From 51d6a5c4f5f6502431880fd7f365235af2ff7eca Mon Sep 17 00:00:00 2001
From: RSI smoke <rsi-smoke@example.invalid>
Date: Thu, 22 Oct 2026 14:37:01 -0600
Subject: [PATCH] fix(security): refresh certificate trust and build tools

---
 docker/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index ad7bd4b..ffdae59 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -30,7 +30,7 @@
 #     needs no Docker.
 # ---------------------------------------------------------------------------
 
-FROM node:22-bookworm-slim
+FROM node:22.23.4-bookworm-slim
 
 # git: the orchestration path (worktree spawn / checkpoints / reviewers)
 # shells out to git constantly. ca-certificates: HTTPS for OpenRouter + npm.