diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a9b8838..6f4e2b3 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -17,7 +17,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: "25.9.0"
+          node-version: "26.12.1"
       - name: Install pnpm
         run: npm install -g pnpm@11.5.0
       - name: Install dependencies
diff --git a/docker/Dockerfile b/docker/Dockerfile
index 92a95df..e3ab7dd 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker.io/docker/dockerfile:1
 
-FROM node:25.9.0-trixie AS base
+FROM node:26.12.0-trixie@sha256:45a2bf9d9300e9cf47ecb375e38447c140c45ef5fbae869c430475b05b98d86e AS base
 RUN npm install -g pnpm@11.23.0
 WORKDIR /app
 ENV NEXT_TELEMETRY_DISABLED=1
@@ -24,7 +24,7 @@ COPY . .
 RUN pnpm run "build:${NEXT_BUILD_MODE}"
 
 # 3. Lightweight production image with standalone output only
-FROM node:25.9.0-trixie AS runner
+FROM node:26.12.0-trixie@sha256:45a2bf9d9300e9cf47ecb375e38447c140c45ef5fbae869c430475b05b98d86e AS runner
 WORKDIR /app
 
 ENV NODE_ENV=production
diff --git a/docker/dev.Dockerfile b/docker/dev.Dockerfile
index 8a3681c..cbd0cb0 100644
--- a/docker/dev.Dockerfile
+++ b/docker/dev.Dockerfile
@@ -1,4 +1,4 @@
-FROM node:25.9.0-trixie AS base
+FROM node:26.12.0-trixie@sha256:45a2bf9d9300e9cf47ecb375e38447c140c45ef5fbae869c430475b05b98d86e AS base
 
 RUN npm install -g pnpm@11.23.0