diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 83036ab..16285bf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -62,7 +62,7 @@ jobs:
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v9
         with:
-          version: v2.11.3
+          version: v2.11.4
 
   coverage:
     name: Coverage
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 25555e7..8283150 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,11 +12,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
@@ -32,7 +32,7 @@ jobs:
     needs: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Docker meta
         id: meta
@@ -45,7 +45,7 @@ jobs:
             type=raw,value=latest
 
       - uses: docker/setup-qemu-action@v4
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@v4
 
       - uses: docker/login-action@v4
         with:
diff --git a/DOCKERHUB.md b/DOCKERHUB.md
index 206138d..dfa96c4 100644
--- a/DOCKERHUB.md
+++ b/DOCKERHUB.md
@@ -119,7 +119,7 @@ docker exec unarr unarr doctor
 
 ## Image Details
 
-- **Base image:** Alpine 3.21
+- **Base image:** Alpine 3.22
 - **User:** `unarr` (UID 1000, GID 1000)
 - **Entrypoint:** `unarr start` (daemon mode)
 - **Read-only filesystem** — only mounted volumes are writable
diff --git a/Dockerfile b/Dockerfile
index 900572d..69dbcc7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@ ARG VERSION=dev
 RUN CGO_ENABLED=0 go build -ldflags="-s -w -X github.com/torrentclaw/unarr/internal/cmd.Version=${VERSION}" -trimpath -o /unarr ./cmd/unarr/
 
 # ---- Runtime stage ----
-FROM alpine:3.21
+FROM alpine:3.22
 
 RUN apk upgrade --no-cache && \
     apk add --no-cache ca-certificates tzdata