diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 62bee1a..bd70cf0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -85,6 +85,12 @@ jobs:
           git -C msquic submodule update --init --depth 1 submodules/xdp-for-windows
       - name: Configure static Windows build
         shell: pwsh
+        env:
+          # msquic compiles its core with /analyze and /WX, and the MSVC
+          # analyzer on the current runner image reports a C28020 false
+          # positive in crypto_tls.c. Suppress that warning; CMake appends
+          # CFLAGS to its default compiler flags at first configure.
+          CFLAGS: /wd28020
         run: |
           cmake -S msquic -B msquic/build -A x64 `
             -DQUIC_BUILD_PERF=ON `
diff --git a/Dockerfile b/Dockerfile
index 842e047..f7c0e32 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 FROM ubuntu:24.04 AS build
 
-ARG MSQUIC_VERSION=v2.5.10
+ARG MSQUIC_VERSION=v2.6.0
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends build-essential ca-certificates cmake git perl \