diff --git a/docker/python/Dockerfile b/docker/python/Dockerfile
index fbf27d9..a07c131 100644
--- a/docker/python/Dockerfile
+++ b/docker/python/Dockerfile
@@ -9,14 +9,14 @@ RUN GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build -o /go/bin/agent
 # bookworm, not bullseye: Debian 11 is past EOL and its security suite has
 # moved to archive, so `apt-get install git` here 404s — this stage no longer
 # builds at all on bullseye.
-FROM python:3.13-slim-bookworm AS pyspybuild
+FROM python:3.14-slim-bookworm AS pyspybuild
 # 0.4.2 is the first release that understands CPython 3.14. On 0.4.0 a 3.14
 # target fails with the misleading "No python processes found in process <pid>".
 RUN pip3 install py-spy==0.4.2  \
     && apt-get update && apt-get install -y git \
     && git clone https://github.com/brendangregg/FlameGraph
 
-FROM python:3.14.0-alpine
+FROM python:3.14.6-alpine
 RUN apk add --update --no-cache perl procps strace  \
     && mkdir -p /app/FlameGraph
 COPY --from=pyspybuild /FlameGraph /app/FlameGraph