diff --git a/Containerfile.acm.konflux b/Containerfile.acm.konflux
index 5932ebaaf3..a8db90c8e4 100644
--- a/Containerfile.acm.konflux
+++ b/Containerfile.acm.konflux
@@ -1,4 +1,4 @@
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 AS builder
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e AS builder
 
 USER root
 ENV NPM_CONFIG_NODEDIR=/usr
@@ -16,7 +16,7 @@ RUN cd frontend && npm run build:plugin:acm
 # Remove build-time dependencies before packaging
 RUN cd backend && npm ci --omit=optional --only=production --unsafe-perm --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e
 
 WORKDIR /app
 ENV NODE_ENV production
diff --git a/Containerfile.mce.konflux b/Containerfile.mce.konflux
index 5620ebd0d0..07d50bb4e6 100644
--- a/Containerfile.mce.konflux
+++ b/Containerfile.mce.konflux
@@ -1,4 +1,4 @@
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 AS builder
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e AS builder
 
 USER root
 ENV NPM_CONFIG_NODEDIR=/usr
@@ -16,7 +16,7 @@ RUN cd frontend && npm run build:plugin:mce
 # Remove build-time dependencies before packaging
 RUN cd backend && npm ci --omit=optional --only=production --unsafe-perm --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e
 
 WORKDIR /app
 ENV NODE_ENV production
diff --git a/Dockerfile.mce.prow b/Dockerfile.mce.prow
index 8cb1aa2366..a47cb73c36 100644
--- a/Dockerfile.mce.prow
+++ b/Dockerfile.mce.prow
@@ -1,12 +1,12 @@
 # Copyright Contributors to the Open Cluster Management project
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 as dynamic-plugin
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e as dynamic-plugin
 WORKDIR /app/frontend
 COPY ./frontend .
 RUN npm ci --legacy-peer-deps
 RUN npm run build:plugin:mce
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 as backend
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e as backend
 WORKDIR /app/backend
 # Copy only package.json and package-lock.json so that the docker layer cache only changes if those change
 # This will cause the npm ci to only rerun if the package.json or package-lock.json changes
@@ -15,12 +15,12 @@ RUN npm ci --omit=optional --ignore-scripts
 COPY ./backend .
 RUN npm run build
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 as production
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e as production
 WORKDIR /app/backend
 COPY ./backend/package-lock.json ./backend/package.json ./
 RUN npm ci --omit=optional --only=production --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e
 WORKDIR /app
 ENV NODE_ENV production
 COPY --from=production /app/backend/node_modules ./node_modules
diff --git a/Dockerfile.prow b/Dockerfile.prow
index 2eeaa4c682..ff32d8d221 100644
--- a/Dockerfile.prow
+++ b/Dockerfile.prow
@@ -1,12 +1,12 @@
 # Copyright Contributors to the Open Cluster Management project
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 as dynamic-plugin
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e as dynamic-plugin
 WORKDIR /app/frontend
 COPY ./frontend .
 RUN npm ci --legacy-peer-deps
 RUN npm run build:plugin:acm
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 as backend
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e as backend
 WORKDIR /app/backend
 # Copy only package.json and package-lock.json so that the docker layer cache only changes if those change
 # This will cause the npm ci to only rerun if the package.json or package-lock.json changes
@@ -15,12 +15,12 @@ RUN npm ci --omit=optional --ignore-scripts
 COPY ./backend .
 RUN npm run build
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58 as production
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e as production
 WORKDIR /app/backend
 COPY ./backend/package-lock.json ./backend/package.json ./
 RUN npm ci --omit=optional --only=production --ignore-scripts
 
-FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:8e253ccce2a7e8767d5ffeb6b82fcd1c0fc5abaea7a6d7f9c62dc83691b1de58
+FROM registry.redhat.io/ubi9/nodejs-20-minimal@sha256:87f2eb0ce06e922a7629fa94fad62ed4e6be05931852b779269e0692282a099e
 WORKDIR /app
 ENV NODE_ENV production
 COPY --from=production /app/backend/node_modules ./node_modules