diff --git a/companions/codefly/Dockerfile b/companions/codefly/Dockerfile
index b2d65e37..6e90ea99 100644
--- a/companions/codefly/Dockerfile
+++ b/companions/codefly/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.24.2@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6
+FROM alpine:3.24.3@sha256:be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a
 
 # Base dev toolbox shared across every codefly-built image. Language
 # companions either FROM this image directly (when alpine suffices) or
diff --git a/companions/proto/Dockerfile b/companions/proto/Dockerfile
index e28d5bb3..6a358d10 100644
--- a/companions/proto/Dockerfile
+++ b/companions/proto/Dockerfile
@@ -51,7 +51,7 @@ RUN cd /src/facade-go && \
 # gencode contract. Alpine's python3 moves independently; grpcio-tools 1.71
 # has Python 3.13 wheels, not 3.14 wheels. As in the Python companion, copy
 # the freshly built CLI into a language-specific runtime base.
-FROM python:3.13.18-alpine3.24@sha256:bbc0290146ebe0a8b9a8ed07d3f2c7bdeb4d917fc93300a4e47490c8b5a11b48
+FROM python:3.15.0-alpine3.24@sha256:2699b90f4d562a22e2dd076c82f964032f64814204bff36d271a54ba4cc2c7e2
 COPY --from=codeflybase /bin/codefly /bin/codefly
 
 # Runtime dependencies:
diff --git a/companions/python/Dockerfile b/companions/python/Dockerfile
index b80b2561..25938833 100644
--- a/companions/python/Dockerfile
+++ b/companions/python/Dockerfile
@@ -16,7 +16,7 @@
 ARG CODEFLY_BASE_IMAGE=ghcr.io/codefly-dev/codefly:0.0.7
 FROM ${CODEFLY_BASE_IMAGE} AS codeflybase
 
-FROM python:3.14.10-alpine3.24@sha256:cfe4b5079e5852da965ae14f74a6e2b137ece05b918d27c575fb70de3c85db2b
+FROM python:3.15.0-alpine3.24@sha256:2699b90f4d562a22e2dd076c82f964032f64814204bff36d271a54ba4cc2c7e2
 
 # Re-install alpine dev tools so the python companion's runtime carries
 # the same toolbox as the codefly base. Dropped from the list: