diff --git a/docker-compose.yml b/docker-compose.yml
index 7043f32..cc8f54b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -13,7 +13,7 @@
         - GITBUCKET_DATABASE_PASSWORD=${GITBUCKET_DATABASE_PASSWORD}
       volumes:
         - ./data/repositories/:/srv/gitbucket/repositories/
-        - ./data/plugins/:/srv/gitbucket/plugins/
+        - ./data/plugins/:/srv/gitbucket/plugins/:ro
         - ./data/conf/gitbucket/gitbucket.conf:/srv/gitbucket/gitbucket.conf
       ports:
         - "${GITBUCKET_BIND:-127.0.0.1}:${GITBUCKET_WEB_PORT:-8080}:8080"
diff --git a/docker/Dockerfile b/docker/Dockerfile
index f2b0c86..cace755 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -16,7 +16,7 @@
 # setup
 RUN apk update
 RUN apk add ca-certificates wget
-RUN wget https://github.com/gitbucket/gitbucket/releases/download/4.12.1/gitbucket.war -O $GITBUCKET_HOME/latest.war
+RUN wget https://github.com/gitbucket/gitbucket/releases/download/4.13/gitbucket.war -O $GITBUCKET_HOME/latest.war
 
 # clean
 RUN apk del ca-certificates wget