diff --git a/apps/ui/Dockerfile.prod b/apps/ui/Dockerfile.prod
index d2a3c00..5c795bc 100644
--- a/apps/ui/Dockerfile.prod
+++ b/apps/ui/Dockerfile.prod
@@ -38,7 +38,7 @@ COPY . .
 RUN bun run build
 
 # ---- Runner ---------------------------------------------------------------
-FROM nginx:1.31-alpine@sha256:8b1e78743a03dbb2c95171cc58639fef29abc8816598e27fb910ed2e621e589a AS runner
+FROM nginx:1.31-alpine@sha256:4a73073bd557c65b759505da037898b61f1be6cbcc3c2c3aeac22d2a470c1752 AS runner
 
 # Non-root user (Kubernetes / OpenShift friendly).
 # nginx writes its pid to /run/nginx.pid by default; that path needs to be