diff --git a/runner/Dockerfile b/runner/Dockerfile
index 50bb35a..ee788a7 100644
--- a/runner/Dockerfile
+++ b/runner/Dockerfile
@@ -212,7 +212,7 @@ RUN for binary in /out/*; do \
 # database, image-processing, DNS, and web-server development stacks. Agents
 # need a native compiler toolchain, not that entire transitive surface, so start
 # from the official slim variant and install the small explicit toolchain below.
-FROM node:24-trixie-slim@sha256:50c3b2f6988dfc307b86e5301d69611af31f4789bdf232863b07d3b02fe55ae0 AS runner-base
+FROM node:26-trixie-slim@sha256:c0753125a3789977aefe869cbebccf70e3cfd7ea84ca48547458f02e4f1d7146 AS runner-base
 
 # The digest-pinned Node base can lag Debian security uploads, while BuildKit
 # correctly caches an earlier apt upgrade against the unchanged base digest.