diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ca33217..ceaebfc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -20,7 +20,7 @@ jobs:
 
       - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
-          node-version: 20
+          node-version: 26
           registry-url: https://registry.npmjs.org
 
       - name: Install API dependencies
diff --git a/api/Dockerfile b/api/Dockerfile
index 06c0719..9c845f8 100644
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -1,6 +1,6 @@
 # Digest-pinned for reproducible builds (node:20-alpine index digest verified
 # against the registry via `docker buildx imagetools inspect node:20-alpine`).
-FROM node:20-alpine@sha256:fb4cd12c85ee03686f6af5362a0b0d56d50c58a04632e6c0fb8363f609372293
+FROM node:26-alpine@sha256:c6ad9e9c1d80f6eb607c26b4b0a132ff7a2344fad1c78ea3baa2a7d4c8de6d94
 WORKDIR /app
 COPY package*.json ./
 RUN npm ci --omit=dev