diff --git a/Dockerfile b/Dockerfile
index 2ed37bf..0a73acd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # Build stage — builds the whole workspace, prefetches the embedding model,
 # and copies out the binaries we need.
-FROM rust:1.95-slim@sha256:e14e87345b4d5964ddcc3491d27ee046a0f23820f340c3c1e24da6880141f7c0 AS builder
+FROM rust:1.96-slim@sha256:26abcef3d79b8d890c4ceb17093154573e1f6479cf6dd7c1450043b8458350f6 AS builder
 
 # g++ provides libstdc++ which `onig-sys` (a transitive dep of fastembed →
 # tokenizers) wants at link time. Cheaper than dropping the onig backend.