diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index 93e40ce02a86558..9d4a70b9f29537f 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,19 +5,19 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:9.4.4@sha256:929f57b34415175bdb70fd5dc9a03c4531fe40f441e4b141bca65f8ace32e9a8 AS slim-base
+FROM ghcr.io/renovatebot/base-image:9.5.1@sha256:aa71dbdd769095cb83bc0d5d775b908fc6b437c34ccd6ecda719ac57da88eab1 AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:9.4.3-full@sha256:9502eb0c36c823b0a2b24f083841ad9a69a150ff6d1fec68c5c81117a43e48a6 AS full-base
+FROM ghcr.io/renovatebot/base-image:9.5.1-full@sha256:a34a3b4748ea01faf199f136e9d4ad14ee66ac6e48515c378b5a7aa896018f85 AS full-base
 
 ENV RENOVATE_BINARY_SOURCE=global
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.4.4@sha256:929f57b34415175bdb70fd5dc9a03c4531fe40f441e4b141bca65f8ace32e9a8 AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.5.1@sha256:aa71dbdd769095cb83bc0d5d775b908fc6b437c34ccd6ecda719ac57da88eab1 AS build
 
 # We want a specific node version here
 # renovate: datasource=node-version