diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 3b535c81..800b254c 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -123,4 +123,4 @@ jobs:
           labels: ${{ steps.meta-caged.outputs.labels }}
           build-args: |
             BUILD_HASH=${{ steps.build_hash.outputs.COMMIT_SHA }}
-            BASE_IMAGE=platformatic/node-caged:25-alpine
+            BASE_IMAGE=platformatic/node-caged:26.12.1-alpine@sha256:fe8ec90570374d012cc8a61a5f19e7fadd8621b97f9690126de15425549ae02f
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7338d989..c223fb82 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: lts/*
+          node-version: '24.22.1'
 
       - name: ⬆️ Bump version
         if: github.event_name == 'workflow_dispatch'
@@ -160,7 +160,7 @@ jobs:
           tags: ${{ steps.meta-caged.outputs.tags }}
           labels: ${{ steps.meta-caged.outputs.labels }}
           build-args: |
-            BASE_IMAGE=platformatic/node-caged:25-alpine
+            BASE_IMAGE=platformatic/node-caged:26.12.1-alpine@sha256:fe8ec90570374d012cc8a61a5f19e7fadd8621b97f9690126de15425549ae02f
 
   deploy-chart:
     name: 🚀 Build and push Helm chart
diff --git a/Dockerfile b/Dockerfile
index 56a1eb51..04f7c8fa 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG BASE_IMAGE=node:25-alpine
+ARG BASE_IMAGE=node:24.22.1-alpine@sha256:6a1c190e17215d844926b0677f4bf87273ff7d5e54db06d3b5b5863ab0b09a3d
 
 FROM ${BASE_IMAGE} AS builder
 
diff --git a/package.json b/package.json
index 7aeca223..7e36573e 100644
--- a/package.json
+++ b/package.json
@@ -4,7 +4,7 @@
   "version": "9.4.2",
   "private": true,
   "engines": {
-    "node": "25",
+    "node": "24.22.1 || 26.12.1",
     "pnpm": "10"
   },
   "scripts": {