diff --git a/base/Dockerfile b/base/Dockerfile
index 4638bc1..ea82c11 100644
--- a/base/Dockerfile
+++ b/base/Dockerfile
@@ -1,4 +1,4 @@
-ARG BUILD_FROM=alpine:3.19.1
+ARG BUILD_FROM=alpine:3.20.0
 # hadolint ignore=DL3006
 FROM ${BUILD_FROM}
 
@@ -34,19 +34,19 @@ RUN \
     \
     && apk add --no-cache --virtual .build-dependencies \
         tar=1.35-r2 \
-        xz=5.4.5-r0 \
+        xz=5.6.1-r3 \
     \
     && apk add --no-cache \
-        libcrypto3=3.1.5-r0 \
-        libssl3=3.1.5-r0 \
-        musl-utils=1.2.4_git20230717-r4 \
-        musl=1.2.4_git20230717-r4 \
+        libcrypto3=3.3.0-r2 \
+        libssl3=3.3.0-r2 \
+        musl-utils=1.2.5-r0 \
+        musl=1.2.5-r0 \
     \
     && apk add --no-cache \
-        bash=5.2.21-r0 \
-        curl=8.5.0-r0 \
+        bash=5.2.26-r0 \
+        curl=8.7.1-r0 \
         jq=1.7.1-r0 \
-        tzdata=2024a-r0 \
+        tzdata=2024a-r1 \
     \
     && S6_ARCH="${BUILD_ARCH}" \
     && if [ "${BUILD_ARCH}" = "i386" ]; then S6_ARCH="i686"; \
diff --git a/base/build.yaml b/base/build.yaml
index 0fd1806..4507731 100644
--- a/base/build.yaml
+++ b/base/build.yaml
@@ -1,9 +1,9 @@
 ---
 build_from:
-  aarch64: arm64v8/alpine:3.19.1
-  amd64: amd64/alpine:3.19.1
-  armhf: arm32v6/alpine:3.19.1
-  armv7: arm32v7/alpine:3.19.1
-  i386: i386/alpine:3.19.1
+  aarch64: arm64v8/alpine:3.20.0
+  amd64: amd64/alpine:3.20.0
+  armhf: arm32v6/alpine:3.20.0
+  armv7: arm32v7/alpine:3.20.0
+  i386: i386/alpine:3.20.0
 codenotary:
   signer: codenotary@frenck.dev