diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 72a4bc25213c3d69f779f2550e77b39b3288903d..936e9708475765e286fc8990a5aef84fce43d6ae 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,16 +1,16 @@
 include:
   - project: "uis/devops/continuous-delivery/ci-templates"
     file: "/auto-devops/common-pipeline.yml"
-    ref: v5.1.0
+    ref: v5.2.1
   - project: "uis/devops/continuous-delivery/ci-templates"
     file: "/auto-devops/artifact-registry.yml"
-    ref: v5.1.0
+    ref: v5.2.1
   - project: "uis/devops/continuous-delivery/ci-templates"
     file: "/auto-devops/release-it.yml"
-    ref: v5.1.0
+    ref: v5.2.1
   - project: "uis/devops/continuous-delivery/ci-templates"
     file: "/commitlint.yml"
-    ref: v5.1.0
+    ref: v5.2.1
 
 variables:
   DAST_DISABLED: "1"
diff --git a/Dockerfile b/Dockerfile
index b95bb19a3f939b23d46c856ec5f82ceb06fa2b89..4838845e5d377d05157ed74fb8173721dfc603cc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 # If you change the version here, update pyproject.toml and the version used in
 # CI. We explicitly specify the platform here so that it matches the platform
 # used in deployment.
-FROM --platform=linux/amd64 registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/python:3.12-slim AS base
+FROM --platform=linux/amd64 registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/python:3.13-slim AS base
 
 # Some performance and disk-usage optimisations for Python within a docker container.
 ENV PYTHONUNBUFFERED=1 PYTHONDONTWRITEBYTECODE=1
diff --git a/poetry.lock b/poetry.lock
index 2365d9bb868ef71f2883c8e53e08810b1b752208..a7c89a14cafcc6efddea084ecd19bd4ec1e742c4 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -582,13 +582,13 @@ files = [
 
 [[package]]
 name = "rich"
-version = "13.9.2"
+version = "13.9.3"
 description = "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal"
 optional = false
 python-versions = ">=3.8.0"
 files = [
-    {file = "rich-13.9.2-py3-none-any.whl", hash = "sha256:8c82a3d3f8dcfe9e734771313e606b39d8247bb6b826e196f4914b333b743cf1"},
-    {file = "rich-13.9.2.tar.gz", hash = "sha256:51a2c62057461aaf7152b4d611168f93a9fc73068f8ded2790f29fe2b5366d0c"},
+    {file = "rich-13.9.3-py3-none-any.whl", hash = "sha256:9836f5096eb2172c9e77df411c1b009bace4193d6a481d534fea75ebba758283"},
+    {file = "rich-13.9.3.tar.gz", hash = "sha256:bc1e01b899537598cf02579d2b9f4a415104d3fc439313a7a2c165d76557a08e"},
 ]
 
 [package.dependencies]