diff --git a/Dockerfile b/Dockerfile
index 91db48e..634a114 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,14 +1,14 @@
 # glibc Node toolchain, nonroot user, digest-pinned to match Workbench's
 # Chainguard base-image posture. Next SSR needs Node in the final image, so this
 # uses the Node runtime instead of Workbench's static nginx runtime.
-FROM cgr.dev/chainguard/node:latest-dev@sha256:5f539ca9ce7ed8b858059b3316640232bcb1ae7d3513ae67bb95527533bf1fba AS deps
+FROM cgr.dev/chainguard/node:latest-dev@sha256:213d9ba7e6cc2cde635b0c8f31c9792017da19e8c6945edde1dbc039c8bd80c7 AS deps
 ENV NEXT_TELEMETRY_DISABLED=1
 WORKDIR /app
 
 COPY package.json package-lock.json ./
 RUN npm ci
 
-FROM cgr.dev/chainguard/node:latest-dev@sha256:5f539ca9ce7ed8b858059b3316640232bcb1ae7d3513ae67bb95527533bf1fba AS builder
+FROM cgr.dev/chainguard/node:latest-dev@sha256:213d9ba7e6cc2cde635b0c8f31c9792017da19e8c6945edde1dbc039c8bd80c7 AS builder
 ENV NEXT_TELEMETRY_DISABLED=1
 WORKDIR /app
 
@@ -16,7 +16,7 @@ COPY --chown=node:node --from=deps /app/node_modules ./node_modules
 COPY --chown=node:node . .
 RUN npm run build
 
-FROM cgr.dev/chainguard/node@sha256:045335a479d6c59bab89e3caaaf9ed2aed5528d92e2431a3e2afcbf258dba9a6 AS runner
+FROM cgr.dev/chainguard/node@sha256:6e6a0a6b07530980a1192cca22750e87b4614e8185173142fc7e4fd4a3ad4c03 AS runner
 ENV HOSTNAME=0.0.0.0
 ENV NODE_ENV=production
 ENV NEXT_TELEMETRY_DISABLED=1