diff --git a/Dockerfile b/Dockerfile
index af5aac4e..cb58dec3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,6 +33,29 @@ RUN printf "server {\n\
     server_name localhost;\n\
     root /usr/share/nginx/html;\n\
     index index.html;\n\
+\n\
+    # PWA: service worker + precache manifest must not be long-cached or browsers never see\n\
+    # updates (VersionUpdateBanner stays hidden; About shows an old APP_VERSION from precache).\n\
+    location = /sw.js {\n\
+        add_header Cache-Control \"no-cache, no-store, must-revalidate\";\n\
+        add_header Pragma \"no-cache\";\n\
+        expires off;\n\
+        try_files \$uri =404;\n\
+    }\n\
+\n\
+    location ~* ^/workbox-[^/]+\\.js\$ {\n\
+        add_header Cache-Control \"no-cache, no-store, must-revalidate\";\n\
+        add_header Pragma \"no-cache\";\n\
+        expires off;\n\
+        try_files \$uri =404;\n\
+    }\n\
+\n\
+    location = /index.html {\n\
+        add_header Cache-Control \"no-cache, no-store, must-revalidate\";\n\
+        add_header Pragma \"no-cache\";\n\
+        expires off;\n\
+        try_files \$uri =404;\n\
+    }\n\
 \n\
     # Detect social media scrapers and other bots\n\
     set \$is_scraper 0;\n\
diff --git a/package-lock.json b/package-lock.json
index 8f989495..daf08ab8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "imwald",
-  "version": "22.4.0",
+  "version": "22.4.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "imwald",
-      "version": "22.4.0",
+      "version": "22.4.1",
       "license": "MIT",
       "dependencies": {
         "@asciidoctor/core": "^3.0.4",
@@ -6958,15 +6958,15 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.13.6",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.6.tgz",
-      "integrity": "sha512-ChTCHMouEe2kn713WHbQGcuYrr6fXTBiu460OTwWrWob16g1bXn4vtz07Ope7ewMozJAnEquLk5lWQWtBig9DQ==",
+      "version": "1.15.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.0.tgz",
+      "integrity": "sha512-wWyJDlAatxk30ZJer+GeCWS209sA42X+N5jU2jy6oHTp7ufw8uzUTVFBX9+wTfAlhiJXGS0Bq7X6efruWjuK9Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.11",
         "form-data": "^4.0.5",
-        "proxy-from-env": "^1.1.0"
+        "proxy-from-env": "^2.1.0"
       }
     },
     "node_modules/babel-plugin-polyfill-corejs2": {
@@ -12747,11 +12747,14 @@
       }
     },
     "node_modules/proxy-from-env": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
-      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",
+      "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
     },
     "node_modules/pump": {
       "version": "3.0.4",
diff --git a/package.json b/package.json
index 206fe9b4..6e0c5e52 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "imwald",
-  "version": "22.4.0",
+  "version": "22.4.1",
   "description": "Imwald — a user-friendly Nostr client focused on relay feed browsing, publications, and relay discovery",
   "private": true,
   "type": "module",