diff --git a/Dockerfile b/Dockerfile
index 7e22be1..9547c03 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@ RUN cmake \
   && make \
   && make install
 
-FROM python:3.12.7-alpine3.20@sha256:e75de178bc15e72f3f16bf75a6b484e33d39a456f03fc771a2b3abb9146b75f8 AS poetry
+FROM python:3.12.8-alpine3.20@sha256:bb94273467caf397de28b4e6dd09ca4a2dd1b53fa9b130d5b2c7c82719258356 AS poetry
 ENV POETRY_VERSION=1.8.5 \
     PIP_DISABLE_PIP_VERSION_CHECK=on
 WORKDIR /app
@@ -28,7 +28,7 @@ RUN apk add --update --no-cache \
 COPY poetry.lock poetry.toml pyproject.toml /app/
 RUN poetry export --without-hashes --format requirements.txt --output requirements.txt
 
-FROM python:3.12.7-alpine3.20@sha256:e75de178bc15e72f3f16bf75a6b484e33d39a456f03fc771a2b3abb9146b75f8 AS runtime
+FROM python:3.12.8-alpine3.20@sha256:bb94273467caf397de28b4e6dd09ca4a2dd1b53fa9b130d5b2c7c82719258356 AS runtime
 ENV PIP_DISABLE_PIP_VERSION_CHECK=on \
     EDITOR=vim \
     BEETSDIR=/config
diff --git a/poetry.lock b/poetry.lock
index 730885f..e90a697 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1136,5 +1136,5 @@ test = ["pytest (>=6.0.0)", "setuptools (>=65)"]
 
 [metadata]
 lock-version = "2.0"
-python-versions = "^3.12.7"
-content-hash = "a51ebac9b8d2753cfc91ed2fc4b82f86cd500eccd3bada97d006a0780361caa8"
+python-versions = "^3.12.8"
+content-hash = "d5953347a8389f5d7f6bfb4acdc597c4195403f0ad1f0cb3c95b955c86501eda"
diff --git a/pyproject.toml b/pyproject.toml
index e1a4f6e..c70b4c7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -7,7 +7,7 @@ license = "MIT"
 readme = "README.md"
 
 [tool.poetry.dependencies]
-python = "^3.12.7"
+python = "^3.12.8"
 beets = "2.2.0"
 flask = "^3.1.0"
 pillow = "^10.4.0"