diff --git a/third_party/images/defs.bzl b/third_party/images/defs.bzl
index dd38dd4..f4117d7 100644
--- a/third_party/images/defs.bzl
+++ b/third_party/images/defs.bzl
@@ -9,7 +9,7 @@ def base_images():
     container_pull(
         name = "java21_amd64",
         architecture = "amd64",
-        digest = "sha256:5290aea0c7d39f83e9bba554bcd339ad613dfe17617ba17e89739630616eb374",
+        digest = "sha256:4cbf04e9ccec9a20e1d061c13624ac6430dcb7df0b87fc63db42239ca6852def",
         os = "linux",
         registry = "gcr.io",
         repository = "distroless/java21-debian12",