diff --git a/.gitea/workflows/build-nginx.yaml b/.gitea/workflows/build-nginx.yaml
index 7de005a..8574f1a 100644
--- a/.gitea/workflows/build-nginx.yaml
+++ b/.gitea/workflows/build-nginx.yaml
@@ -37,12 +37,12 @@ jobs:
           ssh: default=/home/luser/.ssh/id_ed25519
           tags: |
             "gitea.woggioni.net/woggioni/nginx:latest"
-            "gitea.woggioni.net/woggioni/nginx:v1.29.2"
+            "gitea.woggioni.net/woggioni/nginx:v1.29.3"
           secrets: |
             GIT_AUTH_TOKEN.github.com=${{ secrets.GH_ACCESS_TOKEN }}
           build-args: |
-            LIBRESSL_VERSION=4.2.0
-            NGINX_VERSION=1.29.2
+            LIBRESSL_VERSION=4.2.1
+            NGINX_VERSION=1.29.3
             NGINX_BRANCH=vanilla
           cache-from: type=registry,ref=gitea.woggioni.net/woggioni/nginx:buildx-vanilla
           cache-to: type=registry,mode=max,compression=zstd,image-manifest=true,oci-mediatypes=true,ref=gitea.woggioni.net/woggioni/nginx:buildx-vanilla
@@ -59,12 +59,12 @@ jobs:
           ssh: default=/home/luser/.ssh/id_ed25519
           tags: |
             "gitea.woggioni.net/woggioni/nginx:woggioni"
-            "gitea.woggioni.net/woggioni/nginx:v1.29.2-woggioni"
+            "gitea.woggioni.net/woggioni/nginx:v1.29.3-woggioni"
           secrets: |
             GIT_AUTH_TOKEN.github.com=${{ secrets.GH_ACCESS_TOKEN }}
           build-args: |
-            LIBRESSL_VERSION=4.2.0
-            NGINX_VERSION=1.29.2
+            LIBRESSL_VERSION=4.2.1
+            NGINX_VERSION=1.29.3
             NGINX_BRANCH=woggioni
           cache-from: type=registry,ref=gitea.woggioni.net/woggioni/nginx:buildx-woggioni
           cache-to: type=registry,mode=max,compression=zstd,image-manifest=true,oci-mediatypes=true,ref=gitea.woggioni.net/woggioni/nginx:buildx-woggioni