diff --git a/python/Dockerfile.full b/python/Dockerfile.full
index 8078f1873..70841c226 100644
--- a/python/Dockerfile.full
+++ b/python/Dockerfile.full
@@ -10,10 +10,10 @@ ARG UV_VERSION=0.11.15
 FROM ghcr.io/astral-sh/uv:${UV_VERSION} AS uv-bin
 
 ### STAGE 2: base os + sandbox runtime
-# node:20-bookworm-slim is a digest-pinnable debian-bookworm base that ships Node 20 (the
+# node:24-bookworm-slim is a digest-pinnable debian-bookworm base that ships Node 24 (the
 # sandbox-runtime requires node >= 20; debian's own nodejs package is still on 18).
-# Digest = multi-arch index resolved via `docker buildx imagetools inspect node:20-bookworm-slim`.
-FROM node:26-bookworm-slim@sha256:e999d087492c7227c85adc70574cf9d3cce774c3e6d7b8dfe473ee6b142c8f2c AS python-os
+# Digest = multi-arch index resolved via `docker buildx imagetools inspect node:24-bookworm-slim`.
+FROM node:24-bookworm-slim@sha256:6f7b03f7c2c8e2e784dcf9295400527b9b1270fd37b7e9a7285cf83b6951452d AS python-os
 ARG TOOLS_PYTHON_VERSION=3.13
 
 ENV LANG=C.UTF-8