diff --git a/frontend/Dockerfile b/frontend/Dockerfile
index 95ca7d9..1bd46dc 100644
--- a/frontend/Dockerfile
+++ b/frontend/Dockerfile
@@ -1,5 +1,5 @@
 # Build inputs are digest-pinned so a tag cannot silently change the toolchain used for a release.
-FROM node:24-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd AS base
+FROM node:24-alpine@sha256:f70403e87646dc51b45295f4b8b70cdad0b63d2297c4c9899119b03f7af7a6b3 AS base
 WORKDIR /app
 COPY package.json package-lock.json ./
 RUN npm ci