diff --git a/pomerium/Dockerfile b/pomerium/Dockerfile
index 85316e4fc..1a16f1921 100644
--- a/pomerium/Dockerfile
+++ b/pomerium/Dockerfile
@@ -1,5 +1,5 @@
 FROM ghcr.io/cybozu/golang:1.25-noble AS build
-ARG POMERIUM_VERSION=0.31.1
+ARG POMERIUM_VERSION=0.31.3
 
 WORKDIR /work/pomerium
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
diff --git a/pomerium/TAG b/pomerium/TAG
index ae15b721b..a2f43a92b 100644
--- a/pomerium/TAG
+++ b/pomerium/TAG
@@ -1 +1 @@
-0.31.1.1
+0.31.3.1