diff --git a/image/stage2/Dockerfile b/image/stage2/Dockerfile
index c1cd831..1d9428d 100644
--- a/image/stage2/Dockerfile
+++ b/image/stage2/Dockerfile
@@ -85,7 +85,7 @@ RUN --mount=from=container-script,target=/tmp/container-script,readonly \
 set -eux -o pipefail
 
 /tmp/container-script/dnf-wrapper.sh install --setopt=tsflags=nodocs  \
-  python3.12-devel python3.12-{pip,cffi,lxml,cryptography} \
+  python3.13 python3.13-devel python3.13-pip \
 ;
 
 alternatives --install /usr/bin/python3 python3 /usr/bin/python3.12 110
@@ -123,7 +123,7 @@ RUN --mount=from=container-script,target=/tmp/container-script,readonly \
 set -eux -o pipefail
 
 /tmp/container-script/dnf-wrapper.sh install --setopt=tsflags=nodocs \
-  java-21-openjdk-devel \
+  java-25-openjdk-devel \
 ;
 
 rpm --restore --all || :
diff --git a/image/stage3/Dockerfile b/image/stage3/Dockerfile
index a3b5c58..c0cf697 100644
--- a/image/stage3/Dockerfile
+++ b/image/stage3/Dockerfile
@@ -212,7 +212,7 @@ set -eux -o pipefail
 export SOURCE_DATE_EPOCH=0
 
 npm install --cache /var/cache/npm --global 'corepack@0.34.0' && rm -rf /root/.npm
-python3 -m pip --disable-pip-version-check --cache-dir /var/cache/pip install \
+python3.13 -m pip --disable-pip-version-check --cache-dir /var/cache/pip install \
   meson==1.9.1 \
   ninja==1.13.0 \
 ;
@@ -232,8 +232,8 @@ cd /usr/local/bin
 
 ln -s ../"cmake-${cmake_version_major}"/bin/* ./
 
-runuser -u nobody -- python3 --version
-runuser -u nobody -- python3 -m pip --version
+runuser -u nobody -- python3.13 --version
+runuser -u nobody -- python3.13 -m pip --version
 runuser -u nobody -- java -version
 
 #runuser -u nobody -- bazelisk --version # Skipped: downloads latest bazel