diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ca5964cd..adc989aa 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: '24.16.0'
 
diff --git a/Dockerfile.dev b/Dockerfile.dev
index 5effc3f8..268c65c4 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1.24
-FROM node:24.15.0-slim
+FROM node:24.16.0-slim@sha256:242549cd46785b480c832479a730f4f2a20865d61ea2e404fdb2a5c3d3b73ecf
 
 ENV PNPM_HOME=/pnpm
 ENV PATH=$PNPM_HOME:$PATH
diff --git a/Dockerfile.prod b/Dockerfile.prod
index 310825bc..363205ec 100644
--- a/Dockerfile.prod
+++ b/Dockerfile.prod
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1.24
 ARG CAESAR_BUILD_VERSION
 
-FROM node:24.15.0-slim AS builder
+FROM node:24.16.0-slim@sha256:242549cd46785b480c832479a730f4f2a20865d61ea2e404fdb2a5c3d3b73ecf AS builder
 ARG CAESAR_BUILD_VERSION
 ENV CAESAR_BUILD_VERSION=${CAESAR_BUILD_VERSION}
 ENV PNPM_HOME=/pnpm
diff --git a/package.json b/package.json
index 5f13066b..fa2dd3f9 100644
--- a/package.json
+++ b/package.json
@@ -2,10 +2,10 @@
   "name": "caesar",
   "version": "0.0.0",
   "private": true,
-  "packageManager": "pnpm@10.33.4",
+  "packageManager": "pnpm@10.34.1",
   "engines": {
-    "node": ">=24.15.0",
-    "pnpm": ">=10.33.4"
+    "node": ">=24.16.0",
+    "pnpm": ">=10.34.1"
   },
   "scripts": {
     "test": "pnpm -r --if-present test",