diff --git a/apps/frontend/package.json b/apps/frontend/package.json
index 3db42dd..d8586a1 100644
--- a/apps/frontend/package.json
+++ b/apps/frontend/package.json
@@ -16,7 +16,7 @@
   "devDependencies": {
     "@rsbuild/core": "^2.1.5",
     "@rsbuild/plugin-react": "^2.1.0",
-    "@types/node": "^22",
+    "@types/node": "^26",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "typescript": "^7.0.2"
diff --git a/bun.lock b/bun.lock
index 4652a35..e0333a2 100644
--- a/bun.lock
+++ b/bun.lock
@@ -36,7 +36,7 @@
       "devDependencies": {
         "@rsbuild/core": "^2.1.5",
         "@rsbuild/plugin-react": "^2.1.0",
-        "@types/node": "^22",
+        "@types/node": "^26",
         "@types/react": "^19",
         "@types/react-dom": "^19",
         "typescript": "^7.0.2",
@@ -401,7 +401,7 @@
 
     "@tybys/wasm-util": ["@tybys/wasm-util@0.10.3", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg=="],
 
-    "@types/node": ["@types/node@22.20.1", "", { "dependencies": { "undici-types": "~6.21.0" } }, "sha512-EANqOCF9QFyra+4pfxUcX9STKJpCLjMbObVzljIJomAWSnuSIEAvyzEU53GaajbXJEgdh0iEcPL+DGvpUd4k1Q=="],
+    "@types/node": ["@types/node@26.1.1", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw=="],
 
     "@types/react": ["@types/react@19.2.17", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-MXfmqaVPEVgkBT/aY0aGCkRWWtByiYQXo3xdQ8r5RzuFrPiRn8Gar2tQdXSUQ2GKV3bkXckek89V8wQBY2Q/Aw=="],
 
@@ -639,7 +639,7 @@
 
     "undici": ["undici@7.28.0", "", {}, "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA=="],
 
-    "undici-types": ["undici-types@6.21.0", "", {}, "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="],
+    "undici-types": ["undici-types@8.3.0", "", {}, "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ=="],
 
     "unenv": ["unenv@2.0.0-rc.24", "", { "dependencies": { "pathe": "^2.0.3" } }, "sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw=="],
 
diff --git a/devenv.nix b/devenv.nix
index ccb9501..4c48603 100644
--- a/devenv.nix
+++ b/devenv.nix
@@ -4,6 +4,7 @@
 
   packages = with pkgs; [
     bun
+    nodejs_26
     zsh
     just
     oxlint
@@ -16,6 +17,9 @@
   # Removed: nodejs_22            (js module → nodejs-slim)
   #          typescript            (bunx tsc)
   #          typescript-language-server  (js LSP module)
+  # Node is pinned to nodejs_26 via the packages list (the nodejs submodule does
+  # not honour languages.javascript.package) so the runtime version is tracked
+  # instead of arriving via a transitive dep.
 
   cachix.pull = [ "devenv" ];