diff --git a/Dockerfile b/Dockerfile
index d9e23866..df4a06b1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,7 +12,7 @@
 #   - Ex: hexpm/elixir:1.17.2-erlang-27.1-debian-bullseye-20240904-slim
 #
 ARG ELIXIR_VERSION=1.20.0-rc.6
-ARG OTP_VERSION=28.5
+ARG OTP_VERSION=28.5.0.1
 ARG DEBIAN_VERSION=trixie-20260518-slim
 
 ARG BUILDER_IMAGE="hexpm/elixir:${ELIXIR_VERSION}-erlang-${OTP_VERSION}-debian-${DEBIAN_VERSION}"
diff --git a/docs/production-infrastructure.md b/docs/production-infrastructure.md
index 5fef734f..15335c08 100644
--- a/docs/production-infrastructure.md
+++ b/docs/production-infrastructure.md
@@ -28,7 +28,7 @@ push via GitHub Actions.
 
 The Docker image is a multi-stage build:
 
-1. **Builder** — `hexpm/elixir:1.20.0-rc.6-erlang-28.5-debian-trixie-20260518-slim` with
+1. **Builder** — `hexpm/elixir:1.20.0-rc.6-erlang-28.5.0.1-debian-trixie-20260518-slim` with
    Node.js 26, compiles deps, builds assets (`mix assets.deploy`), generates an OTP release.
 2. **Runner** — `debian:trixie-20260518-slim` with minimal runtime deps (`libstdc++6`,
    `openssl`, `libncurses6`, `ca-certificates`). Runs as unprivileged `nobody` user.
diff --git a/mise.lock b/mise.lock
index 83e74759..e6932325 100644
--- a/mise.lock
+++ b/mise.lock
@@ -8,9 +8,12 @@ backend = "core:elixir"
 checksum = "blake3:c929482ef634fa41d7a8fe3a3772e046c05389236eeadade6acfa2f73e9c57bf"
 
 [[tools.erlang]]
-version = "28.5"
+version = "28.5.0.1"
 backend = "core:erlang"
 
+[tools.erlang."platforms.macos-arm64"]
+checksum = "blake3:bb521a30c24d9278d9f0282336747f6cf9dc4ac52cd5a6cba15fb1358325ae6d"
+
 [[tools.fd]]
 version = "10.4.2"
 backend = "aqua:sharkdp/fd"
diff --git a/mise.toml b/mise.toml
index e6504b0e..be4dc954 100644
--- a/mise.toml
+++ b/mise.toml
@@ -29,7 +29,7 @@ HURL_VARIABLE_coolify_token = 'change-me'
 
 [tools]
 elixir = "1.20.0-rc.6-otp-28"
-erlang = "28.5"
+erlang = "28.5.0.1"
 node = "26.0.0"
 hurl = '8.0.0'
 sqlite = 'latest'