diff --git a/Dockerfile b/Dockerfile
index 8f24fdc..38cda85 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 # Builds only the three workspace packages the MCP server needs, in dependency
 # order (platform → api → mcp). Deliberately skips apps/* (Electron/Monaco),
 # which the MCP server does not use — keeps the build small and reliable.
-FROM node:22-bookworm-slim@sha256:f32b81066cde10a75dbac96646099533316d94bac4150c55da1636e1f0ffdc46 AS build
+FROM node:22-bookworm-slim@sha256:d649c27dae7ba0137b3cef5dd75baa422c08dc3d9e3fc0c23dfb172dc3cc6436 AS build
 WORKDIR /app
 
 # CI=true turns each package's `prepare` script into a no-op, so `npm install`
@@ -34,7 +34,7 @@ RUN npm run build --workspace roku-dev-studio-platform \
 # ─── Runtime stage ───────────────────────────────────────────────────────────
 # The bundle inlines every dependency, so the runtime image needs nothing but
 # Node and the single .cjs file.
-FROM node:22-bookworm-slim@sha256:f32b81066cde10a75dbac96646099533316d94bac4150c55da1636e1f0ffdc46 AS runtime
+FROM node:22-bookworm-slim@sha256:d649c27dae7ba0137b3cef5dd75baa422c08dc3d9e3fc0c23dfb172dc3cc6436 AS runtime
 WORKDIR /app
 COPY --from=build /app/packages/roku-dev-studio-mcp/dist/index.cjs ./index.cjs