diff --git a/sandbox/.devcontainer/Dockerfile b/sandbox/.devcontainer/Dockerfile
index fe557dc..2d99f53 100644
--- a/sandbox/.devcontainer/Dockerfile
+++ b/sandbox/.devcontainer/Dockerfile
@@ -17,7 +17,7 @@
 # git push token / ssh signing socket is forwarded. Commit & push via the
 # dedicated `git-agent` sandbox; this box is for editing and running code.
 
-FROM debian:bookworm-slim@sha256:60eac759739651111db372c07be67863818726f754804b8707c90979bda511df
+FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818
 
 ARG TZ=UTC
 ENV TZ="$TZ"