diff --git a/buildtools/wasm/Dockerfile b/buildtools/wasm/Dockerfile
index c140336..88675d6 100644
--- a/buildtools/wasm/Dockerfile
+++ b/buildtools/wasm/Dockerfile
@@ -1,4 +1,4 @@
-FROM debian:13-slim@sha256:a99cfc517144bc59b1978475ec53b46ecabec7e43635402ee5b77cc54cd1b20a AS toolchain
+FROM debian:13-slim@sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f AS toolchain
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 # GHC-built tools abort on non-ASCII output in the POSIX locale.
 ENV LANG=C.UTF-8