diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index ac59776..db424f5 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -64,7 +64,7 @@ services:
     # handbooks/operator-handbook/operations-runbook.md remains the human backstop for
     # "this branch has gone EOL", which no scanner can tell you.
     # See handbooks/operator-handbook/vulnerability-scanning.md.
-    image: nginx:1.30-alpine
+    image: nginx:1.31-alpine
     restart: unless-stopped
     logging: *default-logging
     security_opt: