diff --git a/Dockerfile.migrator b/Dockerfile.migrator
index f2408754..5f54561e 100644
--- a/Dockerfile.migrator
+++ b/Dockerfile.migrator
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:72dd743782f2ae7e5476fd64f6a460045e3998dc862218b80e6944cba79a01b0
+FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:e1fc6e423f543119c406d24e2e687d67c569f18f04a37a8b0005d80ad0dcee80
 
 WORKDIR /app
 
diff --git a/Dockerfile.migrator.prod b/Dockerfile.migrator.prod
index d9fb2aa9..a1dce89f 100644
--- a/Dockerfile.migrator.prod
+++ b/Dockerfile.migrator.prod
@@ -22,7 +22,7 @@ ARG BUILD_CONFIGURATION=Release
 # resolve step in the build stage). An explicit --build-arg TARGET_RUNTIME=<rid> still wins.
 ARG TARGET_RUNTIME=
 
-FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:72dd743782f2ae7e5476fd64f6a460045e3998dc862218b80e6944cba79a01b0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:e1fc6e423f543119c406d24e2e687d67c569f18f04a37a8b0005d80ad0dcee80 AS build
 ARG BUILD_CONFIGURATION
 ARG TARGET_RUNTIME
 # Set automatically by BuildKit from the platform being built for; must be re-declared per stage to
@@ -98,7 +98,7 @@ RUN rid="$(cat /tmp/target-runtime)" && dotnet ef migrations bundle \
 # libgssapi-krb5-2 lets Npgsql negotiate GSSAPI cleanly (some Postgres hosts advertise it); without
 # it Npgsql logs a noisy `libgssapi_krb5.so.2: cannot open shared object file` before falling back to
 # password auth. Installing it keeps the migrator output clean and works against GSSAPI-capable hosts.
-FROM mcr.microsoft.com/dotnet/runtime-deps:10.0@sha256:53d7e74e5178092627d7f5d7aa7cb27eee50054885d99ee902014b3c11382efa AS final
+FROM mcr.microsoft.com/dotnet/runtime-deps:10.0@sha256:851e6e04fff95d33a02c725373dc0ac624734986f2dc9028887077347ecffa96 AS final
 RUN apt-get update \
     && apt-get install -y --no-install-recommends libgssapi-krb5-2 \
     && rm -rf /var/lib/apt/lists/*
diff --git a/Dockerfile.tests b/Dockerfile.tests
index f1f1da45..b6dc4cee 100644
--- a/Dockerfile.tests
+++ b/Dockerfile.tests
@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:72dd743782f2ae7e5476fd64f6a460045e3998dc862218b80e6944cba79a01b0
+FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:e1fc6e423f543119c406d24e2e687d67c569f18f04a37a8b0005d80ad0dcee80
 
 WORKDIR /app
 
diff --git a/src/AuthSystem/LotroKoniecDev.AuthSystem.API/Dockerfile b/src/AuthSystem/LotroKoniecDev.AuthSystem.API/Dockerfile
index c6fc00f1..361253a3 100644
--- a/src/AuthSystem/LotroKoniecDev.AuthSystem.API/Dockerfile
+++ b/src/AuthSystem/LotroKoniecDev.AuthSystem.API/Dockerfile
@@ -1,11 +1,11 @@
-FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:f1126d438ccc359f51cc6d4701a8deae513856cf10f5fe645d29ea6403dcac6b AS base
+FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:207cc51496778557731c81ff670333d8ade4a4fec22768fd1be8e78474a84ecf AS base
 RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
 USER $APP_UID
 WORKDIR /app
 EXPOSE 8080
 EXPOSE 8081
 
-FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:72dd743782f2ae7e5476fd64f6a460045e3998dc862218b80e6944cba79a01b0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:e1fc6e423f543119c406d24e2e687d67c569f18f04a37a8b0005d80ad0dcee80 AS build
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src
 
diff --git a/src/Frontend/LotroKoniecDev.Frontend/Dockerfile b/src/Frontend/LotroKoniecDev.Frontend/Dockerfile
index bdbee04f..9f0fbb8e 100644
--- a/src/Frontend/LotroKoniecDev.Frontend/Dockerfile
+++ b/src/Frontend/LotroKoniecDev.Frontend/Dockerfile
@@ -1,11 +1,11 @@
-FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:f1126d438ccc359f51cc6d4701a8deae513856cf10f5fe645d29ea6403dcac6b AS base
+FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:207cc51496778557731c81ff670333d8ade4a4fec22768fd1be8e78474a84ecf AS base
 RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
 USER $APP_UID
 WORKDIR /app
 EXPOSE 8080
 EXPOSE 8081
 
-FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:72dd743782f2ae7e5476fd64f6a460045e3998dc862218b80e6944cba79a01b0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:e1fc6e423f543119c406d24e2e687d67c569f18f04a37a8b0005d80ad0dcee80 AS build
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src
 
diff --git a/src/TranslationSystem/LotroKoniecDev.TranslationSystem.API/Dockerfile b/src/TranslationSystem/LotroKoniecDev.TranslationSystem.API/Dockerfile
index bd96ace0..1077da2d 100644
--- a/src/TranslationSystem/LotroKoniecDev.TranslationSystem.API/Dockerfile
+++ b/src/TranslationSystem/LotroKoniecDev.TranslationSystem.API/Dockerfile
@@ -1,11 +1,11 @@
-FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:f1126d438ccc359f51cc6d4701a8deae513856cf10f5fe645d29ea6403dcac6b AS base
+FROM mcr.microsoft.com/dotnet/aspnet:10.0@sha256:207cc51496778557731c81ff670333d8ade4a4fec22768fd1be8e78474a84ecf AS base
 RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
 USER $APP_UID
 WORKDIR /app
 EXPOSE 8080
 EXPOSE 8081
 
-FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:72dd743782f2ae7e5476fd64f6a460045e3998dc862218b80e6944cba79a01b0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:10.0@sha256:e1fc6e423f543119c406d24e2e687d67c569f18f04a37a8b0005d80ad0dcee80 AS build
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src