diff --git a/crates/vgi-bridge/Dockerfile b/crates/vgi-bridge/Dockerfile
index b77cb98..f2d60e5 100644
--- a/crates/vgi-bridge/Dockerfile
+++ b/crates/vgi-bridge/Dockerfile
@@ -11,7 +11,7 @@
 # Both base images are pinned by digest, as every action is pinned by commit
 # SHA; Dependabot keeps the pins current and CI refuses a FROM without one.
 
-FROM rust:1.98-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e AS build
+FROM rust:1.99-bookworm@sha256:e6f2cff35d0f309acf8433b4f05878ed77092602c5065cc81801177da0bb3a9c AS build
 WORKDIR /src
 # The TDK's keyring store links libdbus on Linux (dbus-secret-service), so the
 # build needs its headers and the runtime its shared library.