diff --git a/deploy/docker/Dockerfile.web b/deploy/docker/Dockerfile.web
index d8ce3678..036775a3 100644
--- a/deploy/docker/Dockerfile.web
+++ b/deploy/docker/Dockerfile.web
@@ -6,7 +6,7 @@
 # `pnpm install` and `pnpm build` under QEMU: the build alone took 260s
 # against 23s natively, and when Node crashed there with SIGILL the step
 # never exited — the CI job sat idle until GitHub's six-hour limit.
-FROM --platform=$BUILDPLATFORM node:24.22.0-alpine AS builder
+FROM --platform=$BUILDPLATFORM node:24.22.2-alpine AS builder
 
 # Pin pnpm to a known-good 12.x, matching `packageManager` in
 # web/package.json. The workspace YAML's `allowBuilds` field requires