diff --git a/infra/docker/api.Dockerfile b/infra/docker/api.Dockerfile
index a72535b..da51bb8 100644
--- a/infra/docker/api.Dockerfile
+++ b/infra/docker/api.Dockerfile
@@ -6,7 +6,7 @@
 # =============================================================================
 ARG PYTHON_VERSION=3.12
 
-FROM node:22-bookworm-slim AS node-runtime
+FROM node:25-bookworm-slim AS node-runtime
 
 FROM python:${PYTHON_VERSION}-slim AS base
 ENV PYTHONUNBUFFERED=1 \
diff --git a/infra/docker/web.Dockerfile b/infra/docker/web.Dockerfile
index e542303..fef7b11 100644
--- a/infra/docker/web.Dockerfile
+++ b/infra/docker/web.Dockerfile
@@ -4,7 +4,7 @@
 # Multi-stage: `dev` (hot reload, used by compose) and non-root `runner` (prod).
 # Build context is the REPO ROOT:  docker build -f infra/docker/web.Dockerfile .
 # =============================================================================
-FROM node:22-alpine AS base
+FROM node:25-alpine AS base
 RUN corepack enable
 WORKDIR /app