diff --git a/MODULE.bazel b/MODULE.bazel
index 5ed5014544..bcbc6d0031 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -18,7 +18,7 @@ bazel_dep(name = "platforms", version = "1.1.0")
 bazel_dep(name = "prometheus-cpp", version = "1.3.0.bcr.3", repo_name = "com_github_jupp0r_prometheus_cpp")
 bazel_dep(name = "protobuf", version = "36.2", repo_name = "com_google_protobuf")
 bazel_dep(name = "rapidyaml", version = "0.15.2")
-bazel_dep(name = "rules_cc", version = "0.2.26")
+bazel_dep(name = "rules_cc", version = "0.2.27")
 bazel_dep(name = "rules_foreign_cc", version = "0.16.0")
 bazel_dep(name = "rules_proto", version = "7.1.0")
 bazel_dep(name = "zlib", version = "1.3.2.bcr.2")
diff --git a/docker/Dockerfile.alpine-latest.base b/docker/Dockerfile.alpine-latest.base
index 4e5e88f891..98a9d67335 100644
--- a/docker/Dockerfile.alpine-latest.base
+++ b/docker/Dockerfile.alpine-latest.base
@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-ARG BASE_IMAGE=alpine:3.24.3@sha256:b3413572228e34bd1c9245f5565e6cd127005655e8a7899aef33d8e83255c9e6
+ARG BASE_IMAGE=alpine:3.24.3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
 
 FROM ${BASE_IMAGE} AS final
 
diff --git a/ext/test/w3c_tracecontext_http_test_server/Dockerfile b/ext/test/w3c_tracecontext_http_test_server/Dockerfile
index 92f8f7759d..78091860c6 100644
--- a/ext/test/w3c_tracecontext_http_test_server/Dockerfile
+++ b/ext/test/w3c_tracecontext_http_test_server/Dockerfile
@@ -1,7 +1,7 @@
 # Copyright The OpenTelemetry Authors
 # SPDX-License-Identifier: Apache-2.0
 
-FROM python:3.15.1@sha256:dc4cbe681761d55d16ab2a25f2086b924f48f3e3dbc98aa0f97a3ebc05797709
+FROM python:3.15.1@sha256:dc005c4de6908d750269a5ee683da95b4cfb5bf419f69b8e95d98d9e44bb2841
 
 RUN pip install aiohttp
 RUN git clone https://github.com/w3c/trace-context