diff --git a/Changelog.md b/Changelog.md
index a64f6f2..96b9404 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -10,6 +10,9 @@
 - Devel::CheckLib, which `Makefile.PL` needs to find libcollocatordb before it
   can report the dependencies, is bundled in `inc/` now, so that a checkout
   configures without installing it first
+- fixed the docker image build, which failed since alpine moved to a gcc that
+  defaults to C23, in which the bundled isaac code of Session::Token does not
+  compile anymore
 
 ## [0.94] - 2026-07-30
 
diff --git a/Dockerfile b/Dockerfile
index 2f429a3..2d9b28b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,6 +33,12 @@
 
 COPY . .
 
+# Session::Token, pulled in by Mojolicious::Plugin::Util::RandomString, declares
+# the functions of its bundled isaac implementation without prototypes, which
+# gcc rejects since it defaults to C23. Build this one with C17, the rest of the
+# dependencies compile with the defaults.
+RUN PERL_MM_OPT="CCFLAGS=-std=gnu17" cpm install -g Session::Token
+
 # Install dependencies. Devel::CheckLib, which Makefile.PL needs to find
 # libcollocatordb, comes bundled in inc/
 RUN cpm install -g https://github.com/Akron/Mojolicious-Plugin-Localize.git && \