diff --git a/lib/config/options/index.ts b/lib/config/options/index.ts
index 0eb687af88a..a52e2d88193 100644
--- a/lib/config/options/index.ts
+++ b/lib/config/options/index.ts
@@ -649,7 +649,7 @@ const options: Readonly<RenovateOptions>[] = [
     description:
       'Change this value to override the default Renovate sidecar image.',
     type: 'string',
-    default: 'ghcr.io/renovatebot/base-image:13.25.0',
+    default: 'ghcr.io/renovatebot/base-image:13.25.1',
     globalOnly: true,
     deprecationMsg:
       'The usage of `binarySource=docker` is deprecated, and will be removed in the future',
diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index c73de312914..2fa28ce9b5a 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,19 +5,19 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:13.25.0@sha256:d8886ac62dff20f8205affdc85a8244017353b107a3682b7c739f8869a8050a4 AS slim-base
+FROM ghcr.io/renovatebot/base-image:13.25.1@sha256:f067cb1b10205d26ee026a35a7437e50748e0775b2b4d8414a1e24527110cde3 AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:13.25.0-full@sha256:cdc66b269a3f3900355eb854424c63566e222d60ee5f2a23d915aa599bd34f89 AS full-base
+FROM ghcr.io/renovatebot/base-image:13.25.1-full@sha256:84cadee80d053c2a78bf608e1c04970d426bca75063674c18f5565bce7414b8e AS full-base
 
 ENV RENOVATE_BINARY_SOURCE=global
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:13.25.0@sha256:d8886ac62dff20f8205affdc85a8244017353b107a3682b7c739f8869a8050a4 AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:13.25.1@sha256:f067cb1b10205d26ee026a35a7437e50748e0775b2b4d8414a1e24527110cde3 AS build
 
 # We want a specific node version here
 # renovate: datasource=github-releases packageName=containerbase/node-prebuild versioning=node