diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index a7b5516..6e156dd 100755
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.11", "3.12", "3.13"]
+        python-version: ["3.12"]
 
     steps:
     - uses: actions/checkout@v4
diff --git a/.mypy.ini b/.mypy.ini
index 59c91fd..6b46f35 100644
--- a/.mypy.ini
+++ b/.mypy.ini
@@ -1,5 +1,5 @@
 [mypy]
-python_version = 3.11
+python_version = 3.12
 mypy_path = src
 ignore_errors = True
 ignore_missing_imports = True
diff --git a/Containerfile b/Containerfile
index ffb78de..8c8f9fb 100755
--- a/Containerfile
+++ b/Containerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/bluesky/tiled:0.2.8 AS base
+FROM ghcr.io/bluesky/tiled:0.2.15 AS base
 
 # uv is a statically-linked Rust binary — no shared-library mprotect call,
 # so it works under rootless Podman where `pip` (glibc RELRO) fails.