diff --git a/compose.yml b/compose.yml
index 9565337..f643489 100644
--- a/compose.yml
+++ b/compose.yml
@@ -50,7 +50,7 @@ services:
   # A plugin connects as its own role from inside web. Dev defaults below; supply
   # POSTGRES_USER/PASSWORD via env in production.
   postgres:
-    image: postgres:18.6-alpine3.23
+    image: postgres:18.7-alpine3.23
     environment:
       POSTGRES_USER: ${POSTGRES_USER:-ory}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-ory}
diff --git a/release-tooling/dockerhub-overview.md.tmpl b/release-tooling/dockerhub-overview.md.tmpl
index 385130a..45bf2f5 100644
--- a/release-tooling/dockerhub-overview.md.tmpl
+++ b/release-tooling/dockerhub-overview.md.tmpl
@@ -54,7 +54,7 @@ services:
     restart: "on-failure:5"
 
   postgres:
-    image: postgres:18.6-alpine3.23
+    image: postgres:18.7-alpine3.23
     environment:
       POSTGRES_DB: ory
       POSTGRES_PASSWORD: ory