diff --git a/apps/web/Dockerfile b/apps/web/Dockerfile
index d4fdaf1..1361cab 100644
--- a/apps/web/Dockerfile
+++ b/apps/web/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1.7
 
 # Frontend artifacts are architecture-neutral; keep Node and pnpm off QEMU during cross-builds.
-FROM --platform=$BUILDPLATFORM node:24.19.0-alpine3.23@sha256:244cc2b53f46f9e876304391d17682b0ddae9ac33491f4857e25e35a36ba7995 AS build
+FROM --platform=$BUILDPLATFORM node:26.8.1-alpine3.23@sha256:871eb674ad6e692c91330a8959f1ce2f80ba3f445cdc54e306869d2ea265e42d AS build
 
 RUN apk add --no-cache --upgrade libcrypto3=3.5.8-r0 libssl3=3.5.8-r0
 
@@ -30,7 +30,7 @@ RUN pnpm --filter @atlas/web build
 RUN --mount=type=cache,id=atlas-pnpm,target=/pnpm/store \
     pnpm --filter @atlas/web deploy --prod /deploy/web
 
-FROM node:24.19.0-alpine3.23@sha256:244cc2b53f46f9e876304391d17682b0ddae9ac33491f4857e25e35a36ba7995 AS runtime
+FROM node:26.8.1-alpine3.23@sha256:871eb674ad6e692c91330a8959f1ce2f80ba3f445cdc54e306869d2ea265e42d AS runtime
 
 RUN apk add --no-cache --upgrade libcrypto3=3.5.8-r0 libssl3=3.5.8-r0