diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 85df714..1bdc63c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,7 +16,7 @@ env:
   HASH_FILENAME: uc-intg-androidtv.hash
   BUILD_CHANGELOG: build-changelog.md
   # Python version to use in the builder image. See https://hub.docker.com/r/unfoldedcircle/r2-pyinstaller for possible versions.
-  PYTHON_VER: 3.11.12-0.3.0
+  PYTHON_VER: 3.11.13-0.4.0
 
 jobs:
   test:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4660c66..f73c1db 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## Unreleased
 _Changes in the next release_
 
+### Changed
+- Update the embedded Python runtime to 3.11.13.
+- Enabled GitHub dependabot.
+
+### Fixed
+- qemu installation instructions.
+
 ---
 
 ## v0.7.4 - 2025-05-15
diff --git a/README.md b/README.md
index 87d2d06..6c3e67e 100644
--- a/README.md
+++ b/README.md
@@ -90,7 +90,7 @@ docker run --rm --name builder \
     --platform=aarch64 \
     --user=$(id -u):$(id -g) \
     -v "$PWD":/workspace \
-    docker.io/unfoldedcircle/r2-pyinstaller:3.11.12  \
+    docker.io/unfoldedcircle/r2-pyinstaller:3.11.13  \
     bash -c \
       "python -m pip install -r requirements.txt && \
       pyinstaller --clean --onedir --name intg-androidtv src/driver.py"
@@ -103,7 +103,7 @@ On an aarch64 host platform, the build image can be run directly (and much faste
 docker run --rm --name builder \
     --user=$(id -u):$(id -g) \
     -v "$PWD":/workspace \
-    docker.io/unfoldedcircle/r2-pyinstaller:3.11.12  \
+    docker.io/unfoldedcircle/r2-pyinstaller:3.11.13  \
     bash -c \
       "python -m pip install -r requirements.txt && \
       pyinstaller --clean --onedir --name intg-androidtv src/driver.py"