diff --git a/apps/ui/Dockerfile b/apps/ui/Dockerfile
index a9345b1..98fd757 100644
--- a/apps/ui/Dockerfile
+++ b/apps/ui/Dockerfile
@@ -1,4 +1,4 @@
-FROM oven/bun:1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0
+FROM oven/bun:1.4.0-alpine@sha256:07235578f79ef8c6f97d94aee7938e76f5cdba5f21ae5dbfdd3d3d38058437eb
 
 WORKDIR /app
 
diff --git a/apps/ui/Dockerfile.prod b/apps/ui/Dockerfile.prod
index 5c795bc..992efdb 100644
--- a/apps/ui/Dockerfile.prod
+++ b/apps/ui/Dockerfile.prod
@@ -3,7 +3,7 @@
 # the top + cache mounts for `bun install`; we keep the portable version.)
 
 # ---- Builder ---------------------------------------------------------------
-FROM oven/bun:1.3.14-alpine@sha256:5acc90a93e91ff07bf72aa90a7c9f0fa189765aec90b47bdbf2152d2196383c0 AS builder
+FROM oven/bun:1.4.0-alpine@sha256:07235578f79ef8c6f97d94aee7938e76f5cdba5f21ae5dbfdd3d3d38058437eb AS builder
 
 WORKDIR /app
 
@@ -38,7 +38,7 @@ COPY . .
 RUN bun run build
 
 # ---- Runner ---------------------------------------------------------------
-FROM nginx:1.31-alpine@sha256:4a73073bd557c65b759505da037898b61f1be6cbcc3c2c3aeac22d2a470c1752 AS runner
+FROM nginx:1.31-alpine@sha256:db35bfc6b2951e7f8a72db5db120288c127ffaeeb4a6d4b95a26fead017d5913 AS runner
 
 # Non-root user (Kubernetes / OpenShift friendly).
 # nginx writes its pid to /run/nginx.pid by default; that path needs to be