diff --git a/Dockerfile b/Dockerfile
index 1eaf1397..ebe876b9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -135,7 +135,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
             # Renovate tracks these via regex manager in renovate.json
             # TODO: Remove this block once Caddy ships with fixed deps (check v2.10.3+)
             # renovate: datasource=go depName=github.com/expr-lang/expr
-            go get github.com/expr-lang/expr@v1.17.6 || true; \
+            go get github.com/expr-lang/expr@v1.17.7 || true; \
             # renovate: datasource=go depName=github.com/quic-go/quic-go
             go get github.com/quic-go/quic-go@v0.57.1 || true; \
             # renovate: datasource=go depName=github.com/smallstep/certificates