diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 33cd8269..e7cd85b3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -199,7 +199,7 @@ jobs:
           # The node image of .github/workflows/worker.yml. Renovate moves
           # the two in one pull request (group "node image").
           # tag: 24-alpine
-          IMAGE: docker.io/library/node:24-alpine@sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
+          IMAGE: docker.io/library/node:24-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85
         run: |
           docker run --rm -v "$PWD:/work:ro" -v "$RUNNER_TEMP/tools:/tools:ro" -w /work \
             -e TESTS_REQUIRE_TOOLS='node bash' "$IMAGE" \
diff --git a/.github/workflows/worker.yml b/.github/workflows/worker.yml
index 01bea282..ab535661 100644
--- a/.github/workflows/worker.yml
+++ b/.github/workflows/worker.yml
@@ -39,5 +39,5 @@ jobs:
       - name: Worker tests in the pinned node image
         run: |
           # tag: 24-alpine
-          image=docker.io/library/node:24-alpine@sha256:06d7adf3e0ef61a13f1d28682726366f97a15aa1888c934d3ecec86c33918b53
+          image=docker.io/library/node:24-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85
           docker run --rm -v "$PWD:/work:ro" -w /work "$image" node --test 'worker/test/*.test.js'