diff --git a/Dockerfile b/Dockerfile
index 83f2be8bb58..b599beec94a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -52,7 +52,7 @@ FROM docker.io/library/alpine:3.24 AS gitea
 
 EXPOSE 22 3000
 
-RUN apk --no-cache add \
+RUN apk --no-cache upgrade && apk --no-cache add \
     bash \
     ca-certificates \
     curl \
diff --git a/Dockerfile.rootless b/Dockerfile.rootless
index 4b10f517bdb..f18e1ade9ad 100644
--- a/Dockerfile.rootless
+++ b/Dockerfile.rootless
@@ -47,7 +47,7 @@ FROM docker.io/library/alpine:3.24 AS gitea-rootless
 
 EXPOSE 2222 3000
 
-RUN apk --no-cache add \
+RUN apk --no-cache upgrade && apk --no-cache add \
     bash \
     ca-certificates \
     dumb-init \