diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 8193da6..f7acef7 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -1,8 +1,8 @@
+---
 name: Docker image
 on:
   push:
     branches:
-      - main
       - 'py-*'
 
 jobs:
@@ -22,8 +22,7 @@ jobs:
         with:
           images: tobix/pywine
           tags: |
-            type=raw,value=latest
-            type=raw,value=3.12
+            type=raw,value=3.12.3
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
diff --git a/Dockerfile b/Dockerfile
index 15d29eb..63f9753 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,7 +11,7 @@ COPY mkuserwineprefix entrypoint.sh /opt/
 RUN xvfb-run sh /tmp/helper/wine-init.sh
 
 # renovate: datasource=github-tags depName=python/cpython versioning=pep440
-ARG PYTHON_VERSION=3.12.4
+ARG PYTHON_VERSION=3.12.3
 # renovate: datasource=github-releases depName=upx/upx versioning=loose
 ARG UPX_VERSION=4.2.4