diff --git a/docker/Dockerfile-app b/docker/Dockerfile-app
index 5e2b854..c515583 100644
--- a/docker/Dockerfile-app
+++ b/docker/Dockerfile-app
@@ -7,7 +7,7 @@ ENV UV_PYTHON_PREFERENCE=only-system \
 RUN --mount=type=cache,target=/root/.cache/uv,sharing=locked \
     uv sync --no-group dev
 
-FROM python:3.14-slim AS runtime
+FROM python:3.15-slim AS runtime
 LABEL authors="AM"
 
 RUN groupadd --gid 1000 appuser \
diff --git a/docker/Dockerfile-couchdb b/docker/Dockerfile-couchdb
index b1e256b..9ba4401 100644
--- a/docker/Dockerfile-couchdb
+++ b/docker/Dockerfile-couchdb
@@ -1,4 +1,4 @@
-FROM couchdb:3.5.2
+FROM couchdb:3.5.3
 
 # No ARG/ENV credentials here -- docker history --no-trunc leaked them in plaintext before; runtime-only now, see setup_couchdb.sh.
 COPY docker/setup_couchdb.sh setup_couchdb.sh