diff --git a/Dockerfile.standalone b/Dockerfile.standalone
index e772f56..ab36c57 100644
--- a/Dockerfile.standalone
+++ b/Dockerfile.standalone
@@ -14,7 +14,7 @@
 # Allow using a pre-built postgres-builder image for caching
 ARG POSTGRES_BUILDER_IMAGE=""
 ARG PG_VERSION=17.2
-ARG ALPINE_VERSION=3.22
+ARG ALPINE_VERSION=3.23
 
 # Build stage for minimal PostgreSQL
 FROM alpine:${ALPINE_VERSION} AS postgres-builder-build
@@ -112,7 +112,7 @@ RUN uv sync --group dev && \
     du -sh .venv
 
 # Final stage - minimal runtime
-FROM alpine:3.22
+FROM alpine:3.23
 
 # S6 Overlay version
 ARG S6_OVERLAY_VERSION=3.2.0.2
diff --git a/docker-compose.tck.yml b/docker-compose.tck.yml
index f596703..a3b104a 100644
--- a/docker-compose.tck.yml
+++ b/docker-compose.tck.yml
@@ -10,7 +10,7 @@ services:
   
   # MongoDB for conformance suite storage
   tck-mongodb:
-    image: mongo:8.2.1
+    image: mongo:8.2.6
     container_name: tck-mongodb
     volumes:
       - tck_mongo_data:/data/db
@@ -25,7 +25,7 @@ services:
   # Conformance suite server (option 1: use pre-built JAR if available)
   # For fresh checkout, use: cd tck && make init
   tck-server:
-    image: eclipse-temurin:25-jre
+    image: eclipse-temurin:25.0.2_10-jre
     container_name: tck-server
     ports:
       - "8443:8443"
diff --git a/tck/conformance-suite-build/Dockerfile b/tck/conformance-suite-build/Dockerfile
index c29f084..c9d94f2 100644
--- a/tck/conformance-suite-build/Dockerfile
+++ b/tck/conformance-suite-build/Dockerfile
@@ -10,7 +10,7 @@ RUN git clone https://gitlab.com/openid/conformance-suite.git .
 RUN mvn clean package -B -DskipTests=true
 
 # Runtime stage
-FROM eclipse-temurin:25-jre
+FROM eclipse-temurin:25.0.2_10-jre
 
 COPY --from=builder /build/target/fapi-test-suite.jar /server/fapi-test-suite.jar
 
diff --git a/tck/conformance-suite-build/Dockerfile.multi b/tck/conformance-suite-build/Dockerfile.multi
index 07e1d2b..4bd8487 100644
--- a/tck/conformance-suite-build/Dockerfile.multi
+++ b/tck/conformance-suite-build/Dockerfile.multi
@@ -14,7 +14,7 @@ COPY scripts ./scripts
 RUN mvn clean package -B -DskipTests=true
 
 # Stage 2: Final runtime image
-FROM eclipse-temurin:25-jre
+FROM eclipse-temurin:25.0.2_10-jre
 
 # Create non-root user for security
 RUN groupadd -r conformance && useradd -r -g conformance conformance
diff --git a/tck/conformance-suite-build/docker-compose.yml b/tck/conformance-suite-build/docker-compose.yml
index 21752e4..49009cc 100644
--- a/tck/conformance-suite-build/docker-compose.yml
+++ b/tck/conformance-suite-build/docker-compose.yml
@@ -6,7 +6,7 @@ version: '3.8'
 services:
   # MongoDB for conformance suite storage
   tck-mongodb:
-    image: mongo:8.2.1
+    image: mongo:8.2.6
     container_name: tck-mongodb
     volumes:
       - tck_mongo_data:/data/db
diff --git a/tck/docker-compose-tck-ci.yml b/tck/docker-compose-tck-ci.yml
index d65075a..15e2a5c 100644
--- a/tck/docker-compose-tck-ci.yml
+++ b/tck/docker-compose-tck-ci.yml
@@ -5,7 +5,7 @@ services:
   
   # MongoDB for conformance suite storage
   tck-mongodb:
-    image: mongo:8.2.1
+    image: mongo:8.2.6
     container_name: tck-mongodb
     volumes:
       - tck_mongo_data:/data/db
diff --git a/tck/docker-compose-tck.yml b/tck/docker-compose-tck.yml
index eaaaaa4..5317614 100644
--- a/tck/docker-compose-tck.yml
+++ b/tck/docker-compose-tck.yml
@@ -7,7 +7,7 @@ services:
   
   # MongoDB for conformance suite storage
   tck-mongodb:
-    image: mongo:8.2.1
+    image: mongo:8.2.6
     container_name: tck-mongodb
     volumes:
       - tck_mongo_data:/data/db
diff --git a/tck/docker/docker-compose-simple.yml b/tck/docker/docker-compose-simple.yml
index 5ec65b6..5e40942 100644
--- a/tck/docker/docker-compose-simple.yml
+++ b/tck/docker/docker-compose-simple.yml
@@ -3,7 +3,7 @@ version: '3.8'
 services:
   # MongoDB for conformance suite storage
   conformance-mongo:
-    image: mongo:8.2.1
+    image: mongo:8.2.6
     container_name: tck-conformance-mongo
     environment:
       MONGO_INITDB_ROOT_USERNAME: admin
@@ -21,7 +21,7 @@ services:
 
   # Conformance suite server (will use built JAR)
   conformance-server:
-    image: eclipse-temurin:25-jre
+    image: eclipse-temurin:25.0.2_10-jre
     container_name: tck-conformance-server
     volumes:
       - ../conformance-suite/target:/server