diff --git a/cloud/.node-version b/cloud/.node-version
index 07fcedb931e..b74495a07da 100644
--- a/cloud/.node-version
+++ b/cloud/.node-version
@@ -1,2 +1 @@
-24.22.1
-
+24.22.2
diff --git a/cloud/apps/connector/Dockerfile b/cloud/apps/connector/Dockerfile
index 1eb1c340034..7a6a5901b25 100644
--- a/cloud/apps/connector/Dockerfile
+++ b/cloud/apps/connector/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24.22.1-alpine@sha256:feb76650b7195319268c59cb2d419c732d6c499b13bf5296f16ab59eb1f0a4f3 AS build
+FROM node:24.22.2-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS build
 WORKDIR /app
 ENV PATH="/opt/pnpm/node_modules/.bin:$PATH"
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml tsconfig.base.json ./
@@ -19,10 +19,12 @@ RUN pnpm --filter @orca-cloud/postgres-schema build && pnpm --filter @orca-cloud
   && pnpm --filter @orca-cloud/connector-contract build && pnpm --filter @orca-cloud/cloud-database build \
   && pnpm --filter @orca-cloud/connector build
 
-FROM node:24.22.1-alpine@sha256:feb76650b7195319268c59cb2d419c732d6c499b13bf5296f16ab59eb1f0a4f3 AS runtime
+FROM node:24.22.2-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS runtime
 ENV NODE_ENV=production
 ENV PORT=8080
 WORKDIR /app
+# Pull Alpine security fixes published after the base image was built.
+RUN apk upgrade --no-cache
 COPY --from=build /opt/pnpm /opt/pnpm
 ENV PATH="/opt/pnpm/node_modules/.bin:$PATH"
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
diff --git a/cloud/apps/push/Dockerfile b/cloud/apps/push/Dockerfile
index 5a2c57ca61a..1f03c668bff 100644
--- a/cloud/apps/push/Dockerfile
+++ b/cloud/apps/push/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24.22.1-alpine@sha256:feb76650b7195319268c59cb2d419c732d6c499b13bf5296f16ab59eb1f0a4f3 AS build
+FROM node:24.22.2-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS build
 WORKDIR /app
 ENV PATH="/opt/pnpm/node_modules/.bin:$PATH"
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml tsconfig.base.json ./
@@ -17,10 +17,12 @@ RUN pnpm --filter @orca-cloud/postgres-schema build && pnpm --filter @orca-cloud
   && pnpm --filter @orca-cloud/cloud-database build \
   && pnpm --filter @orca-cloud/push build
 
-FROM node:24.22.1-alpine@sha256:feb76650b7195319268c59cb2d419c732d6c499b13bf5296f16ab59eb1f0a4f3 AS runtime
+FROM node:24.22.2-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS runtime
 ENV NODE_ENV=production
 ENV PORT=8080
 WORKDIR /app
+# Pull Alpine security fixes published after the base image was built.
+RUN apk upgrade --no-cache
 COPY --from=build /opt/pnpm /opt/pnpm
 ENV PATH="/opt/pnpm/node_modules/.bin:$PATH"
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
diff --git a/cloud/apps/relay/Dockerfile b/cloud/apps/relay/Dockerfile
index 72c05599ff0..1c0e86af8cb 100644
--- a/cloud/apps/relay/Dockerfile
+++ b/cloud/apps/relay/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:24.22.1-alpine@sha256:feb76650b7195319268c59cb2d419c732d6c499b13bf5296f16ab59eb1f0a4f3 AS build
+FROM node:24.22.2-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS build
 WORKDIR /app
 ENV PATH="/opt/pnpm/node_modules/.bin:$PATH"
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml tsconfig.base.json ./
@@ -13,10 +13,12 @@ COPY apps/relay apps/relay
 COPY packages/postgres-schema packages/postgres-schema
 RUN pnpm --filter @orca-cloud/postgres-schema build && pnpm --filter @orca-cloud/relay-contract build && pnpm --filter @orca-cloud/relay build
 
-FROM node:24.22.1-alpine@sha256:feb76650b7195319268c59cb2d419c732d6c499b13bf5296f16ab59eb1f0a4f3 AS runtime
+FROM node:24.22.2-alpine@sha256:8a32c8cf649a49915a66e81e7a609223c708d0adabf288ee3f4077d765542f85 AS runtime
 ENV NODE_ENV=production
 ENV PORT=8080
 WORKDIR /app
+# Pull Alpine security fixes published after the base image was built.
+RUN apk upgrade --no-cache
 COPY --from=build /opt/pnpm /opt/pnpm
 ENV PATH="/opt/pnpm/node_modules/.bin:$PATH"
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./