diff --git a/windows/Dockerfile b/windows/Dockerfile
index 73a2cf5..e6e6039 100644
--- a/windows/Dockerfile
+++ b/windows/Dockerfile
@@ -2,7 +2,7 @@
 
 # One Debian 12-built LLVM cohort serves Ubuntu and portable consumers. The
 # bootstrap is build-only; every owned dependency uses the resulting Clang.
-FROM debian:bookworm-slim@sha256:7c7b2c966bc9ee8cedfeef67e0e279108992c77681fa595db4a9d65c06ccc587 AS llvm-toolchain
+FROM debian:bookworm-slim@sha256:734a72b3d6142a71993b4bc580ca01d8ca687f77a2c422d96a961d3376b179bc AS llvm-toolchain
 ARG TARGETARCH
 ARG LLVM_BUILD_JOBS=2
 ENV DEBIAN_FRONTEND=noninteractive