diff --git a/Dockerfile b/Dockerfile
index 54cdebf1..968a89f2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,7 +12,7 @@
 #   - Ex: hexpm/elixir:1.17.2-erlang-27.1-debian-bullseye-20240904-slim
 #
 ARG ELIXIR_VERSION=1.20.0-rc.4
-ARG OTP_VERSION=28.4.1
+ARG OTP_VERSION=28.4.2
 ARG DEBIAN_VERSION=trixie-20260406-slim
 
 ARG BUILDER_IMAGE="hexpm/elixir:${ELIXIR_VERSION}-erlang-${OTP_VERSION}-debian-${DEBIAN_VERSION}"
diff --git a/docs/production-infrastructure.md b/docs/production-infrastructure.md
index f104c408..223ca183 100644
--- a/docs/production-infrastructure.md
+++ b/docs/production-infrastructure.md
@@ -25,7 +25,7 @@ push via GitHub Actions.
 
 The Docker image is a multi-stage build:
 
-1. **Builder** — `hexpm/elixir:1.20.0-rc.4-erlang-28.4.1-debian-trixie-20260406-slim` with
+1. **Builder** — `hexpm/elixir:1.20.0-rc.4-erlang-28.4.2-debian-trixie-20260406-slim` with
    Node.js 24, compiles deps, builds assets (`mix assets.deploy`), generates an OTP release.
 2. **Runner** — `debian:trixie-20260406-slim` with minimal runtime deps (`libstdc++6`,
    `openssl`, `libncurses6`, `ca-certificates`). Runs as unprivileged `nobody` user.
diff --git a/mise.toml b/mise.toml
index aa48064c..6fe72788 100644
--- a/mise.toml
+++ b/mise.toml
@@ -19,7 +19,7 @@ HURL_coolify_token = 'change-me'
 
 [tools]
 elixir = "1.20.0-rc.4-otp-28"
-erlang = "28.4.1"
+erlang = "28.4.2"
 node = "24.13.0"
 hurl = 'latest'
 sqlite = 'latest'