diff --git a/src/docker.ts b/src/docker.ts
index 61708f42b53..49eefb37f2a 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '25.21.1-slim';
+  readonly tag = '25.21.3-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {