diff --git a/docker-compose.services.yml b/docker-compose.services.yml
index 7bfdd53a3f..0cc13868d7 100644
--- a/docker-compose.services.yml
+++ b/docker-compose.services.yml
@@ -123,7 +123,7 @@ services:
   apigateway:
     profiles:
       - apisix
-    image: apache/apisix:3.13.0-debian # versions above this drop the local port on redirects
+    image: apache/apisix:3.16.0-debian@sha256:b921bdef3cfb2ca72e483d643f40e7843683ff8e188984489c2020f17654ee88 # versions above this drop the local port on redirects
     <<: *default-extra-hosts
     environment:
       - CSRF_COOKIE_DOMAIN=${CSRF_COOKIE_DOMAIN:-.odl.local}