diff --git a/services/games/Dockerfile b/services/games/Dockerfile
index ad26225..c158c54 100644
--- a/services/games/Dockerfile
+++ b/services/games/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/games ./services/games
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/games /usr/local/bin/games
 ENTRYPOINT ["/usr/local/bin/games"]
diff --git a/services/gateway/Dockerfile b/services/gateway/Dockerfile
index bb81fa5..5816d47 100644
--- a/services/gateway/Dockerfile
+++ b/services/gateway/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/gateway ./services/gateway
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/gateway /usr/local/bin/gateway
 ENTRYPOINT ["/usr/local/bin/gateway"]
diff --git a/services/github/Dockerfile b/services/github/Dockerfile
index a909052..702172b 100644
--- a/services/github/Dockerfile
+++ b/services/github/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/github ./services/github
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/github /usr/local/bin/github
 ENTRYPOINT ["/usr/local/bin/github"]
diff --git a/services/home/Dockerfile b/services/home/Dockerfile
index 0efbae1..40a9752 100644
--- a/services/home/Dockerfile
+++ b/services/home/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/home ./services/home
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/home /usr/local/bin/home
 ENTRYPOINT ["/usr/local/bin/home"]
diff --git a/services/notes/Dockerfile b/services/notes/Dockerfile
index c425577..66e013f 100644
--- a/services/notes/Dockerfile
+++ b/services/notes/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/notes ./services/notes
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/notes /usr/local/bin/notes
 ENTRYPOINT ["/usr/local/bin/notes"]
diff --git a/services/notify/Dockerfile b/services/notify/Dockerfile
index 395cb8c..805d422 100644
--- a/services/notify/Dockerfile
+++ b/services/notify/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/notify ./services/notify
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/notify /usr/local/bin/notify
 ENTRYPOINT ["/usr/local/bin/notify"]
diff --git a/services/nudge/Dockerfile b/services/nudge/Dockerfile
index 2214784..a295158 100644
--- a/services/nudge/Dockerfile
+++ b/services/nudge/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/nudge ./services/nudge
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/nudge /usr/local/bin/nudge
 ENTRYPOINT ["/usr/local/bin/nudge"]
diff --git a/services/pulls/Dockerfile b/services/pulls/Dockerfile
index 38c8580..c85e2df 100644
--- a/services/pulls/Dockerfile
+++ b/services/pulls/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/pulls ./services/pulls
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/pulls /usr/local/bin/pulls
 ENTRYPOINT ["/usr/local/bin/pulls"]
diff --git a/services/time/Dockerfile b/services/time/Dockerfile
index c554726..a5d55d8 100644
--- a/services/time/Dockerfile
+++ b/services/time/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/time ./services/time
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/time /usr/local/bin/time
 ENTRYPOINT ["/usr/local/bin/time"]
diff --git a/services/todos/Dockerfile b/services/todos/Dockerfile
index 9103083..58523c3 100644
--- a/services/todos/Dockerfile
+++ b/services/todos/Dockerfile
@@ -10,6 +10,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/todos ./services/todos
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/todos /usr/local/bin/todos
 ENTRYPOINT ["/usr/local/bin/todos"]
diff --git a/services/web/Dockerfile b/services/web/Dockerfile
index 79adb11..cf0aa1d 100644
--- a/services/web/Dockerfile
+++ b/services/web/Dockerfile
@@ -23,6 +23,6 @@ RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache
     CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH \
     go build -trimpath -ldflags="-s -w" -o /out/web ./services/web
 
-FROM gcr.io/distroless/static-debian13:nonroot@sha256:18f4cc26c9ffa7f20a359298be7deadac5c607c8e03a02b8119f1a5fc2f82c99
+FROM gcr.io/distroless/static-debian13:nonroot@sha256:25ac8f0c3b2334a9eb05452266bd4697864a8c8ef0ef71e5e6480d7f92868329
 COPY --from=build /out/web /usr/local/bin/web
 ENTRYPOINT ["/usr/local/bin/web"]