diff --git a/charts/nudgebee-agent/values.yaml b/charts/nudgebee-agent/values.yaml
index 0ec0a3e..337e1ba 100644
--- a/charts/nudgebee-agent/values.yaml
+++ b/charts/nudgebee-agent/values.yaml
@@ -65,7 +65,7 @@ runnerServiceAccount:
 runner:
   image:
     repository: ghcr.io/nudgebee/nudgebee-agent
-    tag: 2026-08-12T08-30-26_13e26b9dce6e3419f5e1ac52836c773a95098fde
+    tag: 2026-08-19T15-28-06_5a862ee549e8f98366ea71c01a7d07a2a151addd
   # Image template the pod_profiler action launches debugger pods from.
   # The agent substitutes `{}` for the variant (bpf, jvm, python, perf, ruby).
   # Surfaces as PROFILER_IMAGE; leave empty to fall back to the binary default.
diff --git a/runner/Dockerfile b/runner/Dockerfile
index a0b22ca..350120e 100644
--- a/runner/Dockerfile
+++ b/runner/Dockerfile
@@ -4,7 +4,7 @@
 
 # golang 1.26.5: fixes the stdlib pair CVE-2026-39822 (HIGH, os.Root symlink
 # traversal) / CVE-2026-42505 (crypto/tls ECH) present in 1.26.4 builds.
-FROM golang:1.26.5-alpine@sha256:0178a641fbb4858c5f1b48e34bdaabe0350a330a1b1149aabd498d0699ff5fb2 AS build
+FROM golang:1.26.6-alpine@sha256:3889b425f035be855a72fb4755265311293b6d414521f0a519d819df32222d83 AS build
 WORKDIR /src
 
 ARG VERSION=dev