diff --git a/Dockerfile b/Dockerfile
index d1ff39fd..dec0564d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -28,7 +28,7 @@ COPY . .
 RUN bun scripts/build-standalone.ts --target bun-linux-x64-modern \
 	&& bun scripts/check-standalone.ts --target bun-linux-x64-modern --probe-binaries
 
-FROM node:24-bookworm-slim@sha256:2c87ef9bd3c6a3bd4b472b4bec2ce9d16354b0c574f736c476489d09f560a203
+FROM node:26-bookworm-slim@sha256:cd565714d4da3e84bfd341e31448f81d47c6362198f152345297c9c1154e6341
 
 # Defaults mirror AGENT_CLI_VERSIONS in scripts/docker-image.ts (the source
 # of truth — `bun run docker:build` passes them as --build-arg).