cpojer · Oct 22, 2026 · Oct 22, 2026
diff --git a/.node-version b/.node-version
@@ -1 +1 @@
-24.21.0
+24.22.1
diff --git a/docs/guide/sandboxes.md b/docs/guide/sandboxes.md
@@ -120,8 +120,8 @@ See the [configuration reference](../reference/config.md#sandbox) for binding na
 Custom images must include the helper matching Void's installed Sandbox SDK version. The SDK image supplies this binary, but is not a runnable environment itself:
 
 ```dockerfile
-FROM node:26.10.0-trixie-slim
-COPY --from=docker.io/cloudflare/sandbox:1.0.1 /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim
+FROM node:26.12.1-trixie-slim
+COPY --from=docker.io/cloudflare/sandbox:1.0.2 /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim
 WORKDIR /workspace
 CMD ["sleep", "infinity"]
 ```

diff --git a/packages/void/sandbox.Dockerfile b/packages/void/sandbox.Dockerfile
@@ -1,4 +1,4 @@
-FROM node:26.10.0-trixie-slim
+FROM node:26.12.1-trixie-slim
 COPY --from=docker.io/cloudflare/sandbox:1.0.2 /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim
 WORKDIR /workspace
 CMD ["sleep", "infinity"]
diff --git a/platform/packages/api/README.md b/platform/packages/api/README.md
@@ -69,7 +69,7 @@ src/
     routes/                   # Admin page shells, audited form actions, and log polling
     middleware/auth.ts        # Admin cookie auth + same-origin guard on every write
 container/
-  Dockerfile                  # node:26-slim + pinned corepack + bun build image
+  Dockerfile                  # node:26.12.1-slim + pinned corepack + bun build image
   build-agent.mjs             # Downloads source tarball, installs deps, runs `npx void deploy`
 drizzle/
   0000_*.sql

diff --git a/platform/packages/api/container/Dockerfile b/platform/packages/api/container/Dockerfile
@@ -9,9 +9,9 @@
 # Env vars injected by the DO at start():
 #   BUILD_ID, PROJECT_ID, PROJECT_SLUG, SOURCE_TARBALL_URL, SOURCE_TOKEN,
 #   VOID_TOKEN, VOID_API_URL, VOID_PROJECT, DO_LOG_URL, AGENT_TOKEN
-FROM node:26-slim
+FROM node:26.12.1-slim
 
-# node:26-slim ships `tar` + `gzip` but is otherwise minimal. We add:
+# node:26.12.1-slim ships `tar` + `gzip` but is otherwise minimal. We add:
 #   ca-certificates       HTTPS for the tarball fetch, npm/bun installs, deploy upload
 #   curl                  documented fallback download path + the bun install script
 #   unzip                 required by the bun install script
@@ -59,7 +59,7 @@ RUN curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" \
 # unprivileged install has somewhere writable — build-agent.mjs points the child's
 # cache env vars (builderCacheEnv) at these paths. /tmp/build is the agent's
 # WORK_DIR parent; chowning it lets the builder own the extracted tree.
-# node:26-slim ships a built-in `node` user that already owns uid/gid 1000, so
+# node:26.12.1-slim ships a built-in `node` user that already owns uid/gid 1000, so
 # it must be removed first or the useradd fails with "UID 1000 is not unique"
 # and the image cannot build. Nothing here runs as `node`.
 RUN userdel node \
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		24.21.0
		24.22.1
Comment thread Brooooooklyn marked this conversation as resolved.