diff --git a/Dockerfile b/Dockerfile
index 826c4a186..0110f343c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -295,7 +295,7 @@ CMD ["node", "dev/run-standalone.mjs"]
 # artifacts remain ABI-compatible. The dev image intentionally retains npm and
 # a POSIX shell because AgentProxy invokes npm at runtime and has a shell
 # entrypoint. Trivy v0.69.3 reports 0 HIGH/CRITICAL on this exact index digest.
-FROM cgr.dev/chainguard/node@sha256:37ea42c0860729767b090a7c700c836eac660eb4bcfee3b5fe63eb85acd63df4 AS runner-base
+FROM cgr.dev/chainguard/node@sha256:4dcf9bbb401b4ba7e1fb65dcc5dbd42d71bac515ed6a4662126424017d51df8e AS runner-base
 USER root
 WORKDIR /app
 # Chainguard Node already provides the non-root node user/group.