diff --git a/templates/builder/Dockerfile.tmpl b/templates/builder/Dockerfile.tmpl
index b5f655a..98caf40 100644
--- a/templates/builder/Dockerfile.tmpl
+++ b/templates/builder/Dockerfile.tmpl
@@ -46,7 +46,7 @@ RUN node /codefly/next-build.cjs /src /codefly/runtime {{if .Static}}export{{els
 # readable and so the dependency-update automation bumps the two together. The
 # digest is the multi-arch index that linux/amd64 and linux/arm64 both resolve
 # through; a single-platform digest would not satisfy the recipe's platforms.
-FROM nginx:1.31.7-alpine@sha256:892bb2152464f0c5d8972593a5f5afaf8054552580b699d95f8ff4af08c2d33d AS runner
+FROM nginx:1.31.8-alpine@sha256:785835ea65db4bba6f021acc0f3be91b0fef76a53fe41f8588c6698d2aed0606 AS runner
 
 COPY --from=builder /codefly/runtime/ /usr/share/nginx/html
 COPY --from=deps /codefly/apk-packages.txt /codefly/apk-packages.txt