diff --git a/examples/reverse-proxy/login/traefik/compose.yaml b/examples/reverse-proxy/login/traefik/compose.yaml
index 9aadd54..23d776a 100644
--- a/examples/reverse-proxy/login/traefik/compose.yaml
+++ b/examples/reverse-proxy/login/traefik/compose.yaml
@@ -1,7 +1,7 @@
 # web-terminal-kiro behind Traefik, with a login. See docs/proxy-login.md.
 services:
   traefik:
-    image: traefik:v3.7.14@sha256:e849695bc5c317da0cec22bfee4794fd9e15871fe554f864d31b625983e883ff
+    image: traefik:v3.7.14
     container_name: traefik
     restart: unless-stopped
     ports:
diff --git a/examples/reverse-proxy/traefik/compose.yaml b/examples/reverse-proxy/traefik/compose.yaml
index 3d68e84..ebbd654 100644
--- a/examples/reverse-proxy/traefik/compose.yaml
+++ b/examples/reverse-proxy/traefik/compose.yaml
@@ -1,7 +1,7 @@
 # web-terminal-server behind Traefik. See docs/reverse-proxy.md.
 services:
   traefik:
-    image: traefik:v3.7.14@sha256:e849695bc5c317da0cec22bfee4794fd9e15871fe554f864d31b625983e883ff
+    image: traefik:v3.7.14
     container_name: traefik
     restart: unless-stopped
     ports:
diff --git a/tests/monitoring/minimal.compose.yaml b/tests/monitoring/minimal.compose.yaml
index 5ad2196..b663a68 100644
--- a/tests/monitoring/minimal.compose.yaml
+++ b/tests/monitoring/minimal.compose.yaml
@@ -1,7 +1,7 @@
 # Test-only services added to examples/monitoring/minimal. None of the example's services change.
 services:
   sink:
-    image: python:3.14.8-alpine@sha256:f6a589d43c42b9e7f7dc67a12d37132491f362859a5d750607710cc56da3bc72
+    image: python:3.14.8-alpine
     command: ["python3", "/sink.py"]
     volumes:
       - "${DOCS_ROOT}/tests/sink.py:/sink.py:ro"
diff --git a/tests/monitoring/receivers.compose.yaml b/tests/monitoring/receivers.compose.yaml
index 8550786..cc8cf83 100644
--- a/tests/monitoring/receivers.compose.yaml
+++ b/tests/monitoring/receivers.compose.yaml
@@ -8,7 +8,7 @@ services:
       - "127.0.0.1:9093:9093"
 
   sink:
-    image: python:3.14.8-alpine@sha256:f6a589d43c42b9e7f7dc67a12d37132491f362859a5d750607710cc56da3bc72
+    image: python:3.14.8-alpine
     command: ["python3", "/sink.py"]
     volumes:
       - "${DOCS_ROOT}/tests/sink.py:/sink.py:ro"
diff --git a/tests/reverse-proxy/Dockerfile.backend b/tests/reverse-proxy/Dockerfile.backend
index 16ea3f2..4e9ae96 100644
--- a/tests/reverse-proxy/Dockerfile.backend
+++ b/tests/reverse-proxy/Dockerfile.backend
@@ -1,4 +1,4 @@
-FROM python:3.14.8-alpine@sha256:f6a589d43c42b9e7f7dc67a12d37132491f362859a5d750607710cc56da3bc72
+FROM python:3.14.8-alpine
 COPY backend.py /backend.py
 EXPOSE 7681
 CMD ["python3", "-u", "/backend.py"]
diff --git a/tests/reverse-proxy/client.compose.yaml b/tests/reverse-proxy/client.compose.yaml
index fe49c8a..f47b01c 100644
--- a/tests/reverse-proxy/client.compose.yaml
+++ b/tests/reverse-proxy/client.compose.yaml
@@ -2,7 +2,7 @@
 # can require that exact address in X-Forwarded-For and in the app's log.
 services:
   client:
-    image: python:3.14.8-alpine@sha256:f6a589d43c42b9e7f7dc67a12d37132491f362859a5d750607710cc56da3bc72
+    image: python:3.14.8-alpine
     command: ["sleep", "infinity"]
     environment:
       AUTH_PASSWORD: "${AUTH_PASSWORD:-}"