diff --git a/Dockerfile b/Dockerfile
index 8bb3545..1beb73c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 
 # Build stage: compile TypeScript with the dev toolchain.
-FROM node:22-alpine AS build
+FROM node:25-alpine AS build
 WORKDIR /app
 COPY package.json package-lock.json ./
 RUN npm ci
@@ -11,7 +11,7 @@ COPY test ./test
 RUN npx tsc -p . && npm prune --omit=dev
 
 # Runtime stage: compiled output only, running as an unprivileged user.
-FROM node:22-alpine
+FROM node:25-alpine
 ENV NODE_ENV=production
 WORKDIR /app
 COPY --from=build /app/package.json ./