diff --git a/Dockerfile b/Dockerfile
index 9cfcbbb..62431e6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,6 @@
-# hadolint ignore=DL3007
-FROM jcabillot/opencode:latest
+# `vX.Y.Z-latest` = the vX.Y.Z release rebuilt nightly by perso/opencode's cron job
+# (fresh Debian/npm packages); the bare `latest` tag stays frozen at the last release.
+FROM jcabillot/opencode:v0.0.60-latest
 
 ARG OPENCHAMBER_WEB_VERSION=2.3.2