diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f64ae37..2cab1fc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -199,7 +199,7 @@ jobs:
           # The node image of .github/workflows/worker.yml. Renovate moves
           # the two in one pull request (group "node image").
           # tag: 24-alpine
-          IMAGE: docker.io/library/node:24-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1
+          IMAGE: docker.io/library/node:24-alpine@sha256:44fce696f38ba8c987c4db89954051000bbd05ffd8d8659ba15ed4a8602e937f
         run: |
           docker run --rm -v "$PWD:/work:ro" -v "$RUNNER_TEMP/tools:/tools:ro" -w /work \
             -e TESTS_REQUIRE_TOOLS='node bash' "$IMAGE" \
diff --git a/.github/workflows/worker.yml b/.github/workflows/worker.yml
index 43c82e2..081c528 100644
--- a/.github/workflows/worker.yml
+++ b/.github/workflows/worker.yml
@@ -40,7 +40,7 @@ jobs:
       - name: Worker tests in the pinned node image
         run: |
           # tag: 24-alpine
-          image=docker.io/library/node:24-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1
+          image=docker.io/library/node:24-alpine@sha256:44fce696f38ba8c987c4db89954051000bbd05ffd8d8659ba15ed4a8602e937f
           docker run --rm -v "$PWD:/work:ro" -w /work "$image" node --test 'worker/test/*.test.js'
 
   deploy: