diff --git a/.woodpecker/docs.yaml b/.woodpecker/docs.yaml
index 979fb4f2a63..df0cb38750c 100644
--- a/.woodpecker/docs.yaml
+++ b/.woodpecker/docs.yaml
@@ -1,7 +1,7 @@
 variables:
   - &golang_image 'docker.io/golang:1.23'
   - &node_image 'docker.io/node:23-alpine'
-  - &alpine_image 'docker.io/alpine:3.20'
+  - &alpine_image 'docker.io/alpine:3.21'
   - path: &when_path
       - 'docs/**'
       - '.woodpecker/docs.yaml'
diff --git a/docker/Dockerfile.agent.alpine.multiarch b/docker/Dockerfile.agent.alpine.multiarch
index 74ece6be9f9..3ce6b783fe6 100644
--- a/docker/Dockerfile.agent.alpine.multiarch
+++ b/docker/Dockerfile.agent.alpine.multiarch
@@ -7,7 +7,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
     --mount=type=cache,target=/go/pkg \
     make build-agent
 
-FROM docker.io/alpine:3.20
+FROM docker.io/alpine:3.21
 RUN apk add -U --no-cache ca-certificates
 ENV GODEBUG=netdns=go
 # Internal setting do NOT change! Signals that woodpecker is running inside a container
diff --git a/docker/Dockerfile.cli.alpine.multiarch b/docker/Dockerfile.cli.alpine.multiarch
index de5fd0688cf..3768c0373cf 100644
--- a/docker/Dockerfile.cli.alpine.multiarch
+++ b/docker/Dockerfile.cli.alpine.multiarch
@@ -7,7 +7,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
     --mount=type=cache,target=/go/pkg \
     make build-cli
 
-FROM docker.io/alpine:3.20
+FROM docker.io/alpine:3.21
 WORKDIR /woodpecker
 
 RUN apk add -U --no-cache ca-certificates
diff --git a/docker/Dockerfile.server.alpine.multiarch b/docker/Dockerfile.server.alpine.multiarch
index 094a9fe4dc3..ae7d5fc3858 100644
--- a/docker/Dockerfile.server.alpine.multiarch
+++ b/docker/Dockerfile.server.alpine.multiarch
@@ -1,4 +1,4 @@
-FROM docker.io/alpine:3.20
+FROM docker.io/alpine:3.21
 
 ARG TARGETOS TARGETARCH
 RUN apk add -U --no-cache ca-certificates