diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 21042b5..373d322 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -36,7 +36,7 @@ jobs:
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
-      - uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
+      - uses: anchore/sbom-action/download-syft@cee1b8e05ae5b2593a75e197229729eabaa9f8ec # v0.20.2
 
       - name: Set Up Docker Buildx
         uses: docker/setup-buildx-action@v3
diff --git a/Dockerfile b/Dockerfile
index a6f5098..0980e1e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.21
+FROM alpine:3.22
 
 RUN apk --no-cache add ca-certificates
 
diff --git a/go.mod b/go.mod
index e9b1086..0e1e938 100644
--- a/go.mod
+++ b/go.mod
@@ -3,10 +3,10 @@ module github.com/stackitcloud/fake-jwt-server
 go 1.22.2
 
 require (
-	github.com/golang-jwt/jwt/v5 v5.2.2
-	github.com/lestrrat-go/jwx/v2 v2.1.4
+	github.com/golang-jwt/jwt/v5 v5.2.3
+	github.com/lestrrat-go/jwx/v2 v2.1.6
 	github.com/spf13/cobra v1.9.1
-	github.com/spf13/pflag v1.0.6
+	github.com/spf13/pflag v1.0.7
 	github.com/spf13/viper v1.20.1
 )