diff --git a/platform/oauth2-proxy/helmrelease.yaml b/platform/oauth2-proxy/helmrelease.yaml
index 7e41801..4c5ba49 100644
--- a/platform/oauth2-proxy/helmrelease.yaml
+++ b/platform/oauth2-proxy/helmrelease.yaml
@@ -95,7 +95,7 @@ spec:
     # OIDC bootstrap hooks. (ci: flux-postbuild-substitution enforces it.)
     extraInitContainers:
       - name: wait-for-idp
-        image: docker.io/library/alpine:3.22
+        image: docker.io/library/alpine:3.24
         imagePullPolicy: IfNotPresent
         command: ["/bin/sh", "-c"]
         args: