From e04ca9e05ca3cb024c73a0901c20c0f004fcf9a2 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Wed, 21 Oct 2026 22:47:12 +0000
Subject: [PATCH] Pin self-host runtime image to node:22.23.4-alpine (Oct 2026
 security release)

Co-authored-by: Aymeric Rabot <Aymericr@users.noreply.github.com>
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 7bd44336d4..661ce8d172 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -21,7 +21,7 @@ ENV PASCAL_PORTABLE_BUILD=1
 RUN ./node_modules/.bin/turbo run build --filter=editor
 RUN cd packages/cli && bun run build && bun run stage-runtime
 
-FROM node:22-alpine
+FROM node:22.23.4-alpine
 WORKDIR /app
 
 # GHCR reads these: the package page links to the repository, shows its