diff --git a/Dockerfile b/Dockerfile
index b05dcc7..960522f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -108,7 +108,7 @@ ENTRYPOINT ["zerobuild"]
 CMD ["gateway"]
 
 # ── Stage 3: Production Runtime (Distroless) ─────────────────
-FROM gcr.io/distroless/cc-debian13:nonroot@sha256:4cf9e68a5cbd8c9623480b41d5ed6052f028c44cc29f91b21590613ab8bec824 AS release
+FROM gcr.io/distroless/cc-debian13:nonroot@sha256:9c4fe2381c2e6d53c4cfdefeff6edbd2a67ec7713e2c3ca6653806cbdbf27a1e AS release
 
 COPY --from=builder /app/zerobuild /usr/local/bin/zerobuild
 COPY --from=builder /zerobuild-data /zerobuild-data