diff --git a/dockerfiles/altair/Dockerfile b/dockerfiles/altair/Dockerfile
index 9a40681..295cb8e 100644
--- a/dockerfiles/altair/Dockerfile
+++ b/dockerfiles/altair/Dockerfile
@@ -2,12 +2,12 @@
 # Format: {COMPONENT}_VERSION="x.y.z" with standardized renovate comments
 
 # renovate: datasource=docker depName=node
-ARG NODE_VERSION="22.9.0"
+ARG NODE_VERSION="24.11.1"
 # renovate: datasource=git-refs depName=altair-graphql/altair
 ARG ALTAIR_VERSION="8.1.3"
 
 # First stage: Clone the Altair repository
-FROM alpine/git AS repo
+FROM alpine/git@sha256:0c14954d14f945e5ab99ff0669a8562af678c005f48a57a00cbaf39f0dd0539a AS repo
 WORKDIR /altair
 ARG ALTAIR_VERSION
 RUN git clone --depth 1 --branch v${ALTAIR_VERSION} https://github.com/altair-graphql/altair.git .