diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index e1c0637..412d63c 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -39,7 +39,8 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 24
+          node-version: '^24.22.1'
+          check-latest: true
 
       - name: Grant execute permission for gradlew
         run: chmod +x gradlew
diff --git a/Dockerfile b/Dockerfile
index 3766f14..9035432 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,6 @@
 # syntax=docker/dockerfile:1
 
+FROM node:24.22.1-bookworm-slim AS node
 FROM eclipse-temurin:17-jdk AS base
 
 RUN apt-get update \
@@ -10,9 +11,10 @@ RUN apt-get update \
        gnupg \
     && rm -rf /var/lib/apt/lists/*
 
-# Install Node.js 24 (LTS)
-RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \
-    && apt-get install -y --no-install-recommends nodejs \
-    && rm -rf /var/lib/apt/lists/*
+# Use the patched official runtime for signature parity tooling.
+COPY --from=node /usr/local/bin/node /usr/local/bin/node
+COPY --from=node /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/npm
+RUN ln -s ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
+    && ln -s ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
 
 WORKDIR /workspace