diff --git a/tests/docker/Dockerfile b/tests/docker/Dockerfile
index 4e49223..659dbc5 100644
--- a/tests/docker/Dockerfile
+++ b/tests/docker/Dockerfile
@@ -1,5 +1,5 @@
 # Pinned to the digest of python:3.12-slim for supply-chain integrity; tag kept for readability: 3.12-slim
-FROM python:3.12-slim@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de
+FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6
 
 WORKDIR /tests
 RUN mkdir -p /tests/unit_tests
diff --git a/tests/docker/backends/backend.Dockerfile b/tests/docker/backends/backend.Dockerfile
index 586e386..f211190 100644
--- a/tests/docker/backends/backend.Dockerfile
+++ b/tests/docker/backends/backend.Dockerfile
@@ -1,5 +1,5 @@
 # Pinned to the digest of python:3.12-slim for supply-chain integrity; tag kept for readability: 3.12-slim
-FROM python:3.12-slim@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de
+FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6
 
 WORKDIR /app
 
diff --git a/tests/docker/render-config/Dockerfile b/tests/docker/render-config/Dockerfile
index dec7fbc..5746e9a 100644
--- a/tests/docker/render-config/Dockerfile
+++ b/tests/docker/render-config/Dockerfile
@@ -1,5 +1,5 @@
 # Pinned to the digest of hashicorp/terraform:1.14.3 for supply-chain integrity; tag kept for readability: 1.14.3
-FROM hashicorp/terraform:1.14.3@sha256:20056ea0d2706f2a944e202befa8a558dbcc5798da0b64f884b2647aab82a4ef
+FROM hashicorp/terraform:1.15.8@sha256:7ae513256f7ce67879e218ae8593d6fbe216ec9e123abe6c94e4e10704857963
 
 # Used to robustly extract the cfg from `terraform show -json` without brittle heredoc parsing.
 RUN apk add --no-cache jq