diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d43a5648a4a..ed4d03907c5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -421,7 +421,7 @@ jobs:
           merge-multiple: true
 
       - name: Codecov
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
+        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           directory: coverage/lcov
diff --git a/lib/modules/platform/gerrit/types.ts b/lib/modules/platform/gerrit/types.ts
index 012d05be329..4664a054185 100644
--- a/lib/modules/platform/gerrit/types.ts
+++ b/lib/modules/platform/gerrit/types.ts
@@ -37,6 +37,7 @@ export interface GerritChange {
   change_id: string;
   subject: string;
   status: GerritChangeStatus;
+  created: string;
   submittable?: boolean;
   _number: number;
   labels?: Record<string, GerritLabelInfo>;
diff --git a/lib/modules/platform/gerrit/utils.spec.ts b/lib/modules/platform/gerrit/utils.spec.ts
index c001a9cb35b..9c4bb6dede7 100644
--- a/lib/modules/platform/gerrit/utils.spec.ts
+++ b/lib/modules/platform/gerrit/utils.spec.ts
@@ -84,6 +84,7 @@ describe('modules/platform/gerrit/utils', () => {
         status: 'NEW',
         branch: 'main',
         subject: 'Fix for',
+        created: '2025-04-14 16:33:37.000000000',
         reviewers: {
           REVIEWER: [partial<GerritAccountInfo>({ username: 'username' })],
           REMOVED: [],
@@ -120,6 +121,7 @@ describe('modules/platform/gerrit/utils', () => {
         number: 123456,
         state: 'open',
         title: 'Fix for',
+        createdAt: '2025-04-14T16:33:37.000000000',
         sourceBranch: 'renovate/dependency-1.x',
         targetBranch: 'main',
         reviewers: ['username'],
diff --git a/lib/modules/platform/gerrit/utils.ts b/lib/modules/platform/gerrit/utils.ts
index 0110aebb77b..64926b0321a 100644
--- a/lib/modules/platform/gerrit/utils.ts
+++ b/lib/modules/platform/gerrit/utils.ts
@@ -67,6 +67,7 @@ export function mapGerritChangeToPr(change: GerritChange): Pr {
     sourceBranch: extractSourceBranch(change) ?? change.branch,
     targetBranch: change.branch,
     title: change.subject,
+    createdAt: change.created?.replace(' ', 'T'),
     reviewers:
       change.reviewers?.REVIEWER?.filter(
         (reviewer) => typeof reviewer.username === 'string',
diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index 1a18c0901e2..4448b3b7629 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,19 +5,19 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:9.58.5@sha256:60702c62a4da5abd1083d9dc6a032d0785f16b5664d6c9a86e06544bb89a56a4 AS slim-base
+FROM ghcr.io/renovatebot/base-image:9.58.6@sha256:5687c3d2664975367a02d170455dc9fb93333f301246aa478c0bdb8677259a6c AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:9.58.5-full@sha256:9facf79b40982cce92d0fc2e9ef538fef0d9b3d25f18cac50da92c7e91968471 AS full-base
+FROM ghcr.io/renovatebot/base-image:9.58.6-full@sha256:68d6ad0e39b02ffaf39004a2f236d75ce9e8979e7e16f3804cb17b7c101774de AS full-base
 
 ENV RENOVATE_BINARY_SOURCE=global
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.58.5@sha256:60702c62a4da5abd1083d9dc6a032d0785f16b5664d6c9a86e06544bb89a56a4 AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.58.6@sha256:5687c3d2664975367a02d170455dc9fb93333f301246aa478c0bdb8677259a6c AS build
 
 # We want a specific node version here
 # renovate: datasource=github-releases packageName=containerbase/node-prebuild versioning=node