diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6c9e1961e2..e13d06a591 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -109,3 +109,9 @@ updates:
       github-actions:
         patterns:
           - "*"
+
+  # Docker
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
\ No newline at end of file
diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
index 6d415e6393..4a46e63521 100644
--- a/CHANGELOG.asciidoc
+++ b/CHANGELOG.asciidoc
@@ -33,6 +33,22 @@ Notes:
 
 See the <<upgrade-to-v4>> guide.
 
+==== Unreleased
+
+[float]
+===== Breaking changes
+
+[float]
+===== Features
+
+[float]
+===== Bug fixes
+
+[float]
+===== Chores
+
+* Update base image of alpine in `Dockerfile` to version `3.21.3`. ({pull}4465[#4465])
+
 [[release-notes-4.11.0]]
 ==== 4.11.0 - 2025/01/20
 
diff --git a/Dockerfile b/Dockerfile
index 59f93bb7ca..63b6185513 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
-# Pin to Alpine 3.9
-# For a complete list of hashes, see:
-# https://github.com/docker-library/repo-info/tree/master/repos/alpine/remote
-FROM alpine@sha256:115731bab0862031b44766733890091c17924f9b7781b79997f5f163be262178
+# Pin the latest Alpine 3
+# https://github.com/docker-library/repo-info/blob/master/repos/alpine/remote/3.md
+
+FROM alpine@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 ARG AGENT_DIR
 COPY ${AGENT_DIR} /opt/nodejs