diff --git a/.github/workflows/docker-image.yaml b/.github/workflows/docker-image.yaml
index 8636d35f0..3fbf05436 100644
--- a/.github/workflows/docker-image.yaml
+++ b/.github/workflows/docker-image.yaml
@@ -41,7 +41,7 @@ jobs:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           # generate Docker tags based on the following events/attributes
           tags: |
-            type=raw,value=20251114-0
+            type=raw,value=20260517-0
             type=sha
 
       - name: Build and push
diff --git a/resources/Dockerfile b/resources/Dockerfile
index 1eead0d26..8379c9b3f 100644
--- a/resources/Dockerfile
+++ b/resources/Dockerfile
@@ -112,7 +112,7 @@ RUN export ARCH="$(uname -m)" \
             $RUST_TOOLCHAIN-x86_64-unknown-linux-musl; fi \
     && if [ "$TARGETARCH" = "amd64" ]; then rustup component add rustfmt; fi \
     && if [ "$TARGETARCH" = "amd64" ]; then rustup component add clippy; fi \
-    && cargo install cargo-nextest --locked \
+    && cargo install cargo-nextest --locked --version 0.9.128 \
     && rm -rf "$CARGO_HOME/registry" \
     && ln -s "$CARGO_REGISTRY_DIR" "$CARGO_HOME/registry" \
     && rm -rf "$CARGO_HOME/git" \
diff --git a/scripts/dev_cli.sh b/scripts/dev_cli.sh
index adc1a0e7d..a960f9a06 100755
--- a/scripts/dev_cli.sh
+++ b/scripts/dev_cli.sh
@@ -9,7 +9,7 @@ CLI_NAME="Cloud Hypervisor"
 CTR_IMAGE_TAG="ghcr.io/cloud-hypervisor/cloud-hypervisor"
 
 # Needs to match explicit version in docker-image.yaml workflow
-CTR_IMAGE_VERSION="20251114-0"
+CTR_IMAGE_VERSION="20260517-0"
 : "${CTR_IMAGE:=${CTR_IMAGE_TAG}:${CTR_IMAGE_VERSION}}"
 
 DOCKER_RUNTIME="docker"