diff --git a/devops/docker/images/trogon-atlas-studio/Dockerfile b/devops/docker/images/trogon-atlas-studio/Dockerfile
index 1b34d2e4..c375f2ec 100644
--- a/devops/docker/images/trogon-atlas-studio/Dockerfile
+++ b/devops/docker/images/trogon-atlas-studio/Dockerfile
@@ -6,7 +6,7 @@
 # pnpm workspace at /mnt/tsworkspace, so the install resolves against the
 # workspace lockfile. `pnpm deploy` then produces a self-contained studio
 # tree with production deps only.
-FROM --platform=$BUILDPLATFORM node:26-alpine@sha256:c6ad9e9c1d80f6eb607c26b4b0a132ff7a2344fad1c78ea3baa2a7d4c8de6d94 AS build
+FROM --platform=$BUILDPLATFORM node:26-alpine@sha256:8996bb5821d62a8fd9bb27c1cb07462f3fdce6e47d640c6a881ead0b064ce216 AS build
 ARG BUILDARCH
 ARG PNPM_VERSION=10.3.0
 ARG PNPM_LINUXSTATIC_X64_SHA256=13319046c28ab9cf18838aea7a06afcba20156c90ee3f164b9e0d11360b0bbd9
@@ -33,7 +33,7 @@ RUN --mount=type=bind,source=tsworkspace,target=/mnt/tsworkspace \
 RUN pnpm --filter trogon-atlas-studio run build \
  && pnpm --filter trogon-atlas-studio deploy --legacy --prod /app
 
-FROM node:26-alpine@sha256:c6ad9e9c1d80f6eb607c26b4b0a132ff7a2344fad1c78ea3baa2a7d4c8de6d94
+FROM node:26-alpine@sha256:8996bb5821d62a8fd9bb27c1cb07462f3fdce6e47d640c6a881ead0b064ce216
 WORKDIR /app
 RUN apk upgrade --no-cache \
  && addgroup -g 101 -S studio && adduser -S -u 100 -G studio studio \