diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0ecec45..7ab7ca5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## 2.11.15
+
+### Fixed: Docker image publishing
+
+- The `socketdev/cli` Docker image now publishes reliably when PyPI is slow to
+  list a new release. A delay could leave a release on PyPI without a matching
+  Docker image.
+
 ## 2.11.14
 
 ### Changed: bump pinned Coana CLI to 15.15.0
diff --git a/Dockerfile b/Dockerfile
index 4450c6a..836b7d9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,6 +6,10 @@ FROM node:24-alpine3.24 AS node
 FROM python:3-alpine
 LABEL org.opencontainers.image.authors="socket.dev"
 
+# Build-time only. Keeps pip's cache out of the layers, and lets the CLI install
+# retries see a release PyPI has just listed (pip caches its index for 10 min).
+ARG PIP_NO_CACHE_DIR=1
+
 # Language version arguments with defaults
 ARG GO_VERSION=system
 ARG JAVA_VERSION=17
diff --git a/pyproject.toml b/pyproject.toml
index 6579b24..e1e37b5 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "socketsecurity"
-version = "2.11.14"
+version = "2.11.15"
 requires-python = ">= 3.11"
 license = {"file" = "LICENSE"}
 dependencies = [
diff --git a/socketsecurity/__init__.py b/socketsecurity/__init__.py
index 42841af..260e893 100644
--- a/socketsecurity/__init__.py
+++ b/socketsecurity/__init__.py
@@ -1,4 +1,4 @@
 __author__ = 'socket.dev'
-__version__ = '2.11.14'
+__version__ = '2.11.15'
 USER_AGENT_NAME = 'socket-python-cli'
 USER_AGENT = f'{USER_AGENT_NAME}/{__version__}'
diff --git a/uv.lock b/uv.lock
index 2cf70cf..469fc2f 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1332,7 +1332,7 @@ wheels = [
 
 [[package]]
 name = "socketsecurity"
-version = "2.11.14"
+version = "2.11.15"
 source = { editable = "." }
 dependencies = [
     { name = "beautifulsoup4" },