diff --git a/docker/docker-compose-traefik.yml b/docker/docker-compose-traefik.yml
index ccd8deb..7213ac7 100644
--- a/docker/docker-compose-traefik.yml
+++ b/docker/docker-compose-traefik.yml
@@ -176,7 +176,7 @@ services:
     restart: unless-stopped
 
   celery_flower:
-    image: mher/flower:2.1.0
+    image: mher/flower:2.2.0
     container_name: ahc-flower
     environment:
       - CELERY_BROKER_URL=${CELERY_BROKER_URL}
diff --git a/docker/docker-compose.cd.yml b/docker/docker-compose.cd.yml
index 3e08808..5561974 100644
--- a/docker/docker-compose.cd.yml
+++ b/docker/docker-compose.cd.yml
@@ -22,7 +22,7 @@ services:
 
   watchtower:
     # containrrr/watchtower archived 2025-12-17; nicholas-fedor/watchtower is the maintained fork, same label namespace and flags.
-    image: ghcr.io/nicholas-fedor/watchtower:1.22.1
+    image: ghcr.io/nicholas-fedor/watchtower:1.23.2
     # --rolling-restart disabled: this fork rejects it when monitored services have
     # dependency chains (celery_beat -> postgres_db/redis); plain restart is enough here.
     command: --label-enable --cleanup --interval 300 --scope ahc
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 4d4c768..75427c4 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -181,7 +181,7 @@ services:
     restart: unless-stopped
 
   celery_flower:
-    image: mher/flower:2.1.0
+    image: mher/flower:2.2.0
     ports:
       - "5555:5555"
     environment: