diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index a8eb0c6..0ec4375 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -12,7 +12,7 @@ on:
   pull_request:
 
 env:
-  PYTHON315: '3.15.1'
+  PYTHON315: '3.15.2'
   PYTHON314: '3.14.10'
   PYTHON313: '3.13.18'
   PYTHON312: '3.12.16'
diff --git a/Makefile b/Makefile
index 9e6ace4..d965f11 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 -include env_make
 
-PYTHON_VER ?= 3.15.1
+PYTHON_VER ?= 3.15.2
 PYTHON_VER_MINOR := $(shell v='$(PYTHON_VER)'; echo "$${v%.*}")
 
 REPO = wodby/python
diff --git a/base-images.mk b/base-images.mk
index 5b82c41..3faf3e9 100644
--- a/base-images.mk
+++ b/base-images.mk
@@ -7,7 +7,7 @@ BASE_IMAGE_DIGEST_3.11.18-alpine := sha256:09d17d5e4c16d0a7a1eea690bcb7c6ab8616b
 BASE_IMAGE_DIGEST_3.12.16-alpine := sha256:e6dae589c1c05976188fd3bd019afd091445fc533ed2ea29001beddc7368a9c8
 BASE_IMAGE_DIGEST_3.13.18-alpine := sha256:7984cf56ceaddebe4fefeb75d64000b9f45d8b77b11a09b24524da6cdc3af0c8
 BASE_IMAGE_DIGEST_3.14.10-alpine := sha256:eb2c62658b8d51bff0acc408504b76521d02030de56a8a3c1e830083e89b89d2
-BASE_IMAGE_DIGEST_3.15.1-alpine := sha256:54448f67d7c31c39e5cdd3ea2d6382395ce142806c284425f8e897d78a0465b3
+BASE_IMAGE_DIGEST_3.15.2-alpine := sha256:20a82dbc2783112ddb91d1534603f802d222a3e63e593cd002eb2ac534e70211
 
 # Fail before building when a version or variant has no reviewed pin.
 BASE_IMAGE = $(BASE_IMAGE_REPOSITORY):$(BASE_IMAGE_TAG)@$(or $(BASE_IMAGE_DIGEST_$(BASE_IMAGE_TAG)),$(error No base image digest for $(BASE_IMAGE_REPOSITORY):$(BASE_IMAGE_TAG); update base-images.mk))