diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index d230cd9381896f..871834b1ed5182 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,17 +5,17 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:7.19.0@sha256:fbd632c25c7252778aff27d03e0ae7f58e01e5903c64a0eed177daf4078d0f15 AS slim-base
+FROM ghcr.io/renovatebot/base-image:7.21.2@sha256:f85ded0db8ca007ab4621ee5740b50a3c21da7d4f78d6b38db9fe7d179c3105c AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:7.18.2-full@sha256:8bbbcc3606bd3cb4ebac702350ca193173049f469d317944ef0fb47bcae9ff64 AS full-base
+FROM ghcr.io/renovatebot/base-image:7.21.2-full@sha256:18fa60d94230ce3e689563ac7796ddabaf87d321c820f9f06d288f816700034f AS full-base
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:7.19.0@sha256:fbd632c25c7252778aff27d03e0ae7f58e01e5903c64a0eed177daf4078d0f15 AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:7.21.2@sha256:f85ded0db8ca007ab4621ee5740b50a3c21da7d4f78d6b38db9fe7d179c3105c AS build
 
 # We want a specific node version here
 # renovate: datasource=node-version