diff --git a/.woodpecker/docs.yml b/.woodpecker/docs.yml
index 0c5eda845..61d3bf884 100644
--- a/.woodpecker/docs.yml
+++ b/.woodpecker/docs.yml
@@ -62,7 +62,7 @@ steps:
   # TODO: add step to remove preview again after PR is closed (waiting for #286)
 
   deploy:
-    image: docker.io/alpine:3.18
+    image: docker.io/alpine:3.19
     secrets:
       - BOT_PRIVATE_KEY
     commands:
diff --git a/docker/Dockerfile.agent.alpine.multiarch b/docker/Dockerfile.agent.alpine.multiarch
index c0296453a..f656d01af 100644
--- a/docker/Dockerfile.agent.alpine.multiarch
+++ b/docker/Dockerfile.agent.alpine.multiarch
@@ -7,7 +7,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
     --mount=type=cache,target=/go/pkg \
     make build-agent
 
-FROM docker.io/alpine:3.18
+FROM docker.io/alpine:3.19
 # renovate: datasource=repology depName=alpine_3_18/ca-certificates versioning=loose
 ENV CA_CERTIFICATES_VERSION="20230506-r0"
 RUN apk add -U --no-cache ca-certificates=${CA_CERTIFICATES_VERSION}
diff --git a/docker/Dockerfile.cli.alpine.multiarch b/docker/Dockerfile.cli.alpine.multiarch
index 4055474e5..59af4c88c 100644
--- a/docker/Dockerfile.cli.alpine.multiarch
+++ b/docker/Dockerfile.cli.alpine.multiarch
@@ -7,7 +7,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
     --mount=type=cache,target=/go/pkg \
     make build-cli
 
-FROM docker.io/alpine:3.18
+FROM docker.io/alpine:3.19
 # renovate: datasource=repology depName=alpine_3_18/ca-certificates versioning=loose
 ENV CA_CERTIFICATES_VERSION="20230506-r0"
 RUN apk add -U --no-cache ca-certificates=${CA_CERTIFICATES_VERSION}
diff --git a/docker/Dockerfile.server.alpine.multiarch b/docker/Dockerfile.server.alpine.multiarch
index b518ce68a..a608a7cfa 100644
--- a/docker/Dockerfile.server.alpine.multiarch
+++ b/docker/Dockerfile.server.alpine.multiarch
@@ -1,4 +1,4 @@
-FROM docker.io/alpine:3.18
+FROM docker.io/alpine:3.19
 
 # renovate: datasource=repology depName=alpine_3_18/ca-certificates versioning=loose
 ENV CA_CERTIFICATES_VERSION="20230506-r0"