From 2e8cb4603a34b2871544ab1298ce3d430389a02e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 4 Apr 2026 15:42:41 +0000
Subject: [PATCH] chore(deps): bump the docker-images group across 1 directory
 with 2 updates

Dependabot couldn't find the original pull request head commit, 180950e086c3ff831383654ed7678cd37ae28804.
---
 Dockerfile                 | 4 ++--
 Dockerfile.sandbox         | 2 +-
 Dockerfile.sandbox-browser | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 3b51860cf6..c81a1a962c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,7 +6,7 @@
 # This stage extracts only the package.json files we need from extensions/,
 # so the main build layer is not invalidated by unrelated extension source changes.
 ARG OPENCLAW_EXTENSIONS=""
-FROM node:22-bookworm@sha256:cd7bcd2e7a1e6f72052feb023c7f6b722205d3fcab7bbcbd2d1bfdab10b1e935 AS ext-deps
+FROM node:22-bookworm@sha256:7e791fc54bd02fc89fd4fb39eb37e5bea753c75679c8022478d81679367d995a AS ext-deps
 ARG OPENCLAW_EXTENSIONS
 COPY extensions /tmp/extensions
 RUN mkdir -p /out && \
@@ -17,7 +17,7 @@ RUN mkdir -p /out && \
       fi; \
     done
 
-FROM node:22-bookworm@sha256:cd7bcd2e7a1e6f72052feb023c7f6b722205d3fcab7bbcbd2d1bfdab10b1e935
+FROM node:22-bookworm@sha256:7e791fc54bd02fc89fd4fb39eb37e5bea753c75679c8022478d81679367d995a
 
 # OCI base-image metadata for downstream image consumers.
 # If you change these annotations, also update:
diff --git a/Dockerfile.sandbox b/Dockerfile.sandbox
index a463d4a102..6cf30dcef5 100644
--- a/Dockerfile.sandbox
+++ b/Dockerfile.sandbox
@@ -1,4 +1,4 @@
-FROM debian:bookworm-slim@sha256:98f4b71de414932439ac6ac690d7060df1f27161073c5036a7553723881bffbe
+FROM debian:bookworm-slim@sha256:f06537653ac770703bc45b4b113475bd402f451e85223f0f2837acbf89ab020a
 
 ENV DEBIAN_FRONTEND=noninteractive
 
diff --git a/Dockerfile.sandbox-browser b/Dockerfile.sandbox-browser
index ec9faf7111..56e516e427 100644
--- a/Dockerfile.sandbox-browser
+++ b/Dockerfile.sandbox-browser
@@ -1,4 +1,4 @@
-FROM debian:bookworm-slim@sha256:98f4b71de414932439ac6ac690d7060df1f27161073c5036a7553723881bffbe
+FROM debian:bookworm-slim@sha256:f06537653ac770703bc45b4b113475bd402f451e85223f0f2837acbf89ab020a
 
 ENV DEBIAN_FRONTEND=noninteractive