diff --git a/packages/prx/src/room/beadsd-room.ts b/packages/prx/src/room/beadsd-room.ts
index c1a7bda3..f0094d3d 100644
--- a/packages/prx/src/room/beadsd-room.ts
+++ b/packages/prx/src/room/beadsd-room.ts
@@ -14,7 +14,7 @@ import type { RoomSpec } from "./spec.ts";
 // Pinned beadsd-box image (prx-634). Digest is immutable; update by re-running
 // the publish-oci-boxes workflow and replacing this constant.
 export const BEADSD_ROOM_IMAGE =
-  "ghcr.io/bounded-systems/prx/beadsd-box@sha256:ffe59b1f106f03dc08fd975ca3b56e00568de84ca81b9693e35df75ac33f952e";
+  "ghcr.io/bounded-systems/prx/beadsd-box@sha256:29e366b153c5a718029b3219f863dfece26d63122b19be24ad956e20a9fdca24";
 
 export const beadsdRoom: RoomSpec = {
   name: "beadsd-room",
diff --git a/packages/prx/src/room/forge-d-room.ts b/packages/prx/src/room/forge-d-room.ts
index 23e543e0..9abee8b7 100644
--- a/packages/prx/src/room/forge-d-room.ts
+++ b/packages/prx/src/room/forge-d-room.ts
@@ -13,7 +13,7 @@ import type { RoomSpec } from "./spec.ts";
 // Pinned forge-d-box image (prx-36xr). Digest is immutable; update by re-running
 // the publish-oci-boxes workflow and replacing this constant.
 export const FORGE_D_ROOM_IMAGE =
-  "ghcr.io/bounded-systems/prx/forge-d-box@sha256:a537c3a61260ad77cadffbc91e00f2c0216a35b0deae1c461ed9175c20a52288";
+  "ghcr.io/bounded-systems/prx/forge-d-box@sha256:109c866833f7531632cd9dcb52e431b9ab01981f3f01363cfef0ea7847128778";
 
 // Host-backed runtime secrets the pod mounts onto tmpfs, all for the prx-forge
 // bucket app. The private key is the real secret; the App id (4169313) and