diff --git a/Dockerfile b/Dockerfile
index 84f6a2e..fe95e38 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build context is this repository root. No consumer-repository files are used.
-FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS console
+FROM node:25-alpine@sha256:bdf2cca6fe3dabd014ea60163eca3f0f7015fbd5c7ee1b0e9ccb4ced6eb02ef4 AS console
 WORKDIR /build
 # Keep lockfiles in their own layer: frontend-only source changes need not reinstall dependencies.
 COPY console/package.json console/package-lock.json ./