diff --git a/tests/docker/render-config/Dockerfile b/tests/docker/render-config/Dockerfile
index 5746e9a..f49e84d 100644
--- a/tests/docker/render-config/Dockerfile
+++ b/tests/docker/render-config/Dockerfile
@@ -1,5 +1,5 @@
 # Pinned to the digest of hashicorp/terraform:1.14.3 for supply-chain integrity; tag kept for readability: 1.14.3
-FROM hashicorp/terraform:1.15.8@sha256:7ae513256f7ce67879e218ae8593d6fbe216ec9e123abe6c94e4e10704857963
+FROM hashicorp/terraform:1.15.9@sha256:fd5debae63188975d6febc6aa5bd1a982a588f55e4a4ddb7de28be923f250456
 
 # Used to robustly extract the cfg from `terraform show -json` without brittle heredoc parsing.
 RUN apk add --no-cache jq