diff --git a/.ruby-version b/.ruby-version
index fa7adc7ac..9c25013db 100644
--- a/.ruby-version
+++ b/.ruby-version
@@ -1 +1 @@
-3.3.5
+3.3.6
diff --git a/Gemfile b/Gemfile
index 7b2cecb44..233dfe0fd 100644
--- a/Gemfile
+++ b/Gemfile
@@ -1,5 +1,5 @@
 source 'https://rubygems.org'
-ruby '3.3.5'
+ruby '3.3.6'
 
 gem 'rails', '~> 7.2', '>= 7.2.1'
 
diff --git a/Gemfile.lock b/Gemfile.lock
index a0bb21480..dcb3fc44f 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -565,7 +565,7 @@ DEPENDENCIES
   will_paginate (~> 4.0)
 
 RUBY VERSION
-   ruby 3.3.5p100
+   ruby 3.3.6p108
 
 BUNDLED WITH
    2.5.18
diff --git a/deploy/deploy.yml b/deploy/deploy.yml
index 3ce6aebbf..5f28210c6 100644
--- a/deploy/deploy.yml
+++ b/deploy/deploy.yml
@@ -6,7 +6,7 @@
   vars:
     local_app_root: "{{ playbook_dir  }}/.."
     remote_project_root: "/srv/impress"
-    ruby_version: "3.3.5"
+    ruby_version: "3.3.6"
 
     # deploy:setup should have added us to the "impress-deployers" group, so we
     # should be able to become the "impress" user without a password.
diff --git a/deploy/setup.yml b/deploy/setup.yml
index e4df1aab9..2874d2f8d 100644
--- a/deploy/setup.yml
+++ b/deploy/setup.yml
@@ -6,7 +6,7 @@
   vars:
     email_address: "emi@matchu.dev" # TODO: Extract this to personal config?
     impress_hostname: impress.openneo.net
-    ruby_version: "3.3.5"
+    ruby_version: "3.3.6"
   vars_files:
     # mysql_root_password, mysql_user_password, mysql_user_password_2020,
     # dev_ips
@@ -171,7 +171,7 @@
       git:
         repo: https://github.com/rbenv/ruby-build.git
         dest: /opt/ruby-build
-        version: v20240917
+        version: v20241225.2
 
     - name: Check if Ruby {{ ruby_version }} is already installed
       stat: