs/rustfs:1.0.0@sha256:8cc9801755448b71a786705ce76692c77e14936cccd87cf2fc31842e58f4d1ff
+    image: rustfs/rustfs:1.0.4@sha256:ed9210d6411d77ffceb70d94b964a3cb7d225983368bc25bebe01e995293dcc2
     environment:
       RUSTFS_ACCESS_KEY: rustfsadmin
       RUSTFS_SECRET_KEY: rustfsadmin