diff --git a/Dockerfile b/Dockerfile
index dd0162a..6b6f779 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Zola publishes no :latest tag; bump the pin manually (flake.nix tracks nixpkgs separately).
-FROM ghcr.io/getzola/zola:v0.22.1 AS build
+FROM ghcr.io/getzola/zola:v0.23.6 AS build
 
 COPY . /project
 WORKDIR /project