diff --git a/Dockerfile b/Dockerfile
index d9928df2..f3f15068 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,9 +4,9 @@ FROM eclipse-temurin AS builder
 # bump: libwebp after ./hashupdate Dockerfile LIBWEBP $LATEST
 # bump: libwebp link "Release notes" https://github.com/webmproject/libwebp/releases/tag/v$LATEST
 # bump: libwebp link "Source diff $CURRENT..$LATEST" https://github.com/webmproject/libwebp/compare/v$CURRENT..v$LATEST
-ARG LIBWEBP_VERSION=1.4.0
+ARG LIBWEBP_VERSION=1.5.0
 ARG LIBWEBP_URL="https://github.com/webmproject/libwebp/archive/v$$LIBWEBP_VERSION.tar.gz"
-ARG LIBWEBP_SHA256=12af50c45530f0a292d39a88d952637e43fb2d4ab1883c44ae729840f7273381
+ARG LIBWEBP_SHA256=d5558cd419c8d46bdc958064cb97f963d1ea793866414c025906ec15033512ed
 
 WORKDIR /app
 RUN curl "$LIBWEBP_URL" -o libwebp.tar.gz && \
diff --git a/hashupdate b/hashupdate
index 943beae8..59e9fa2e 100755
--- a/hashupdate
+++ b/hashupdate
@@ -1,5 +1,5 @@
 #!/bin/sh
-set -eu pipefail
+set -euo pipefail
 
 # Usage: hashupdate <FILE> <NAME> <VERSION>
 URL_TEMPLATE=$(grep "$2_URL=" "$1" | sed -E 's/.*="(.*)"/\1/')