diff --git a/.github/workflows/check-dependencies.yml b/.github/workflows/check-dependencies.yml
index 9dcc066643..ba1ec0e44b 100644
--- a/.github/workflows/check-dependencies.yml
+++ b/.github/workflows/check-dependencies.yml
@@ -26,7 +26,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           tools: composer:2.7.0
           coverage: xdebug
 
diff --git a/.github/workflows/continuous-integration-optional.yml b/.github/workflows/continuous-integration-optional.yml
index 53ed4f5687..bdb90406a1 100644
--- a/.github/workflows/continuous-integration-optional.yml
+++ b/.github/workflows/continuous-integration-optional.yml
@@ -21,7 +21,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           tools: composer:2.7.0
           coverage: xdebug
 
@@ -36,7 +36,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           tools: composer:2.7.0
           coverage: xdebug
 
@@ -66,7 +66,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           tools: composer:2.7.0
           coverage: xdebug
 
@@ -114,7 +114,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           tools: composer:2.7.0
           coverage: xdebug
 
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index adb84caa53..68a45bc702 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -75,7 +75,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           tools: composer:2.7.0
           coverage: none
 
@@ -245,7 +245,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           extensions: intl-73.1
           tools: composer:2.7.0
           coverage: pcov
diff --git a/.github/workflows/reusable-api-performance-test.yml b/.github/workflows/reusable-api-performance-test.yml
index d7645d4820..ecaff58905 100644
--- a/.github/workflows/reusable-api-performance-test.yml
+++ b/.github/workflows/reusable-api-performance-test.yml
@@ -32,7 +32,7 @@ jobs:
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.3.7'
+          php-version: '8.3.9'
           extensions: intl-73.1
           tools: composer:2.7.0
           coverage: pcov
diff --git a/api/Dockerfile b/api/Dockerfile
index 3c3941991f..a266c12403 100644
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -3,7 +3,7 @@
 # Adapted from https://github.com/api-platform/api-platform/blob/fa1c5808305d7cadbf7b8392e0fddb6e80fb2092/api/Dockerfile
 
 # Versions
-FROM dunglas/frankenphp:1.1-php8.3.7 AS frankenphp_upstream
+FROM dunglas/frankenphp:1.2-php8.3.9 AS frankenphp_upstream
 
 # the different stages of this Dockerfile are meant to be built into separate images
 # https://docs.docker.com/develop/develop-images/multistage-build/#stop-at-a-specific-build-stage
diff --git a/renovate.json b/renovate.json
index 1bf7d39dbb..d55ef5080f 100644
--- a/renovate.json
+++ b/renovate.json
@@ -6,7 +6,7 @@
   ],
   "constraints": {
     "node": "22.3.0",
-    "php": "8.3.7"
+    "php": "8.3.9"
   },
   "automergeType": "branch",
   "rebaseWhen": "conflicted",