diff --git a/Dockerfile b/Dockerfile
index 76b52fd..5668f4e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 # Two-stage build: builder installs toolchains, runtime copies only artifacts.
 
 # --- Stage 1: Builder ---
-FROM ubuntu:24.04@sha256:d1e2e92c075e5ca139d51a140fff46f84315c0fdce203eab2807c7e495eff4f9 AS builder
+FROM ubuntu:24.04@sha256:186072bba1b2f436cbb91ef2567abca677337cfc786c86e107d25b7072feef0c AS builder
 
 # Prevent interactive prompts during package installation.
 ENV DEBIAN_FRONTEND=noninteractive
@@ -56,7 +56,7 @@ RUN git clone --depth=1 https://github.com/ohmyzsh/ohmyzsh.git /root/.oh-my-zsh
         /root/.oh-my-zsh/custom/plugins/zsh-autosuggestions
 
 # --- Stage 2: Runtime ---
-FROM ubuntu:24.04@sha256:d1e2e92c075e5ca139d51a140fff46f84315c0fdce203eab2807c7e495eff4f9
+FROM ubuntu:24.04@sha256:186072bba1b2f436cbb91ef2567abca677337cfc786c86e107d25b7072feef0c
 
 ARG DEVBOX_VERSION=0.3.0
 LABEL org.opencontainers.image.title="devbox-agent" \