diff --git a/.changeset/patch-fix-alpine-dockerfile.md b/.changeset/patch-fix-alpine-dockerfile.md
new file mode 100644
index 00000000000..169f5fa8232
--- /dev/null
+++ b/.changeset/patch-fix-alpine-dockerfile.md
@@ -0,0 +1,5 @@
+---
+"gh-aw": patch
+---
+
+Fix Alpine Dockerfile compilation by using Alpine 3.19 and correct gh package name
diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
index 0a95331f849..e86e50dd3a2 100644
--- a/.github/aw/actions-lock.json
+++ b/.github/aw/actions-lock.json
@@ -150,6 +150,11 @@
       "version": "v3.12.0",
       "sha": "8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"
     },
+    "docker/setup-qemu-action@v3": {
+      "repo": "docker/setup-qemu-action",
+      "version": "v3",
+      "sha": "c7c53464625b32c7a7e944ae62b3e17d2b600130"
+    },
     "erlef/setup-beam@v1": {
       "repo": "erlef/setup-beam",
       "version": "v1.20.4",
diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml
index ee9a757ceb4..700b54bc9d2 100644
--- a/.github/workflows/release.lock.yml
+++ b/.github/workflows/release.lock.yml
@@ -1184,7 +1184,7 @@ jobs:
         env:
           RELEASE_TAG: ${{ needs.config.outputs.release_tag }}
       - name: Set up QEMU for multi-platform builds
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
         with:
           platforms: arm64
       - name: Setup Docker Buildx (pre-validation)
diff --git a/Dockerfile b/Dockerfile
index f1d93860610..d1a0a750266 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,17 +1,17 @@
 # Dockerfile for GitHub Agentic Workflows compiler
 # Provides a minimal container with gh-aw, gh CLI, git, and jq
 
-# Use Alpine for minimal size (official distribution)
-FROM alpine:3.21
+# Use Alpine 3.19 for minimal size (3.20+ removed gh CLI due to Python 3.12 compatibility)
+FROM alpine:3.19
 
 # Install required dependencies
-RUN apk add --no-cache \
+RUN apk update && apk add --no-cache \
     git \
     jq \
     bash \
     curl \
     ca-certificates \
-    github-cli
+    gh
 
 # Docker Buildx automatically provides these ARGs for multi-platform builds
 # Expected values: TARGETOS=linux, TARGETARCH=amd64|arm64
diff --git a/pkg/workflow/data/action_pins.json b/pkg/workflow/data/action_pins.json
index 0a95331f849..e86e50dd3a2 100644
--- a/pkg/workflow/data/action_pins.json
+++ b/pkg/workflow/data/action_pins.json
@@ -150,6 +150,11 @@
       "version": "v3.12.0",
       "sha": "8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"
     },
+    "docker/setup-qemu-action@v3": {
+      "repo": "docker/setup-qemu-action",
+      "version": "v3",
+      "sha": "c7c53464625b32c7a7e944ae62b3e17d2b600130"
+    },
     "erlef/setup-beam@v1": {
       "repo": "erlef/setup-beam",
       "version": "v1.20.4",