diff --git a/lib/config/options/index.ts b/lib/config/options/index.ts
index 26e61219fe..c39707064e 100644
--- a/lib/config/options/index.ts
+++ b/lib/config/options/index.ts
@@ -704,7 +704,7 @@ const options: Readonly<RenovateOptions>[] = [
     description:
       'Change this value to override the default Renovate sidecar image.',
     type: 'string',
-    default: 'ghcr.io/renovatebot/base-image:13.117.4',
+    default: 'ghcr.io/renovatebot/base-image:13.118.0',
     globalOnly: true,
     deprecationMsg:
       'The usage of `binarySource=docker` is deprecated, and will be removed in the future',
diff --git a/package.json b/package.json
index 149dae0782..3d14858e2d 100644
--- a/package.json
+++ b/package.json
@@ -182,7 +182,7 @@
     "@pnpm/parse-overrides": "1001.0.4",
     "@qnighy/marshal": "0.1.3",
     "@redis/client": "6.3.0",
-    "@renovatebot/base-image": "13.117.4",
+    "@renovatebot/base-image": "13.118.0",
     "@renovatebot/detect-tools": "4.0.21",
     "@renovatebot/good-enough-parser": "2.0.1",
     "@renovatebot/osv-offline": "3.0.12",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ee36e4f882..8501ccf41b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -117,8 +117,8 @@ importers:
         specifier: 6.3.0
         version: 6.3.0(@opentelemetry/api@1.9.1)
       '@renovatebot/base-image':
-        specifier: 13.117.4
-        version: 13.117.4(zod@4.6.5)
+        specifier: 13.118.0
+        version: 13.118.0(zod@4.6.5)
       '@renovatebot/detect-tools':
         specifier: 4.0.21
         version: 4.0.21
@@ -908,8 +908,8 @@ packages:
     peerDependencies:
       commander: ~15.0.0
 
-  '@containerbase/base@14.30.1':
-    resolution: {integrity: sha512-oEpsUn/iR2XCUjgCL9aK1fLhSsJ7QHneUjMfeky9IY0OjWzJNUU9IakOj4DsH1SrSDL2M8DtOzmpVlMc5PCJ1w==}
+  '@containerbase/base@14.31.0':
+    resolution: {integrity: sha512-EALZw+nZZGasgeSYWykt3FiHu7w/TE5G2xpI1A3SgnMIMn0DPaStliBhFP89LC+wcUG+0+lE4ag7N6H3IBxw/w==}
     engines: {node: '>=24.10.0'}
     peerDependencies:
       zod: ^4.0.0
@@ -1816,8 +1816,8 @@ packages:
       '@opentelemetry/api':
         optional: true
 
-  '@renovatebot/base-image@13.117.4':
-    resolution: {integrity: sha512-zoQUn/6tSdPhUrkGvl40OqKKmYWNJhmAd77p9L+4NHCslpNpE/tVTXxvmfhoPnx97Gp3FCiyfEloQPbv1YOQog==}
+  '@renovatebot/base-image@13.118.0':
+    resolution: {integrity: sha512-85KVIIzvIFazUBJ4H92hcmQeoUtOGhFIvj6bfPcnto2ZFVfTy5QZpJitEjokYMWX4dliWEb9RPeODkdNqkDlvg==}
     engines: {node: '>=24.10.0'}
     peerDependencies:
       zod: ^4.0.0
@@ -6365,7 +6365,7 @@ snapshots:
     dependencies:
       commander: 15.0.0
 
-  '@containerbase/base@14.30.1(zod@4.6.5)':
+  '@containerbase/base@14.31.0(zod@4.6.5)':
     optionalDependencies:
       zod: 4.6.5
 
@@ -7148,9 +7148,9 @@ snapshots:
     optionalDependencies:
       '@opentelemetry/api': 1.9.1
 
-  '@renovatebot/base-image@13.117.4(zod@4.6.5)':
+  '@renovatebot/base-image@13.118.0(zod@4.6.5)':
     dependencies:
-      '@containerbase/base': 14.30.1(zod@4.6.5)
+      '@containerbase/base': 14.31.0(zod@4.6.5)
     optionalDependencies:
       zod: 4.6.5
 
diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index 427361cbe0..4d535b6069 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,19 +5,19 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:13.117.4@sha256:33f9842852cbededce2eff82998730cb9056fe05e02aaa274ae11e963c1afc91 AS slim-base
+FROM ghcr.io/renovatebot/base-image:13.118.0@sha256:9ca7dea9efa8436e3f26127dae1a089e430217d989d72a0bfbd791451f207669 AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:13.117.4-full@sha256:15389e0c2e4c8ba7233b4acd61cd922b8de5aa885da4b18f092eadb86ecf6453 AS full-base
+FROM ghcr.io/renovatebot/base-image:13.118.0-full@sha256:f0ddd6a4eaeb25da92aba860581d0aaa73af598474f12696e647bbfdbee3515f AS full-base
 
 ENV RENOVATE_BINARY_SOURCE=global
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:13.117.4@sha256:33f9842852cbededce2eff82998730cb9056fe05e02aaa274ae11e963c1afc91 AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:13.118.0@sha256:9ca7dea9efa8436e3f26127dae1a089e430217d989d72a0bfbd791451f207669 AS build
 
 # We want a specific node version here
 # renovate: datasource=github-releases packageName=containerbase/node-prebuild versioning=node