diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 0df5cb6..313f1f5 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -46,5 +46,20 @@
       "semanticCommitScope": "{{parentDir}}",
       "semanticCommitType": "fix"
     }
+  ],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": ["Process custom dependencies"],
+      "fileMatch": [
+        "(^|/)apps/.+/ci/latest\\.sh$"
+      ],
+      "matchStrings": [
+        // # renovate: datasource=docker depName=docker.io/library/alpine
+        // version="3.20.1"
+        "datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)\\nversion=\"(?<currentValue>\\d[^\"]+)\""
+      ],
+      "datasourceTemplate": "{{#if datasource}}{{{datasource}}}{{else}}docker{{/if}}"
+    }
   ]
 }
diff --git a/.github/workflows/build-images.yaml b/.github/workflows/build-images.yaml
index 83e19a8..7a6bf0c 100644
--- a/.github/workflows/build-images.yaml
+++ b/.github/workflows/build-images.yaml
@@ -158,7 +158,7 @@ jobs:
           echo "outputs=${outputs}" >> $GITHUB_OUTPUT
 
       - name: Build Image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         id: build
         with:
           build-args: |-
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 39dcc5b..a228127 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -47,7 +47,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Renovate
-        uses: renovatebot/github-action@v40.1.12
+        uses: renovatebot/github-action@v40.2.0
         with:
           configurationFile: .github/renovate.json5
           token: "${{ secrets.GITHUB_TOKEN }}"
diff --git a/apps/alpine-toolbox/Dockerfile b/apps/alpine-toolbox/Dockerfile
new file mode 100644
index 0000000..c865fe0
--- /dev/null
+++ b/apps/alpine-toolbox/Dockerfile
@@ -0,0 +1,33 @@
+FROM docker.io/library/alpine:3.20.0
+
+ARG TARGETPLATFORM
+ARG VERSION
+ARG CHANNEL
+
+ENV CHARSET="UTF-8" \
+    LANG="en_US.UTF-8" \
+    TZ="Etc/UTC"
+
+RUN \
+    mkdir /config \
+    && \
+    adduser app -D -u 568 -g 568 -h /config \
+    && \
+    chown 568:568 /config \
+    && \
+    apk add --no-cache \
+        bash \
+        ca-certificates \
+        catatonit \
+        curl \
+        \
+        git \
+        grep \
+        less
+
+COPY ./apps/alpine-toolbox/entrypoint.sh /entrypoint.sh
+
+ENTRYPOINT ["/usr/bin/catatonit", "--"]
+CMD ["/entrypoint.sh"]
+
+LABEL org.opencontainers.image.source="https://alpinelinux.org"
diff --git a/apps/alpine-toolbox/README.md b/apps/alpine-toolbox/README.md
new file mode 100644
index 0000000..399db8b
--- /dev/null
+++ b/apps/alpine-toolbox/README.md
@@ -0,0 +1,3 @@
+# Alpine Linux Toolbox
+
+[Alpine Linux](https://alpinelinux.org) Toolbox image.
diff --git a/apps/alpine-toolbox/ci/latest.sh b/apps/alpine-toolbox/ci/latest.sh
new file mode 100755
index 0000000..5eaa2e8
--- /dev/null
+++ b/apps/alpine-toolbox/ci/latest.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+# renovate: datasource=docker depName=docker.io/library/alpine
+version="3.20.0"
+printf "%s" "${version}"
diff --git a/apps/alpine-toolbox/entrypoint.sh b/apps/alpine-toolbox/entrypoint.sh
new file mode 100755
index 0000000..46fad6d
--- /dev/null
+++ b/apps/alpine-toolbox/entrypoint.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+
+# Uses /bin/bash if no command is given or the first argument is an option
+if [[ ${#@} -eq 0 || ${1:0:1} == '-' ]]; then
+	set -- /bin/bash "$@"
+fi
+
+# Execute command
+exec "$@"
diff --git a/apps/alpine-toolbox/metadata.yaml b/apps/alpine-toolbox/metadata.yaml
new file mode 100644
index 0000000..f58e71c
--- /dev/null
+++ b/apps/alpine-toolbox/metadata.yaml
@@ -0,0 +1,9 @@
+---
+app: alpine-toolbox
+semver: true
+channels:
+  - name: stable
+    platforms: ["linux/amd64"]
+    stable: true
+    tests:
+      enabled: false