diff --git a/dnscollector/Dockerfile b/dnscollector/Dockerfile
index d6222f6..0a93f88 100644
--- a/dnscollector/Dockerfile
+++ b/dnscollector/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/docker/library/golang:1.22-bookworm AS build
+FROM public.ecr.aws/docker/library/golang:1.25-trixie AS build
 
 RUN go install github.com/dmachard/go-dnscollector@25b9b58c2f508719d6b9f7d5f58f753028fcc1f2
 
diff --git a/dnsdist/Dockerfile b/dnsdist/Dockerfile
index a609529..6783832 100644
--- a/dnsdist/Dockerfile
+++ b/dnsdist/Dockerfile
@@ -36,7 +36,7 @@ RUN echo "${QUICHE_SHA256SUM}  quiche.tar.gz" | sha256sum -c
 
 ###
 
-FROM public.ecr.aws/docker/library/rust:1.85.0-bookworm AS build-quiche
+FROM public.ecr.aws/docker/library/rust:1.89.0-trixie AS build-quiche
 
 RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
       cmake clang
diff --git a/kea/Dockerfile b/kea/Dockerfile
index 30abf01..bd620fa 100644
--- a/kea/Dockerfile
+++ b/kea/Dockerfile
@@ -4,7 +4,7 @@ ARG BASE=public.ecr.aws/ubuntu/ubuntu:24.04
 
 ###
 
-FROM public.ecr.aws/docker/library/rust:1.85-slim-bookworm as build-healthz
+FROM public.ecr.aws/docker/library/rust:1.89-slim-trixie as build-healthz
 
 WORKDIR /build/healthz
 COPY healthz/ ./
diff --git a/kea/kea-ctrl-agent.jsonnet b/kea/kea-ctrl-agent.jsonnet
index f93bfb1..6c56798 100644
--- a/kea/kea-ctrl-agent.jsonnet
+++ b/kea/kea-ctrl-agent.jsonnet
@@ -6,7 +6,7 @@
       dhcp4: {
         comment: 'main server',
         'socket-type': 'unix',
-        'socket-name': '/run/kea/dhcp4.sock',
+        'socket-name': '/var/run/kea/dhcp4.sock',  // /run/kea/dhcp4.sock via symlink on /var/run; https://gitlab.isc.org/isc-projects/kea/-/issues/3831
       },
       // dhcp6: {
       //   'socket-type': 'unix',
diff --git a/s3tftpd-healthz/Dockerfile b/s3tftpd-healthz/Dockerfile
index d7b925a..782d8ce 100644
--- a/s3tftpd-healthz/Dockerfile
+++ b/s3tftpd-healthz/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/docker/library/rust:1.85-slim-bookworm as build
+FROM public.ecr.aws/docker/library/rust:1.89-slim-trixie as build
 
 COPY . /build/s3tftpd-healthz
 WORKDIR /build/s3tftpd-healthz
@@ -7,7 +7,7 @@ RUN --mount=type=cache,target=/usr/local/cargo/registry \
     --mount=type=cache,target=/build/s3tftpd-healthz/target \
     cargo install --path . --root /app --locked
 
-FROM public.ecr.aws/docker/library/debian:bookworm-slim
+FROM public.ecr.aws/docker/library/debian:trixie-slim
 
 COPY --from=build /app /app
 CMD ["/app/bin/s3tftpd-healthz"]
diff --git a/slack-thread-expander/Dockerfile b/slack-thread-expander/Dockerfile
index 94bac22..f82ba03 100644
--- a/slack-thread-expander/Dockerfile
+++ b/slack-thread-expander/Dockerfile
@@ -1,7 +1,7 @@
-FROM public.ecr.aws/docker/library/rust:1.85-bookworm as builder
+FROM public.ecr.aws/docker/library/rust:1.89-trixie as builder
 RUN cargo install --git https://github.com/eagletmt/slack-thread-expander --rev cd091d547ac6e6cc478855af887575355018f241
 
-FROM public.ecr.aws/docker/library/debian:bookworm-slim
+FROM public.ecr.aws/docker/library/debian:trixie-slim
 RUN apt-get update && apt-get install -y ca-certificates && apt-get clean && rm -rf /var/lib/apt/lists/*
 COPY --from=builder /usr/local/cargo/bin/slack-thread-expander /usr/local/bin/slack-thread-expander
 CMD ["slack-thread-expander"]
diff --git a/unbound/Dockerfile b/unbound/Dockerfile
index 6480138..b29bbb5 100644
--- a/unbound/Dockerfile
+++ b/unbound/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/docker/library/golang:1.22-bookworm as build-exporter
+FROM public.ecr.aws/docker/library/golang:1.25-trixie as build-exporter
 
 RUN go install github.com/hanazuki/unbound_exporter@8ff4abc0f6e4b05e3bb4073dda1227cdaffdefcc