diff --git a/.github/workflows/ci-docker.yml b/.github/workflows/ci-docker.yml
index 04a5841f..b61afa06 100644
--- a/.github/workflows/ci-docker.yml
+++ b/.github/workflows/ci-docker.yml
@@ -42,6 +42,7 @@ jobs:
       - name: Resolve Dockerfile and build args
         id: build
         run: |
+          echo "no_cache=false" >> "$GITHUB_OUTPUT"
           case "${MATRIX_LANG}" in
             go)
               echo "context=." >> "$GITHUB_OUTPUT"
@@ -73,6 +74,9 @@ jobs:
               echo "context=." >> "$GITHUB_OUTPUT"
               echo "file=${MATRIX_CONTEXT}/Dockerfile" >> "$GITHUB_OUTPUT"
               echo "args=" >> "$GITHUB_OUTPUT"
+              # Security patching (apt upgrade in Dockerfiles) must execute on each
+              # CI run instead of reusing a stale cached layer.
+              echo "no_cache=true" >> "$GITHUB_OUTPUT"
               ;;
             frontend)
               # No pre-built artifact and no sibling-directory dependency —
@@ -101,6 +105,7 @@ jobs:
           context: ${{ steps.build.outputs.context }}
           file: ${{ steps.build.outputs.file }}
           build-args: ${{ steps.build.outputs.args }}
+          no-cache: ${{ steps.build.outputs.no_cache }}
           push: false
           load: true
           tags: ${{ env.IMAGE_PREFIX }}/${{ matrix.image }}:pr-${{ github.event.pull_request.head.sha }}
diff --git a/backend/agent/docker-compose.yml b/backend/agent/docker-compose.yml
index 16f82665..d07a9473 100644
--- a/backend/agent/docker-compose.yml
+++ b/backend/agent/docker-compose.yml
@@ -69,7 +69,7 @@ services:
 
   redis-langfuse:
     cpus: "3"
-    image: redis:8.10.1-alpine
+    image: redis:8.10.2-alpine
     container_name: langfuse-broker
     restart: always
     # Langfuse's BullMQ client sends String(REDIS_AUTH), i.e. "undefined", when unset, so the
@@ -83,7 +83,7 @@ services:
 
   langfuse-web:
     cpus: "3"
-    image: docker.io/langfuse/langfuse:4.38.0
+    image: docker.io/langfuse/langfuse:4.46.0
     container_name: crowd-vision-langfuse
     restart: always
     depends_on: &langfuse-depends-on
@@ -138,7 +138,7 @@ services:
 
   langfuse-worker:
     cpus: "3"
-    image: docker.io/langfuse/langfuse-worker:4.38.0
+    image: docker.io/langfuse/langfuse-worker:4.46.0
     container_name: crowd-vision-langfuse-worker
     restart: always
     depends_on: *langfuse-depends-on
@@ -167,7 +167,7 @@ services:
 
   clickhouse:
     cpus: "3"
-    image: docker.io/clickhouse/clickhouse-server:26.8.9
+    image: docker.io/clickhouse/clickhouse-server:26.9.4
     container_name: crowd-vision-clickhouse
     restart: always
     user: "101:101"
@@ -187,7 +187,7 @@ services:
 
   minio:
     cpus: "3"
-    image: cgr.dev/chainguard/minio@sha256:22bf0ad174612a0106dfbbb95818f307525dd32c5a6ec119ecd7273815abe456
+    image: cgr.dev/chainguard/minio@sha256:6a1d0b45c8669726bba580ced0bfa4cb9fdeed1ed636dfabd81d1577beb6937b
     container_name: crowd-vision-minio
     restart: always
     entrypoint: sh