diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5a033ef6..da49cb3a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -51,7 +51,7 @@ jobs:
       DB_ROOT_PASSWORD: "root-password"
       DB_PASSWORD: "user-password"
       DB_USER: citest
-    container: python:3.13.5-alpine3.21
+    container: python:3.13.6-alpine3.21
     services:
       db:
         image: mariadb:10.11.13-jammy
diff --git a/Dockerfile b/Dockerfile
index d88ad7e4..6e05d741 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 
-FROM python:3.13.5-alpine3.22 AS build
+FROM python:3.13.6-alpine3.22 AS build
 COPY --from=ghcr.io/astral-sh/uv:0.8.0 /uv /uvx /bin/
 
 # dependencies for building Python packages
@@ -20,7 +20,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
     --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
     uv sync --locked --no-editable --no-dev --compile-bytecode
 
-FROM python:3.13.5-alpine3.22
+FROM python:3.13.6-alpine3.22
 
 RUN apk upgrade --no-cache \
   # mysqlclient dependencies
diff --git a/pyproject.toml b/pyproject.toml
index 53004354..adb2e395 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -7,7 +7,7 @@ name = "db-management"
 version = "0"
 description = "DB Management for Opal's legacy databases"
 readme = "README.md"
-requires-python = "==3.13.5"
+requires-python = "==3.13.6"
 dependencies = [
     "alembic==1.16.4",
     "mysqlclient==2.2.7",
diff --git a/uv.lock b/uv.lock
index 329fff7c..c609e6b6 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1,6 +1,6 @@
 version = 1
-revision = 2
-requires-python = "==3.13.5"
+revision = 3
+requires-python = "==3.13.6"
 
 [[package]]
 name = "alembic"