diff --git a/Dockerfile b/Dockerfile
index 8f24fdc..77a4255 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -4,7 +4,7 @@
 # Builds only the three workspace packages the MCP server needs, in dependency
 # order (platform → api → mcp). Deliberately skips apps/* (Electron/Monaco),
 # which the MCP server does not use — keeps the build small and reliable.
-FROM node:22-bookworm-slim@sha256:f32b81066cde10a75dbac96646099533316d94bac4150c55da1636e1f0ffdc46 AS build
+FROM node:22-bookworm-slim@sha256:83f487e0a63425e5b4d146fb5e5be574bcbe1b7b843d3ebafdd95eaf7767a7e5 AS build
 WORKDIR /app
 
 # CI=true turns each package's `prepare` script into a no-op, so `npm install`
@@ -34,7 +34,7 @@ RUN npm run build --workspace roku-dev-studio-platform \
 # ─── Runtime stage ───────────────────────────────────────────────────────────
 # The bundle inlines every dependency, so the runtime image needs nothing but
 # Node and the single .cjs file.
-FROM node:22-bookworm-slim@sha256:f32b81066cde10a75dbac96646099533316d94bac4150c55da1636e1f0ffdc46 AS runtime
+FROM node:22-bookworm-slim@sha256:83f487e0a63425e5b4d146fb5e5be574bcbe1b7b843d3ebafdd95eaf7767a7e5 AS runtime
 WORKDIR /app
 COPY --from=build /app/packages/roku-dev-studio-mcp/dist/index.cjs ./index.cjs