diff --git a/Dockerfile.test b/Dockerfile.test
index 6490f49..8334f6b 100644
--- a/Dockerfile.test
+++ b/Dockerfile.test
@@ -9,7 +9,7 @@ RUN [ "go", "test", "-v", "./internal/cli/...", "-run", "TestGenerate_InstallDeb
 
 # This line also determines the golang version used for GitHub Actions CI
 # Use the qualified image name, so Dependabot treats this separate from "golang" above.
-FROM docker.io/library/golang:1.21.3-alpine AS apk
+FROM docker.io/library/golang:1.21.4-alpine AS apk
 ENV CGO_ENABLED=0
 WORKDIR /app
 COPY go.mod .